$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: rVvnBTPHMu4lThnD4gJ/MsTLcqUyXZ8y0toho2lEu4w= Subject key identifier: 81:A3:6C:0C:E0:CA:47:E9:6B:65:CF:63:EE:E7:49:9C:A7:68:84:EC Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 0143 Signing time: Sat 31 May 2025 04:27:16 +0000 Manifest this update: Sat 31 May 2025 04:27:15 +0000 Manifest next update: Sat 07 Jun 2025 04:27:15 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: PUpRux+KH0KZZ3Vkeg8/4KHGRkW7sMbMFmvjz9LrGIk=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: May 31 04:27:15 2025 GMT Not After : Jun 7 04:27:15 2025 GMT Subject: CN=683a8524-a3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:a1:fc:b7:94:d1:fe:12:a1:33:eb:44:9e: 1a:7f:12:0a:6b:4c:b6:85:7c:95:48:00:7a:0f:97: 2f:42:dd:a6:a3:95:77:d0:34:0c:98:11:97:6d:e6: 95:6d:89:16:7a:84:d2:d2:28:26:f4:16:32:02:30: 03:c4:4f:fd:62:ae:6f:f1:4c:d4:4a:4e:87:c2:c6: 07:a5:7e:35:1a:b0:3c:5c:83:c2:e8:ce:cb:3b:eb: dd:02:d4:51:74:dc:40:48:70:2d:23:fd:62:ef:29: f8:b9:dd:66:95:e4:45:dc:f7:03:c8:ae:ae:42:5c: be:31:cf:c2:ad:ba:1a:d3:73:9d:7e:74:07:cd:a4: 29:b5:96:48:96:1a:b8:0f:34:7c:c9:67:6e:25:9d: 90:ba:9c:7f:c5:54:90:37:df:75:70:71:6b:64:42: 2f:98:e1:56:89:81:47:84:71:80:2c:59:ff:93:6b: 03:17:b8:4b:28:7c:28:14:bd:1b:36:ee:02:37:9d: ac:b4:9a:7c:f7:e4:7c:59:0a:99:b3:39:56:ee:41: d4:10:81:8b:51:2d:38:21:28:be:77:0f:c3:e3:9e: 7f:88:10:12:30:42:a5:d7:97:ad:09:54:bf:f1:45: ec:63:45:e1:61:d2:97:da:2b:9b:87:30:75:54:5c: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:6C:0C:E0:CA:47:E9:6B:65:CF:63:EE:E7:49:9C:A7:68:84:EC X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:49:4b:7f:a7:1c:9d:b7:50:b2:0b:33:bb:34:7f:cd:78:b4: 87:36:e3:66:fe:76:e9:3f:99:d9:b6:26:82:8a:aa:d1:35:94: f7:5d:92:26:b5:e7:2c:47:a3:e5:5f:83:ed:36:13:c1:55:53: 1f:4a:a2:26:d7:c6:e7:ad:e9:06:24:df:c0:80:5d:27:69:7e: fe:a3:bb:30:ac:14:d4:3b:b8:5a:b6:de:69:5e:1f:07:23:8e: 0a:7f:0f:7e:22:d6:c7:31:b4:6e:82:2f:d5:0e:30:82:f5:b0: b6:47:26:55:f2:08:17:83:c5:59:e3:8c:d9:19:da:9c:71:3a: 0e:4f:82:dc:56:10:52:0f:88:36:f6:a9:f6:81:6a:4f:9c:99: f4:9d:c8:2d:1e:17:59:71:5e:b3:fc:46:10:6e:21:08:24:b7: b2:6c:c8:f1:eb:1f:ef:ac:a8:73:50:8f:67:75:fd:cb:e5:f1: 43:b9:7b:76:95:77:2d:82:de:b3:f7:81:47:37:0a:48:19:99: 00:8b:d2:0d:ef:d7:9f:d7:ef:b5:19:a2:20:fd:f6:ae:9a:c9: 72:f3:ec:5b:30:eb:19:51:91:4a:04:5f:13:ea:98:36:f6:c8: ca:ed:a0:a3:7f:11:04:17:62:53:24:d4:54:fa:c2:ea:a2:81: 89:a1:f4:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUwNTMxMDQyNzE1WhcNMjUwNjA3MDQyNzE1WjAYMRYwFAYD VQQDEw02ODNhODUyNC1hM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pmh/LeU0f4SoTPrRJ4afxIKa0y2hXyVSAB6D5cvQt2mo5V30DQMmBGXbeaV bYkWeoTS0igm9BYyAjADxE/9Yq5v8UzUSk6HwsYHpX41GrA8XIPC6M7LO+vdAtRR dNxASHAtI/1i7yn4ud1mleRF3PcDyK6uQly+Mc/Crboa03OdfnQHzaQptZZIlhq4 DzR8yWduJZ2Qupx/xVSQN991cHFrZEIvmOFWiYFHhHGALFn/k2sDF7hLKHwoFL0b Nu4CN52stJp89+R8WQqZszlW7kHUEIGLUS04ISi+dw/D455/iBASMEKl15etCVS/ 8UXsY0XhYdKX2iubhzB1VFxwnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGjbAzg ykfpa2XPY+7nSZynaITsMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpSUt/pxydt1CyCzO7NH/NeLSHNuNm/nbpP5nZtiaCiqrRNZT3XZIm tecsR6PlX4PtNhPBVVMfSqIm18bnrekGJN/AgF0naX7+o7swrBTUO7hatt5pXh8H I44Kfw9+ItbHMbRugi/VDjCC9bC2RyZV8ggXg8VZ44zZGdqccToOT4LcVhBSD4g2 9qn2gWpPnJn0ncgtHhdZcV6z/EYQbiEIJLeybMjx6x/vrKhzUI9ndf3L5fFDuXt2 lXctgt6z94FHNwpIGZkAi9IN79ef1++1GaIg/faumsly8+xbMOsZUZFKBF8T6pg2 9sjK7aCjfxEEF2JTJNRU+sLqooGJofSd -----END CERTIFICATE-----Generated at Sat May 31 17:06:28 2025 by rpki-client