$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: bzuuAZXPazfJGPjiVwmRBBO0eKmPpZBVcBVxVbgPGrQ= Subject key identifier: E2:69:9F:47:91:9D:BA:9D:F0:4C:2D:29:DA:F9:F5:7D:C4:D9:E7:F9 Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0E5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0E43 Signing time: Wed 02 Apr 2025 17:50:28 +0000 Manifest this update: Wed 02 Apr 2025 17:50:27 +0000 Manifest next update: Wed 09 Apr 2025 17:50:27 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: REa+voSnApvHg9djLYLaN4nkaXG8VQeelEd2Ryli5l0=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: alUP6VMzD0tmc3pTboCQa5BjgFfvzIB460TqVIvJ3eU=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: tVnO8ZV7Glm7r1+kxCAZBT0FT0Hia7Gl07cM925RQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3674 (0xe5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6 Validity Not Before: Apr 2 17:50:27 2025 GMT Not After : Apr 9 17:50:27 2025 GMT Subject: CN=67ed78e3-76a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:3f:9c:45:34:6c:3e:17:72:39:65:a9:a0: 8d:e2:fe:8d:ba:a3:71:a2:2a:ba:14:87:e1:0d:b4: 48:65:cb:a5:b4:0f:f1:6d:c9:03:e5:09:14:45:a2: 7b:ea:b7:59:b4:91:9b:03:4d:c6:81:68:d6:95:b2: 84:6c:b0:d6:2a:13:4f:0c:5f:17:c9:ac:ea:4e:95: 9f:b2:3f:95:1f:69:69:93:fc:b8:58:61:cb:db:6c: 90:c2:94:cb:95:c4:1f:c5:dd:dc:05:42:ab:1c:29: 39:54:54:35:02:48:33:9d:a0:51:8a:bd:94:2d:f5: 40:c3:40:77:88:77:d0:aa:fe:51:4b:29:7f:68:00: da:81:76:d9:ee:68:94:d3:d4:dc:e8:a4:58:9c:22: cf:f0:08:ca:7b:99:ed:86:45:40:4d:8e:3c:8c:0c: 91:3e:b6:1f:f5:20:25:29:f4:f3:0c:cb:dd:f1:4f: 25:b3:79:c6:6f:19:cf:f1:0c:cd:3e:7d:58:e3:11: 1a:f1:66:1e:e8:69:c7:34:f2:64:e6:e2:d2:b6:e9: 76:8c:54:90:6e:00:2b:31:66:31:bb:66:83:3c:f0: 41:fd:e4:ec:27:1d:a3:3d:d3:0b:28:7c:19:b5:1d: 65:82:6b:60:c7:70:1a:9f:2e:39:23:86:e5:54:c0: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:69:9F:47:91:9D:BA:9D:F0:4C:2D:29:DA:F9:F5:7D:C4:D9:E7:F9 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:55:0e:8e:40:83:bc:48:8c:5d:e4:e2:a6:37:33:bb:e3:3e: e7:ac:8d:54:a8:35:58:c3:ba:ea:f9:df:2f:91:40:1d:8f:44: 0f:2b:31:10:a8:f2:d2:d6:89:60:df:06:53:7e:e5:86:d1:e6: 62:f8:1f:e8:01:5e:9b:ac:6a:f1:42:55:de:45:20:87:ae:ce: 66:4e:6f:69:41:e0:56:47:b4:b4:f6:e8:d3:e1:8f:04:d4:c4: 66:77:f4:bd:b3:af:cf:c3:03:44:94:87:8a:f6:26:08:46:41: 7e:c9:74:35:8b:f7:7c:e8:1e:6b:db:6e:5a:ab:bf:8b:27:74: 2a:6f:0c:45:16:fe:ed:d9:24:6c:ff:65:32:9e:8d:65:92:b9: 00:2a:50:c6:71:c6:ce:e7:2a:1e:7a:58:63:80:8f:da:74:30: 4c:57:b3:b5:ba:ae:b9:65:6c:24:da:ef:4f:fd:76:9b:52:99: d9:36:5a:af:d8:1f:bc:94:62:11:e8:a0:7e:11:06:32:ca:ab: 31:fc:2a:8d:22:d6:9f:0d:fb:5a:c6:0c:0a:6a:7d:0c:17:29: d6:e0:b4:03:b7:05:5a:58:b3:8c:98:79:55:ab:af:e6:d0:27: 46:96:b3:d5:aa:72:27:27:9d:5d:58:f6:1b:7a:7a:53:e0:bc: d8:00:bd:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjUwNDAyMTc1MDI3WhcNMjUwNDA5MTc1MDI3WjAYMRYwFAYD VQQDEw02N2VkNzhlMy03NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCk/nEU0bD4XcjllqaCN4v6NuqNxoiq6FIfhDbRIZcultA/xbckD5QkURaJ7 6rdZtJGbA03GgWjWlbKEbLDWKhNPDF8XyazqTpWfsj+VH2lpk/y4WGHL22yQwpTL lcQfxd3cBUKrHCk5VFQ1AkgznaBRir2ULfVAw0B3iHfQqv5RSyl/aADagXbZ7miU 09Tc6KRYnCLP8AjKe5nthkVATY48jAyRPrYf9SAlKfTzDMvd8U8ls3nGbxnP8QzN Pn1Y4xEa8WYe6GnHNPJk5uLStul2jFSQbgArMWYxu2aDPPBB/eTsJx2jPdMLKHwZ tR1lgmtgx3Aany45I4blVMAG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJpn0eR nbqd8EwtKdr59X3E2ef5MB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVQ6OQIO8SIxd5OKmNzO74z7nrI1UqDVYw7rq+d8vkUAdj0QPKzEQ qPLS1olg3wZTfuWG0eZi+B/oAV6brGrxQlXeRSCHrs5mTm9pQeBWR7S09ujT4Y8E 1MRmd/S9s6/PwwNElIeK9iYIRkF+yXQ1i/d86B5r225aq7+LJ3QqbwxFFv7t2SRs /2Uyno1lkrkAKlDGccbO5yoeelhjgI/adDBMV7O1uq65ZWwk2u9P/XabUpnZNlqv 2B+8lGIR6KB+EQYyyqsx/CqNItafDftaxgwKan0MFynW4LQDtwVaWLOMmHlVq6/m 0CdGlrPVqnInJ51dWPYbenpT4LzYAL0S -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:30 2025 by rpki-client