$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: rACp1ZKZijks0tJZifH4rdg5Ln7SkaFU/9mzeTg/EDk= Subject key identifier: 45:70:F8:CE:93:9A:A4:5C:13:06:17:F0:AA:06:21:AE:66:EA:A4:7C Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 0120 Signing time: Sat 19 Jul 2025 04:56:38 +0000 Manifest this update: Sat 19 Jul 2025 04:56:37 +0000 Manifest next update: Sat 26 Jul 2025 04:56:37 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: dwp1LuwvVBWLWHGpjpEG+I1FDBrzFqBCaCLZu5+NkcQ=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: 92n4boJHjJIj9KtZ2gabfQc0rIkNAgV+GGdiupr7NM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Jul 19 04:56:37 2025 GMT Not After : Jul 26 04:56:37 2025 GMT Subject: CN=687b2585-5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:01:66:69:ec:6e:ee:28:55:99:09:c0:25: c6:cd:72:c0:da:f9:6c:0e:07:07:36:1b:7f:04:c2: f4:b3:3c:b0:d8:12:4f:0b:97:33:a5:5e:f7:86:5e: a8:96:5f:43:a3:1e:02:73:b6:38:eb:8f:85:c8:ae: 1b:d1:54:3c:45:c9:bd:03:45:b5:85:a4:96:f2:e0: 09:5c:fc:a5:0a:ef:87:b0:71:8b:df:95:4f:71:88: 4a:59:57:1d:e0:74:93:23:5a:10:06:f8:90:7e:bc: 10:be:1f:0e:a2:71:88:d1:9c:44:e3:7b:50:60:32: 35:04:aa:52:dd:fa:9a:a9:35:ab:26:be:dc:05:cc: 80:4a:f4:c5:92:6f:3d:7c:7c:03:20:fd:81:ba:10: 12:20:43:c0:8a:6e:5c:04:55:2d:a4:1f:9a:71:8e: 3f:0a:a4:7c:e6:4c:a1:99:7b:3f:05:ab:5a:b3:b5: ee:67:e3:32:5d:33:94:cf:47:c1:72:f6:d7:fa:33: 85:2c:59:09:98:df:8b:18:45:36:1f:a8:ff:a6:4a: 4e:8f:1f:ac:c1:b2:80:de:bd:55:5b:15:ed:e0:c9: 6a:92:fb:95:f0:01:f1:cf:7b:c3:fd:42:9c:ca:b4: f0:36:2f:c7:53:a1:53:74:4d:10:96:72:c6:d9:5f: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:70:F8:CE:93:9A:A4:5C:13:06:17:F0:AA:06:21:AE:66:EA:A4:7C X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:a4:c3:4b:d4:49:7e:f0:14:9b:2c:0b:61:b4:fd:0f:5d: b4:c0:c8:d7:2d:7c:a0:41:cd:fa:29:d0:ab:e8:f1:e5:b0:94: 09:69:c1:f8:fb:f3:67:a8:d3:37:1c:5a:6c:c2:88:58:a2:3a: 2a:41:62:f9:b3:66:1d:53:fe:ff:46:2c:fb:7b:5b:dd:29:14: bc:ac:56:f4:b7:5a:76:b7:11:ba:e9:d4:40:b3:2c:05:54:dc: e4:60:d7:20:89:cb:f7:db:7b:7c:2a:62:0d:1d:e0:9c:91:51: c3:5c:27:f5:28:68:ac:11:f7:d9:d2:5d:07:b9:e6:5f:fa:c1: 20:a7:12:ff:2a:e3:d4:5c:2e:a1:9c:3c:bb:76:4a:0d:8a:4a: 97:c8:6a:f4:9e:f8:6d:4a:18:22:c6:07:c0:e1:1c:92:ce:4d: 61:d2:c4:f7:d1:1e:b9:b9:00:e7:d9:3f:57:28:8b:bf:fd:b4: ef:f6:25:8d:61:4b:68:36:07:6e:6d:56:f7:d3:78:ab:df:c3: 05:19:c5:a9:f6:d2:c4:38:ab:5b:f6:cf:27:43:11:7f:3c:41: 8e:38:4b:1e:63:79:b8:5c:ae:db:91:4a:60:d5:10:a9:c2:0a: 6e:af:c1:35:20:c4:9e:f3:82:f0:97:76:ec:78:2c:ab:1e:a8: 5b:b9:af:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjUwNzE5MDQ1NjM3WhcNMjUwNzI2MDQ1NjM3WjAYMRYwFAYD VQQDEw02ODdiMjU4NS01YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFQBZmnsbu4oVZkJwCXGzXLA2vlsDgcHNht/BML0szyw2BJPC5czpV73hl6o ll9Dox4Cc7Y464+FyK4b0VQ8Rcm9A0W1haSW8uAJXPylCu+HsHGL35VPcYhKWVcd 4HSTI1oQBviQfrwQvh8OonGI0ZxE43tQYDI1BKpS3fqaqTWrJr7cBcyASvTFkm89 fHwDIP2BuhASIEPAim5cBFUtpB+acY4/CqR85kyhmXs/Batas7XuZ+MyXTOUz0fB cvbX+jOFLFkJmN+LGEU2H6j/pkpOjx+swbKA3r1VWxXt4MlqkvuV8AHxz3vD/UKc yrTwNi/HU6FTdE0QlnLG2V9VeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVw+M6T mqRcEwYX8KoGIa5m6qR8MB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL06TDS9RJfvAUmywLYbT9D120wMjXLXygQc36KdCr6PHlsJQJacH4 +/NnqNM3HFpswohYojoqQWL5s2YdU/7/Riz7e1vdKRS8rFb0t1p2txG66dRAsywF VNzkYNcgicv323t8KmINHeCckVHDXCf1KGisEffZ0l0HueZf+sEgpxL/KuPUXC6h nDy7dkoNikqXyGr0nvhtShgixgfA4RySzk1h0sT30R65uQDn2T9XKIu//bTv9iWN YUtoNgdubVb303ir38MFGcWp9tLEOKtb9s8nQxF/PEGOOEseY3m4XK7bkUpg1RCp wgpur8E1IMSe84Lwl3bseCyrHqhbua8z -----END CERTIFICATE-----Generated at Sun Jul 20 20:47:29 2025 by rpki-client