$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: 4Z6UJ6hRIWfGCjcPwyDmBoIDhkovJ7h7pgehgqMpYvs= Subject key identifier: 27:C1:65:DA:4D:41:40:9E:A8:10:F2:EA:10:37:A2:9D:35:8C:86:E5 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 0260 Signing time: Tue 15 Apr 2025 01:24:49 +0000 Manifest this update: Tue 15 Apr 2025 01:24:49 +0000 Manifest next update: Tue 22 Apr 2025 01:24:49 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: 9jxk7CXV6fvQ+pdeOXOl7GnFea7UblNu0clyMoAbrXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Apr 15 01:24:49 2025 GMT Not After : Apr 22 01:24:49 2025 GMT Subject: CN=67fdb561-f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:c2:72:58:23:6b:de:8a:5c:9a:3a:1f:37: 82:23:ae:28:02:6e:a5:95:10:bc:1e:1f:04:6b:6f: df:ce:7b:82:78:2a:8b:8c:d9:99:3d:fa:d4:8d:6b: 52:26:11:2a:3d:61:fc:6a:70:f8:e4:49:ff:78:a1: c7:12:e2:c5:c3:38:70:26:cc:10:f0:51:ad:c2:0f: 59:73:ab:a7:f4:cf:5e:10:8a:1e:bc:69:a6:8b:dd: 4e:9c:e3:8b:2d:87:25:1b:5c:bc:4a:1d:17:9b:53: 60:e1:d1:0b:22:54:6d:a5:27:b3:2a:19:35:ea:89: cd:c3:a4:dd:f0:45:8c:e1:a1:f4:06:59:c3:c0:b8: 33:f1:00:17:e4:df:23:4a:82:c7:b2:db:13:68:38: 94:2f:59:03:df:43:58:2b:5a:63:cc:0a:b6:49:c0: da:c5:27:f6:2b:ee:02:4d:92:5e:3b:3a:d2:d6:14: 26:85:46:03:a6:fd:e2:8f:06:e3:fe:d0:46:d6:27: 7f:60:c3:f5:0d:09:ef:f6:e8:d7:21:99:02:a4:3d: 38:1c:55:56:b7:34:0f:93:2b:4c:97:6e:11:58:36: f8:c1:52:fa:8d:1b:9f:af:3f:41:6d:4a:b9:22:76: da:df:91:ab:d1:43:bf:07:2a:6d:14:59:f2:10:ce: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C1:65:DA:4D:41:40:9E:A8:10:F2:EA:10:37:A2:9D:35:8C:86:E5 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6a:c7:24:92:a8:5a:d6:70:9a:e5:af:fb:a4:50:95:34:59: e7:8c:65:a8:4f:fd:50:14:ce:6e:5d:9e:ae:e0:d3:cb:58:da: ee:5c:a5:b4:07:f7:a6:1d:eb:66:db:1e:7c:3c:84:ec:a3:4f: 1e:ed:b1:4e:d6:ee:84:45:57:b9:f3:1a:b7:29:9b:b3:b7:da: ce:9c:dc:2e:73:6b:5e:b0:0a:2c:1b:14:0e:ba:44:6d:d6:27: 1f:ec:3f:95:30:f4:5b:87:71:ae:27:f1:a4:ab:7d:be:88:5b: f5:93:6a:42:da:bc:d2:3f:72:eb:bb:78:86:3f:28:b8:b1:2f: 6d:5c:d6:2f:2e:ee:60:53:66:d7:22:e7:0a:46:13:d5:8e:93: a7:6e:9a:8a:2c:d3:89:85:e0:09:89:4b:0d:74:8b:7c:de:c8: 0d:81:11:c9:0c:8c:ed:2f:70:e8:28:cf:cc:25:63:42:43:b1: 5c:e8:f1:4a:8c:14:49:5f:43:ee:e6:aa:73:10:93:42:5f:96: 53:22:16:cf:aa:7d:dd:44:3e:68:dc:4f:15:af:b9:45:98:b0: b3:f3:5e:b5:fb:2d:99:bc:4e:b3:f9:63:a4:c7:51:4d:ba:04: 00:18:a4:96:99:23:7e:93:12:95:6a:58:27:ca:26:f8:e9:26: 32:79:29:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwNDE1MDEyNDQ5WhcNMjUwNDIyMDEyNDQ5WjAYMRYwFAYD VQQDEw02N2ZkYjU2MS1mMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6zCclgja96KXJo6HzeCI64oAm6llRC8Hh8Ea2/fznuCeCqLjNmZPfrUjWtS JhEqPWH8anD45En/eKHHEuLFwzhwJswQ8FGtwg9Zc6un9M9eEIoevGmmi91OnOOL LYclG1y8Sh0Xm1Ng4dELIlRtpSezKhk16onNw6Td8EWM4aH0BlnDwLgz8QAX5N8j SoLHstsTaDiUL1kD30NYK1pjzAq2ScDaxSf2K+4CTZJeOzrS1hQmhUYDpv3ijwbj /tBG1id/YMP1DQnv9ujXIZkCpD04HFVWtzQPkytMl24RWDb4wVL6jRufrz9BbUq5 Inba35Gr0UO/ByptFFnyEM5YMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfBZdpN QUCeqBDy6hA3op01jIblMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNasckkqha1nCa5a/7pFCVNFnnjGWoT/1QFM5uXZ6u4NPLWNruXKW0 B/emHetm2x58PITso08e7bFO1u6ERVe58xq3KZuzt9rOnNwuc2tesAosGxQOukRt 1icf7D+VMPRbh3GuJ/Gkq32+iFv1k2pC2rzSP3Lru3iGPyi4sS9tXNYvLu5gU2bX IucKRhPVjpOnbpqKLNOJheAJiUsNdIt83sgNgRHJDIztL3DoKM/MJWNCQ7Fc6PFK jBRJX0Pu5qpzEJNCX5ZTIhbPqn3dRD5o3E8Vr7lFmLCz8161+y2ZvE6z+WOkx1FN ugQAGKSWmSN+kxKValgnyib46SYyeSl2 -----END CERTIFICATE-----Generated at Thu Apr 17 02:45:37 2025 by rpki-client