$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json) Hash identifier: JMc6FYwnrUGQBgI2fxNr9kLebV9T2wWc/EPtGY5MErs= Subject key identifier: 53:EB:EE:10:F4:C4:F3:22:F2:EB:B4:60:E4:11:68:BF:7C:89:A3:0B Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft Manifest number: 01C7 Signing time: Tue 09 Sep 2025 02:58:03 +0000 Manifest this update: Tue 09 Sep 2025 02:58:03 +0000 Manifest next update: Tue 16 Sep 2025 02:58:02 +0000 Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: ANYh+INKJHag+dZcRqH6H4+JiOIlmwYC4HR8oXOzhnA=) 2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Sep 9 02:58:03 2025 GMT Not After : Sep 16 02:58:02 2025 GMT Subject: CN=68bf97bb-bec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:ee:ab:85:71:dc:38:39:92:38:45:c3:18: 20:d2:95:a6:a5:eb:25:be:c9:e6:de:6a:06:0b:95: 91:84:7b:f1:4a:96:14:f0:c1:be:c5:e3:28:3e:86: 48:a8:87:13:fd:d4:eb:6f:0e:2d:07:a0:38:f0:b7: 28:45:4f:1f:55:3b:f7:26:ce:e5:c0:56:84:61:58: 8b:91:5d:41:6e:01:40:5b:fc:8d:9d:ec:3b:c4:39: ea:7f:f6:3d:cf:f3:5d:a5:0a:ec:e1:7a:2e:b6:87: 22:69:7c:2d:5c:d7:3e:7c:5e:f3:15:7b:00:4e:d0: fc:a5:9a:4a:67:fe:9a:20:ad:40:79:ed:27:08:85: 81:a3:dc:57:9f:55:d1:e8:ee:5c:e4:83:23:36:72: 9e:14:28:35:c5:7f:91:4b:7d:eb:e7:89:80:e4:1e: e3:6e:4b:50:fc:27:62:6f:8d:21:61:22:96:10:a9: b0:3d:bf:8b:05:dd:c1:96:15:c7:df:dc:2c:11:6d: 8b:2d:9c:39:97:6a:5f:e5:d7:71:1b:92:01:4e:c6: 59:0b:9e:8b:a0:34:e9:1f:bb:3f:91:cc:a6:ed:43: 5b:51:a0:dc:50:aa:da:65:21:93:f0:7e:90:f6:c7: 78:22:64:b8:98:13:4f:1e:2e:94:5d:33:8b:26:99: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:EE:10:F4:C4:F3:22:F2:EB:B4:60:E4:11:68:BF:7C:89:A3:0B X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:e8:c5:e7:9e:f1:c4:90:7f:70:de:e8:aa:a0:17:10:2f: bf:fd:7c:ee:14:85:97:75:c3:df:e9:c3:0f:79:93:39:d8:db: 3d:af:79:a8:59:ca:bb:d7:eb:85:18:51:95:07:cf:08:cf:33: 57:86:03:40:a9:25:16:97:cc:32:49:2b:52:f1:6b:2b:2d:f0: 63:2a:2d:59:a8:dd:98:6d:2c:56:b7:88:c0:1a:7d:53:eb:07: a5:44:b8:1f:06:14:e3:52:9a:3a:0e:21:63:6b:af:9b:e5:32: 46:f1:45:73:67:ee:1d:ae:b3:6a:19:44:6e:e0:59:19:9c:58: 5a:bf:96:61:2a:28:5c:ad:97:de:dd:f1:a6:34:e6:21:be:40: c5:df:42:27:40:7f:40:f7:46:ee:44:af:82:38:03:28:08:8b: 4c:c8:c7:02:83:aa:00:be:52:ef:9f:3f:f9:91:76:90:1d:38: b2:4a:96:5c:3d:bc:4c:62:bc:4f:d2:e8:a3:71:a6:83:2f:0a: f2:39:29:e0:58:81:ae:87:cc:3f:d6:02:dd:5c:ad:f6:81:79: a7:07:f0:06:46:60:73:63:c6:44:72:47:41:e4:db:a0:26:c2: f8:39:34:a1:72:a3:55:38:34:15:de:c2:82:37:4b:de:c0:fc: 41:fb:3b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjUwOTA5MDI1ODAzWhcNMjUwOTE2MDI1ODAyWjAYMRYwFAYD VQQDEw02OGJmOTdiYi1iZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLzuq4Vx3Dg5kjhFwxgg0pWmpeslvsnm3moGC5WRhHvxSpYU8MG+xeMoPoZI qIcT/dTrbw4tB6A48LcoRU8fVTv3Js7lwFaEYViLkV1BbgFAW/yNnew7xDnqf/Y9 z/NdpQrs4XoutociaXwtXNc+fF7zFXsATtD8pZpKZ/6aIK1Aee0nCIWBo9xXn1XR 6O5c5IMjNnKeFCg1xX+RS33r54mA5B7jbktQ/Cdib40hYSKWEKmwPb+LBd3BlhXH 39wsEW2LLZw5l2pf5ddxG5IBTsZZC56LoDTpH7s/kcym7UNbUaDcUKraZSGT8H6Q 9sd4ImS4mBNPHi6UXTOLJplyswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPr7hD0 xPMi8uu0YOQRaL98iaMLMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REFERS83MDk4RjREQ0QyOTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5 OVBLejVNZWRYQmdkM2xhSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeH+jF557xxJB/cN7oqqAXEC+//XzuFIWXdcPf6cMPeZM52Ns9r3mo Wcq71+uFGFGVB88IzzNXhgNAqSUWl8wySStS8WsrLfBjKi1ZqN2YbSxWt4jAGn1T 6welRLgfBhTjUpo6DiFja6+b5TJG8UVzZ+4drrNqGURu4FkZnFhav5ZhKihcrZfe 3fGmNOYhvkDF30InQH9A90buRK+COAMoCItMyMcCg6oAvlLvnz/5kXaQHTiySpZc PbxMYrxP0uijcaaDLwryOSngWIGuh8w/1gLdXK32gXmnB/AGRmBzY8ZEckdB5Nug JsL4OTShcqNVODQV3sKCN0vewPxB+zs8 -----END CERTIFICATE-----Generated at Tue Sep 9 20:10:47 2025 by rpki-client