$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft File: pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft (raw, json) Hash identifier: whNDy+DlYh3nwpp/GStACgCO+51m+SYKleXlt+8ge+I= Subject key identifier: AE:A8:F1:C4:26:DC:4D:01:10:0B:7B:1F:EB:8C:51:5E:88:5C:9A:8F Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft Manifest number: 0657 Signing time: Fri 28 Mar 2025 22:42:21 +0000 Manifest this update: Fri 28 Mar 2025 22:42:21 +0000 Manifest next update: Fri 04 Apr 2025 22:42:21 +0000 Files and hashes: 1: pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl (hash: xVosKj6W/J/57dw9zyymuAGqTuNmYypySex8KG3WNec=) 2: E84DCBC422D211EDAF1F924EC4F9AE02.roa (hash: DSJZavi/LmOaDs/V5ru83cEJvd41YvTKAbFr9jXt5Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131EDD Validity Not Before: Mar 28 22:42:21 2025 GMT Not After : Apr 4 22:42:21 2025 GMT Subject: CN=67e725cd-b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:bd:98:4d:4a:4e:73:23:5a:3f:41:1e:c3: 30:f0:86:ff:11:1f:c4:5c:81:bf:75:7e:c4:ce:d0: 6a:8d:9b:16:9e:e4:75:11:e6:d0:3e:95:3a:53:9d: 88:07:50:77:1c:84:c6:96:fa:45:ad:e4:f5:87:14: 7a:42:f4:59:de:22:bb:73:fd:80:46:f2:8e:11:b9: 5d:75:d4:08:fc:89:19:d6:ee:96:4f:49:81:3a:ad: 75:c6:76:9a:2f:cc:30:eb:fd:9a:6d:02:55:93:72: b3:13:3e:7f:cc:12:17:8d:c7:9b:b2:6f:a1:2c:d8: 80:83:49:39:28:11:c6:fa:7f:b5:ea:5e:1c:53:ff: af:a8:cd:f3:6a:07:b1:0a:ad:27:e4:78:f6:97:64: 78:64:34:10:d8:01:cf:31:b3:bb:07:6f:4f:61:91: 0f:01:29:9c:44:b4:af:ae:8e:a1:3d:c5:78:dd:d2: 2c:0e:cd:4f:09:9c:27:f3:18:c9:30:45:fc:2e:20: 8f:bf:39:29:93:87:de:6e:a2:0f:55:24:b0:8b:bf: fb:45:ab:28:c8:2e:28:98:38:a9:3a:a2:1a:c5:b6: 4b:9e:b6:28:56:7e:a3:ea:50:60:9a:33:0b:63:d9: 23:46:d8:8a:10:d3:03:f6:c3:de:10:93:3b:fd:43: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:F1:C4:26:DC:4D:01:10:0B:7B:1F:EB:8C:51:5E:88:5C:9A:8F X509v3 Authority Key Identifier: keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:97:00:52:f0:cd:5f:8e:d4:87:46:ff:70:41:45:b9:26:9c: af:b7:b8:fa:22:50:70:9c:08:3f:5d:ac:0f:f4:7d:b0:39:21: bd:bc:a6:24:e7:d8:8b:ea:63:40:ac:63:8d:91:28:96:46:d0: 77:72:7d:fc:76:d0:f9:a5:24:15:f8:60:31:57:4e:35:a2:88: b5:15:1f:8f:7a:db:10:9f:cf:47:61:d9:66:aa:93:e5:08:37: d7:4d:9e:a9:13:a9:67:b5:d1:66:c0:5a:a5:c9:68:74:c0:98: 33:86:11:b1:5c:b9:96:ed:b1:84:a4:5d:6e:e4:5a:70:0c:cc: 13:4c:be:80:64:a7:06:78:c7:ce:c4:5c:dd:e5:ab:bf:e8:9f: 7f:23:ae:06:f4:6d:ec:7e:f1:65:07:7f:8f:bf:8f:8b:be:6a: 24:ba:08:69:7a:51:ce:d5:a6:27:da:2f:f4:59:24:d8:a7:dc: 06:4a:55:f1:00:09:1d:3f:27:31:cc:11:e0:2b:b2:82:93:5b: a5:2d:b9:af:cc:29:d6:ca:7f:f8:d7:31:24:23:61:3e:b9:67: 3b:39:15:21:7d:91:51:af:a4:4e:82:f1:d2:b9:cd:e0:9e:59: 3f:e1:5e:89:c3:ee:db:5a:29:17:b2:56:b5:96:79:09:ca:d0: 5f:ac:6f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFFREQxMTAvBgNVBAUTKEE0Njk0QkU0N0M0RjNCQzk0ODA1RDRBMzY2QTAwN0M2 OTA3MDUxMkUwHhcNMjUwMzI4MjI0MjIxWhcNMjUwNDA0MjI0MjIxWjAYMRYwFAYD VQQDEw02N2U3MjVjZC1iOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEG9mE1KTnMjWj9BHsMw8Ib/ER/EXIG/dX7EztBqjZsWnuR1EebQPpU6U52I B1B3HITGlvpFreT1hxR6QvRZ3iK7c/2ARvKOEbldddQI/IkZ1u6WT0mBOq11xnaa L8ww6/2abQJVk3KzEz5/zBIXjcebsm+hLNiAg0k5KBHG+n+16l4cU/+vqM3zagex Cq0n5Hj2l2R4ZDQQ2AHPMbO7B29PYZEPASmcRLSvro6hPcV43dIsDs1PCZwn8xjJ MEX8LiCPvzkpk4febqIPVSSwi7/7RasoyC4omDipOqIaxbZLnrYoVn6j6lBgmjML Y9kjRtiKENMD9sPeEJM7/UMQsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6o8cQm 3E0BEAt7H+uMUV6IXJqPMB8GA1UdIwQYMBaAFKRpS+R8TzvJSAXUo2agB8aQcFEu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUVERC8yMTBCNDMwNDdC QkYxMUVCQTAyQTQzMzlDNEY5QUUwMi9wR2xMNUh4UE84bElCZFNqWnFBSHhwQndV UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHbEw1SHhQTzhsSUJkU2pacUFIeHBCd1VTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUVERC8yMTBCNDMwNDdCQkYxMUVCQTAyQTQzMzlDNEY5QUUwMi9wR2xMNUh4UE84 bElCZFNqWnFBSHhwQndVUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDClwBS8M1fjtSHRv9wQUW5Jpyvt7j6IlBwnAg/XawP9H2wOSG9vKYk 59iL6mNArGONkSiWRtB3cn38dtD5pSQV+GAxV041ooi1FR+PetsQn89HYdlmqpPl CDfXTZ6pE6lntdFmwFqlyWh0wJgzhhGxXLmW7bGEpF1u5FpwDMwTTL6AZKcGeMfO xFzd5au/6J9/I64G9G3sfvFlB3+Pv4+LvmokughpelHO1aYn2i/0WSTYp9wGSlXx AAkdPycxzBHgK7KCk1ulLbmvzCnWyn/41zEkI2E+uWc7ORUhfZFRr6ROgvHSuc3g nlk/4V6Jw+7bWikXsla1lnkJytBfrG9C -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:53 2025 by rpki-client