$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: jldQKwnZytaOvNBrTLZy0fdTQ5c268kRWriregE5FYs= Subject key identifier: 95:8B:B9:CA:4E:76:52:30:9F:70:CC:DC:98:2F:76:87:45:C1:4D:DE Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 0461 Signing time: Thu 03 Apr 2025 00:09:54 +0000 Manifest this update: Thu 03 Apr 2025 00:09:54 +0000 Manifest next update: Thu 10 Apr 2025 00:09:54 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: AmVsyUlhsiDrLrBrLIMKxfQFkT+zwsBrRGASFBGDYbw=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E Validity Not Before: Apr 3 00:09:54 2025 GMT Not After : Apr 10 00:09:54 2025 GMT Subject: CN=67edd1d2-5f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:29:ed:22:36:d4:f5:99:19:31:6b:bb:83: d7:0b:be:c7:0f:b7:20:f4:d0:5c:04:76:28:02:32: 42:6c:a7:0e:1e:3d:3e:87:5c:5d:2f:b6:8a:ff:eb: 3d:ca:0b:a8:f0:26:bd:4f:06:13:c5:01:bb:91:a6: 10:77:3f:66:de:cd:13:93:7b:40:95:eb:16:70:00: 11:52:bc:2b:7f:22:6a:2a:73:d5:4a:4c:90:04:87: e8:0b:6f:5e:ee:10:cb:3e:de:2e:3f:58:77:71:10: 00:af:01:61:61:eb:b8:0f:46:cf:d2:e9:96:a7:ba: 59:b5:60:24:0f:4f:3a:ee:d8:c6:89:23:fb:ed:5c: 7e:a1:95:f9:98:45:a8:ae:df:f1:9c:af:75:d1:fc: 4e:1a:d5:52:89:4e:b7:f5:3e:4c:bd:b6:d5:85:1a: 30:2a:c0:84:a4:68:79:e4:ed:87:e1:64:c0:20:c7: 1e:ad:0f:3f:78:f6:8f:7d:31:b0:40:46:72:51:4b: 17:66:c5:b0:17:ea:e0:b5:2f:99:4f:77:77:15:4d: 3e:71:bd:2a:f5:df:ad:16:bf:f5:0c:56:b5:3f:41: e5:04:b7:2d:70:a4:c0:de:06:a4:34:25:92:5b:e8: 57:4d:9b:59:c0:c6:09:98:c0:60:a9:97:cd:8e:cc: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:B9:CA:4E:76:52:30:9F:70:CC:DC:98:2F:76:87:45:C1:4D:DE X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:98:d5:bf:94:05:a6:f9:a2:f7:fb:8d:ef:18:4a:23:fc:35: a5:76:d8:f3:91:84:2c:25:ec:fe:58:be:60:06:8a:31:dd:08: 49:6a:32:f3:e3:ff:e4:bc:0c:78:94:79:2d:b7:96:cd:52:32: b8:d2:4c:e3:76:89:35:33:b0:f4:0e:9a:8a:b2:51:ae:13:2e: fc:80:68:1b:83:72:f5:6e:2f:df:33:96:ec:5b:06:90:28:1a: ce:57:9f:06:e7:71:85:22:d8:c1:04:c6:58:4a:70:24:c6:97: f5:a9:2d:44:cb:8b:dd:8d:fc:a8:65:c2:7e:c6:2c:3b:f2:7c: 01:89:64:16:b1:02:df:cd:16:25:8e:7e:0f:b7:1c:f1:b6:b2: 35:b5:a7:4b:54:0b:99:12:e4:8f:6d:26:23:34:c2:62:54:11: 19:fd:dc:d7:63:65:57:49:b1:42:46:8e:3c:1e:74:8b:11:c2: f5:22:47:1a:f3:8e:53:4f:c3:cc:f8:77:b8:00:be:e2:22:a4: 81:ba:df:12:7c:3a:d3:ba:b5:f7:cc:66:e2:00:55:e5:63:4e: f8:7d:06:e6:58:89:14:d9:52:20:19:88:cd:af:b0:3b:3f:a6: 33:29:a2:97:a8:f6:01:89:e0:7b:f5:be:a3:52:bb:b6:99:6f: 78:32:5f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwNDAzMDAwOTU0WhcNMjUwNDEwMDAwOTU0WjAYMRYwFAYD VQQDEw02N2VkZDFkMi01Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuwp7SI21PWZGTFru4PXC77HD7cg9NBcBHYoAjJCbKcOHj0+h1xdL7aK/+s9 yguo8Ca9TwYTxQG7kaYQdz9m3s0Tk3tAlesWcAARUrwrfyJqKnPVSkyQBIfoC29e 7hDLPt4uP1h3cRAArwFhYeu4D0bP0umWp7pZtWAkD0867tjGiSP77Vx+oZX5mEWo rt/xnK910fxOGtVSiU639T5MvbbVhRowKsCEpGh55O2H4WTAIMcerQ8/ePaPfTGw QEZyUUsXZsWwF+rgtS+ZT3d3FU0+cb0q9d+tFr/1DFa1P0HlBLctcKTA3gakNCWS W+hXTZtZwMYJmMBgqZfNjsxkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWLucpO dlIwn3DM3JgvdodFwU3eMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADmNW/lAWm+aL3+43vGEoj/DWldtjzkYQsJez+WL5gBoox3QhJajLz 4//kvAx4lHktt5bNUjK40kzjdok1M7D0DpqKslGuEy78gGgbg3L1bi/fM5bsWwaQ KBrOV58G53GFItjBBMZYSnAkxpf1qS1Ey4vdjfyoZcJ+xiw78nwBiWQWsQLfzRYl jn4PtxzxtrI1tadLVAuZEuSPbSYjNMJiVBEZ/dzXY2VXSbFCRo48HnSLEcL1Ikca 845TT8PM+He4AL7iIqSBut8SfDrTurX3zGbiAFXlY074fQbmWIkU2VIgGYjNr7A7 P6YzKaKXqPYBieB79b6jUru2mW94Ml+a -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:46 2025 by rpki-client