$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: gmYUi1qrGksCvwoMzs+IYCdm65MGb0VOQLYIXbOvQFo= Subject key identifier: 79:8F:9B:C0:5B:24:C9:35:F2:58:C2:9C:9D:6C:88:BE:EF:A0:01:21 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B4C Signing time: Wed 02 Apr 2025 19:07:51 +0000 Manifest this update: Wed 02 Apr 2025 19:07:51 +0000 Manifest next update: Wed 09 Apr 2025 19:07:51 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: uQG9c9eOJ3aqJ+Is+mvhjI1EcXRIiZlTtFf3LlGhxvo=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B Validity Not Before: Apr 2 19:07:51 2025 GMT Not After : Apr 9 19:07:51 2025 GMT Subject: CN=67ed8b07-e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:16:11:72:8c:17:58:3d:e2:47:86:b6:c6: b0:43:45:89:1d:c9:af:8a:70:95:ee:86:58:e6:59: 7a:1c:c5:10:d7:a9:98:91:2f:b2:10:cf:49:da:e9: 17:d0:d0:b6:9a:8e:fe:0a:fb:74:ba:c8:1d:a1:3c: 4b:98:68:14:40:19:78:80:63:3c:4b:19:bf:47:31: de:27:8a:49:5a:d7:66:5b:09:d1:2c:d3:3b:e5:43: 4c:50:d8:89:4b:c6:48:dd:4d:f0:ef:9f:3e:2a:90: ad:ee:a7:2e:8d:02:76:63:3c:2e:58:34:db:bf:cc: 56:06:61:fd:87:15:a8:b3:2d:6f:ef:f7:27:fc:24: 6b:d5:6e:12:1e:75:6e:b5:25:01:08:45:f8:a2:1c: ff:4b:0d:f2:c5:c3:e1:9a:d5:12:2a:a6:51:59:da: 6e:5a:0c:9c:20:3f:a8:0e:3e:ee:ad:90:46:94:5d: d7:b9:17:ae:a9:94:f8:14:78:9a:01:ec:60:b4:79: df:69:10:a2:6f:66:0c:e9:7a:a4:ec:86:fd:fb:7e: 2a:5d:d0:d4:da:6e:4c:db:8f:f9:c4:30:a2:82:bc: 25:d9:4a:03:44:6d:c1:39:84:31:b2:ee:b7:38:74: 0e:20:c8:ba:45:66:cb:d2:51:99:12:4d:d1:17:e7: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:9B:C0:5B:24:C9:35:F2:58:C2:9C:9D:6C:88:BE:EF:A0:01:21 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:82:7d:13:50:9c:e1:9a:d9:a4:79:1b:91:82:61:cb:82:8e: 95:ec:ac:00:64:72:1f:94:18:09:63:48:55:11:02:33:47:6e: 5a:4a:a6:d2:c4:31:4e:07:39:aa:7b:ea:f7:37:91:52:5a:2a: db:2f:01:26:81:c7:ab:35:77:a6:68:2f:fe:3c:50:b0:96:bd: d7:d9:89:0f:4d:34:76:f4:91:ff:6a:e2:7f:5d:46:21:02:15: 1d:7b:c1:f0:c7:32:e4:ad:84:0b:76:8f:4f:44:c9:87:16:cb: 46:79:bb:17:4f:c1:57:a9:ba:7b:b3:5b:1e:b1:31:74:64:dc: 3d:fe:fe:11:69:f8:d4:be:b6:12:eb:2c:13:81:ab:c0:1c:78: 34:c4:1f:70:a3:99:b1:58:38:55:e1:4d:c5:ee:91:3e:a9:b5: 1c:78:6b:2f:0e:dd:33:01:44:af:07:d4:29:b8:7d:f8:b9:db: bd:6a:91:28:7f:8c:4d:f9:98:d6:ff:48:4b:0b:0e:c8:4e:c8: 1b:dd:9e:68:83:fa:8e:49:4e:6a:dc:bd:4d:84:58:03:a5:0c: 61:fc:10:35:f4:0f:b6:17:76:27:70:04:5f:39:7f:dc:19:76: 36:cd:08:62:7e:69:c8:23:1c:bf:8c:3e:f2:67:4c:67:e3:27: 06:2f:d4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwNDAyMTkwNzUxWhcNMjUwNDA5MTkwNzUxWjAYMRYwFAYD VQQDEw02N2VkOGIwNy1lOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUMWEXKMF1g94keGtsawQ0WJHcmvinCV7oZY5ll6HMUQ16mYkS+yEM9J2ukX 0NC2mo7+Cvt0usgdoTxLmGgUQBl4gGM8Sxm/RzHeJ4pJWtdmWwnRLNM75UNMUNiJ S8ZI3U3w758+KpCt7qcujQJ2YzwuWDTbv8xWBmH9hxWosy1v7/cn/CRr1W4SHnVu tSUBCEX4ohz/Sw3yxcPhmtUSKqZRWdpuWgycID+oDj7urZBGlF3XuReuqZT4FHia AexgtHnfaRCib2YM6Xqk7Ib9+34qXdDU2m5M24/5xDCigrwl2UoDRG3BOYQxsu63 OHQOIMi6RWbL0lGZEk3RF+d74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmPm8Bb JMk18ljCnJ1siL7voAEhMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClgn0TUJzhmtmkeRuRgmHLgo6V7KwAZHIflBgJY0hVEQIzR25aSqbS xDFOBzmqe+r3N5FSWirbLwEmgcerNXemaC/+PFCwlr3X2YkPTTR29JH/auJ/XUYh AhUde8HwxzLkrYQLdo9PRMmHFstGebsXT8FXqbp7s1sesTF0ZNw9/v4RafjUvrYS 6ywTgavAHHg0xB9wo5mxWDhV4U3F7pE+qbUceGsvDt0zAUSvB9QpuH34udu9apEo f4xN+ZjW/0hLCw7ITsgb3Z5og/qOSU5q3L1NhFgDpQxh/BA19A+2F3YncARfOX/c GXY2zQhifmnIIxy/jD7yZ0xn4ycGL9Ri -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:26 2025 by rpki-client