$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: Miki2oQz6B7R1r//OGhgBpAmA9PcvlxxQlI7LD0Jiuc= Subject key identifier: 5B:DE:4D:CE:11:AF:0B:9A:55:27:C1:73:47:AC:57:94:E3:CD:4D:04 Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: 45 Signing time: Thu 03 Apr 2025 06:41:53 +0000 Manifest this update: Thu 03 Apr 2025 06:41:52 +0000 Manifest next update: Thu 10 Apr 2025 06:41:52 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: o3KuApkuK3bs/WijBUBgSlAHbIRPJFC6PXifkniXc3Y=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1 Validity Not Before: Apr 3 06:41:52 2025 GMT Not After : Apr 10 06:41:52 2025 GMT Subject: CN=67ee2db0-6612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:fc:52:7c:3d:8e:ce:a5:92:2d:7c:03:b7: b2:62:17:d3:26:ce:82:a5:6f:d4:d7:d1:49:55:51: 46:36:b5:f1:b1:91:cd:0c:7f:37:01:2a:cf:e2:b7: 4e:92:68:9e:10:2e:14:cc:43:75:a2:cd:0d:4c:8b: 39:29:51:f9:2a:78:4e:bb:db:ec:89:ca:f9:a1:c2: 6d:6f:21:a2:bd:79:d6:ce:b6:9d:b3:30:db:20:f3: 23:e1:e0:59:15:fe:b7:83:a9:29:35:cd:e7:3e:6d: 67:96:3e:0f:68:38:16:5d:e6:45:e8:85:9c:54:af: 77:85:e8:46:13:e7:35:55:c4:a5:7b:e3:6e:e6:d4: 2e:f1:3f:e4:cb:8f:4c:a7:92:f1:98:e2:cc:67:4d: c1:71:9d:35:92:89:4b:a7:3e:3a:3f:01:4d:c0:16: 42:6a:55:bb:19:9f:31:67:c8:2e:ad:5a:60:3c:ec: 50:38:6b:0c:2a:00:cf:9a:bb:ea:e8:83:14:40:eb: bb:8f:d4:a2:35:99:48:37:9b:dc:c3:56:43:0a:51: 88:55:7a:98:61:87:20:76:93:68:36:25:69:5f:d7: 8b:d3:0a:e2:29:e3:1e:c8:84:fe:69:81:2f:7c:34: dd:ae:e1:f2:f4:41:fc:1b:77:c1:8c:bc:94:28:40: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:4D:CE:11:AF:0B:9A:55:27:C1:73:47:AC:57:94:E3:CD:4D:04 X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:95:f0:3f:8f:6f:f7:e1:0c:1b:e4:e9:09:ae:d7:12:85:c1: 00:95:22:b2:53:1a:d2:91:8b:cc:51:7c:d7:f0:b4:7c:f2:e4: c4:49:ba:99:a7:90:b8:47:61:7e:71:fb:ac:da:0a:06:b4:ba: 87:c7:d6:36:74:97:14:00:ec:9b:87:5f:8d:a9:5b:98:1c:91: 68:1f:2c:ff:4a:28:e3:d8:fd:a5:57:18:3c:4e:82:09:e6:94: a4:d0:1e:fb:63:47:0f:12:f4:3b:cd:02:48:ac:6f:c1:22:39: 3c:53:5a:3c:e2:d0:be:7b:2b:05:23:3f:14:e4:0e:d6:47:a2: ce:83:ba:df:36:56:c5:07:4a:a3:0a:8e:38:46:7f:4e:70:93: 7b:84:a1:50:b6:a6:b2:c0:7a:b0:d5:f2:e4:06:60:54:b5:b9: 33:5b:1e:55:c6:41:90:18:81:a3:7c:78:d9:d0:de:ba:18:0e: 3a:91:88:5e:9b:6d:6e:77:9f:ac:88:74:7f:59:f6:6d:a6:ab: b1:ef:40:5a:72:21:3f:e5:45:20:dc:da:52:59:f3:94:00:3a: 75:44:6d:85:31:ac:1e:7f:28:8b:d1:f6:88:f0:2a:2f:11:39: 50:71:03:5d:d7:44:94:92:8f:36:a2:d5:e5:3c:2a:d3:01:b7: f3:dd:ae:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDlDMTExMC8GA1UEBRMoQTQxNTA0RTY2RTMxNDQzNDg2MjUxOTA2OTZFMEU4OEZG QjFGNTI3MDAeFw0yNTA0MDMwNjQxNTJaFw0yNTA0MTAwNjQxNTJaMBgxFjAUBgNV BAMTDTY3ZWUyZGIwLTY2MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgFPxSfD2OzqWSLXwDt7JiF9MmzoKlb9TX0UlVUUY2tfGxkc0MfzcBKs/it06S aJ4QLhTMQ3WizQ1MizkpUfkqeE672+yJyvmhwm1vIaK9edbOtp2zMNsg8yPh4FkV /reDqSk1zec+bWeWPg9oOBZd5kXohZxUr3eF6EYT5zVVxKV7427m1C7xP+TLj0yn kvGY4sxnTcFxnTWSiUunPjo/AU3AFkJqVbsZnzFnyC6tWmA87FA4awwqAM+au+ro gxRA67uP1KI1mUg3m9zDVkMKUYhVephhhyB2k2g2JWlf14vTCuIp4x7IhP5pgS98 NN2u4fL0Qfwbd8GMvJQoQBxVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW95NzhGv C5pVJ8FzR6xXlOPNTQQwHwYDVR0jBBgwFoAUpBUE5m4xRDSGJRkGluDoj/sfUnAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOUMxLzMwODA1Q0FBQUQ3 MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJVRTVtNHhSRFNHSlJrR2x1RG9qX3NmVW5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OUMxLzMwODA1Q0FBQUQ3MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRT R0pSa0dsdURval9zZlVuQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCV8D+Pb/fhDBvk6Qmu1xKFwQCVIrJTGtKRi8xRfNfwtHzy5MRJupmn kLhHYX5x+6zaCga0uofH1jZ0lxQA7JuHX42pW5gckWgfLP9KKOPY/aVXGDxOggnm lKTQHvtjRw8S9DvNAkisb8EiOTxTWjzi0L57KwUjPxTkDtZHos6Dut82VsUHSqMK jjhGf05wk3uEoVC2prLAerDV8uQGYFS1uTNbHlXGQZAYgaN8eNnQ3roYDjqRiF6b bW53n6yIdH9Z9m2mq7HvQFpyIT/lRSDc2lJZ85QAOnVEbYUxrB5/KIvR9ojwKi8R OVBxA13XRJSSjzai1eU8KtMBt/Pdrhg= -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:44 2025 by rpki-client