$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: V7lUdIS4JAMO3mqnmM0VrVsUVRwCdPwmmmXv4xggPfc= Subject key identifier: C7:20:7F:E3:16:EB:0A:05:7C:17:C8:FF:08:88:4B:01:33:9C:A4:F2 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 16C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 1FC0 Signing time: Fri 30 May 2025 16:51:05 +0000 Manifest this update: Fri 30 May 2025 16:51:05 +0000 Manifest next update: Fri 06 Jun 2025 16:51:05 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: I12pYLxZYLbbIzJe6M/uuPlOtAhOX9fodBuxmUVz3ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5828 (0x16c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: May 30 16:51:05 2025 GMT Not After : Jun 6 16:51:05 2025 GMT Subject: CN=6839e1f9-1bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:cc:06:ed:4e:6e:ba:46:da:fe:9b:f0:c9: bf:6a:69:ae:ea:60:30:e3:9c:85:bc:16:ef:c2:fa: a2:e6:4f:41:49:ff:3d:85:e3:04:82:ef:b9:af:7a: b2:ee:e7:e1:6b:25:bf:5d:16:74:66:25:b0:88:7c: 1b:99:d4:c8:37:73:44:52:9a:94:70:d1:8e:07:46: 9f:09:8f:aa:d3:6a:28:85:00:1e:fc:f7:9a:8a:25: 34:2d:83:98:95:ef:ee:7b:50:48:a3:16:ac:93:a4: df:97:c2:60:db:a1:33:1c:c9:8f:bf:fa:e0:64:6b: af:2b:39:03:4a:2a:ca:c6:2a:0f:f8:89:0c:a2:97: da:f0:ec:c0:8a:ae:07:22:8c:82:fd:5b:e8:a3:f0: 02:c3:1a:94:dd:c4:a2:84:46:a4:e2:aa:9a:3f:c0: f1:1a:7d:00:69:fa:91:d8:b6:ee:eb:49:b3:d7:fc: 7d:fa:d2:a6:92:d5:84:09:a5:d0:21:07:92:54:c4: 91:dc:40:a8:41:71:59:0c:ee:8b:3f:5a:af:62:2a: 80:36:a1:b3:bd:b5:62:23:44:18:c3:35:24:81:98: f2:84:96:7b:59:40:de:1e:18:19:68:bb:09:b8:13: d3:fb:1f:5c:36:c8:e9:27:15:aa:ea:38:ca:84:d2: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:7F:E3:16:EB:0A:05:7C:17:C8:FF:08:88:4B:01:33:9C:A4:F2 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c1:d6:c8:f4:b7:2d:e7:8a:ac:00:06:3c:9b:74:32:92:bd: 23:6a:4e:e1:c3:64:da:66:66:74:d4:36:11:3f:b5:4b:8c:9d: cc:36:92:57:bb:be:0a:0f:07:a7:0c:3d:cf:af:09:a2:c6:35: 89:b5:5a:12:ca:6d:e2:94:b4:cc:e3:6a:2a:77:68:54:0c:9d: d8:a3:6e:f3:82:44:b8:14:d4:f3:7a:51:13:fd:96:21:b6:ef: 34:00:69:48:41:a8:43:d6:45:1e:93:8d:09:0d:d4:1a:db:73: f0:d9:23:c5:f6:51:43:44:4a:68:42:6b:9f:5c:53:e6:48:f0: 45:e5:f5:8d:b2:c3:97:1a:e8:bf:fa:dd:62:4b:bc:2f:a5:2a: f6:f8:a2:e1:e3:de:c2:08:ed:bd:37:70:f7:20:ab:92:23:99: 21:9a:40:2c:3a:0a:f6:d8:13:4a:a3:15:5f:54:bb:f6:d0:c4: 8f:c9:a2:8d:97:13:c4:e2:b7:4b:4f:5d:86:68:ec:45:9f:9c: 67:fa:59:8c:fc:43:89:f0:71:17:22:a8:cf:96:d1:0b:a3:88: 38:85:b6:39:20:4f:e4:42:c4:47:35:7d:6a:9d:d4:bd:03:0a: 0c:4d:5a:bc:54:05:94:5a:24:35:be:84:b0:bc:03:3c:24:13: c4:ae:08:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUwNTMwMTY1MTA1WhcNMjUwNjA2MTY1MTA1WjAYMRYwFAYD VQQDEw02ODM5ZTFmOS0xYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWbMBu1ObrpG2v6b8Mm/ammu6mAw45yFvBbvwvqi5k9BSf89heMEgu+5r3qy 7ufhayW/XRZ0ZiWwiHwbmdTIN3NEUpqUcNGOB0afCY+q02oohQAe/PeaiiU0LYOY le/ue1BIoxask6Tfl8Jg26EzHMmPv/rgZGuvKzkDSirKxioP+IkMopfa8OzAiq4H IoyC/Vvoo/ACwxqU3cSihEak4qqaP8DxGn0AafqR2Lbu60mz1/x9+tKmktWECaXQ IQeSVMSR3ECoQXFZDO6LP1qvYiqANqGzvbViI0QYwzUkgZjyhJZ7WUDeHhgZaLsJ uBPT+x9cNsjpJxWq6jjKhNLwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcgf+MW 6woFfBfI/wiISwEznKTyMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBwdbI9Lct54qsAAY8m3Qykr0jak7hw2TaZmZ01DYRP7VLjJ3MNpJX u74KDwenDD3PrwmixjWJtVoSym3ilLTM42oqd2hUDJ3Yo27zgkS4FNTzelET/ZYh tu80AGlIQahD1kUek40JDdQa23Pw2SPF9lFDREpoQmufXFPmSPBF5fWNssOXGui/ +t1iS7wvpSr2+KLh497CCO29N3D3IKuSI5khmkAsOgr22BNKoxVfVLv20MSPyaKN lxPE4rdLT12GaOxFn5xn+lmM/EOJ8HEXIqjPltELo4g4hbY5IE/kQsRHNX1qndS9 AwoMTVq8VAWUWiQ1voSwvAM8JBPErgg1 -----END CERTIFICATE-----Generated at Sat May 31 14:48:15 2025 by rpki-client