$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: 98g8kdlidmN/g2iAyf6DWcAzRkqXG6mByibYFSirkzY= Subject key identifier: 0A:AA:CD:B4:1C:D6:BA:7B:27:ED:0D:89:62:AA:AD:A5:4B:04:D5:E8 Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 0169 Signing time: Mon 07 Apr 2025 02:55:35 +0000 Manifest this update: Mon 07 Apr 2025 02:55:35 +0000 Manifest next update: Mon 14 Apr 2025 02:55:35 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: wiVLbLJ/7a/snSC99Y9KeC6JFwvOGKLzjQXw+qi0kt8=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123 Validity Not Before: Apr 7 02:55:35 2025 GMT Not After : Apr 14 02:55:35 2025 GMT Subject: CN=67f33ea7-e27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:90:f2:59:8d:fd:cf:4e:dc:4e:06:f9:b7: 43:a2:64:c2:e6:2d:5e:34:b8:a2:45:ef:2f:ca:3e: a1:ba:e1:27:85:d0:e2:ab:52:1d:f8:c0:ce:b8:8c: cf:d7:15:56:18:4b:8f:75:bc:5a:df:39:15:73:2d: 6b:36:fe:f9:0e:ec:ff:ca:61:3a:9b:61:4f:be:43: 02:91:0c:b2:ee:7a:43:9b:3c:5a:f5:8a:0d:a9:58: f4:ca:8c:90:00:16:4c:00:46:2b:c7:af:d1:58:82: 35:a9:1c:fc:b2:47:d9:92:86:3c:87:ed:6c:d1:e2: d3:a9:17:40:7d:91:bd:6b:54:7e:d6:78:d6:bc:58: 60:a3:a4:6e:ef:73:4f:80:9c:0c:9d:72:66:c5:41: 8d:3e:3f:0c:cf:af:ba:e4:c0:10:60:95:0f:21:a6: 76:b9:39:da:9b:8b:47:cf:ca:83:64:d6:75:5a:94: 82:77:43:95:c8:e4:91:79:c3:54:76:8c:d2:86:6a: 89:80:3b:9e:fa:b1:ee:c3:5d:12:cb:20:ca:6e:63: a1:43:9f:9a:5a:76:b0:51:95:98:75:48:4d:33:67: fa:4f:f0:ea:80:69:44:b6:2e:85:76:a9:42:63:cc: 39:ef:89:94:35:84:29:75:bb:c6:b7:60:8b:a0:85: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:CD:B4:1C:D6:BA:7B:27:ED:0D:89:62:AA:AD:A5:4B:04:D5:E8 X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:53:43:eb:48:05:eb:ca:3a:dd:a8:c8:5b:d9:de:5e:97: a9:b3:c3:78:31:03:ef:29:ea:f0:0c:8d:13:e2:2f:6e:e6:7c: 87:23:56:3d:48:46:6c:19:10:ae:8c:aa:ae:a3:9d:6f:71:c5: 67:9e:d1:c9:ef:23:53:66:ea:49:f8:5a:fd:ca:ce:7e:4b:65: 12:a5:d9:b5:6c:55:e7:db:5f:84:f5:1d:55:cb:f8:8b:a0:0f: 16:e4:a5:d4:ed:2d:38:ae:2e:af:23:35:86:d2:63:2d:5f:b9: c0:85:53:77:cb:45:72:43:a9:d4:2e:c0:76:3a:a4:fa:8f:e4: 35:50:b6:d4:88:2e:e9:78:84:f4:69:17:05:7f:f7:d5:69:93: d1:78:69:ad:d1:c1:ec:6f:a5:8b:15:b5:3e:6b:bf:c1:3c:a5: 80:dd:2f:53:6f:91:7c:ab:cb:58:ad:66:bc:62:38:69:3a:16: 58:fb:01:2e:80:8f:7d:e0:f9:d0:ff:01:a9:81:5e:0d:56:15: 64:40:45:14:7b:69:68:cf:8f:69:ae:26:7a:f7:24:80:84:71: ce:da:0c:fe:02:ee:41:de:dd:4b:53:68:ab:6c:f8:3c:88:73: 69:7a:9c:2d:71:78:1e:f0:60:b8:a3:a2:a3:fd:8d:b9:7a:fb: 8b:10:69:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjUwNDA3MDI1NTM1WhcNMjUwNDE0MDI1NTM1WjAYMRYwFAYD VQQDEw02N2YzM2VhNy1lMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7mQ8lmN/c9O3E4G+bdDomTC5i1eNLiiRe8vyj6huuEnhdDiq1Id+MDOuIzP 1xVWGEuPdbxa3zkVcy1rNv75Duz/ymE6m2FPvkMCkQyy7npDmzxa9YoNqVj0yoyQ ABZMAEYrx6/RWII1qRz8skfZkoY8h+1s0eLTqRdAfZG9a1R+1njWvFhgo6Ru73NP gJwMnXJmxUGNPj8Mz6+65MAQYJUPIaZ2uTnam4tHz8qDZNZ1WpSCd0OVyOSRecNU dozShmqJgDue+rHuw10SyyDKbmOhQ5+aWnawUZWYdUhNM2f6T/DqgGlEti6FdqlC Y8w574mUNYQpdbvGt2CLoIXuTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqqzbQc 1rp7J+0NiWKqraVLBNXoMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB9FND60gF68o63ajIW9neXpeps8N4MQPvKerwDI0T4i9u5nyHI1Y9 SEZsGRCujKquo51vccVnntHJ7yNTZupJ+Fr9ys5+S2USpdm1bFXn21+E9R1Vy/iL oA8W5KXU7S04ri6vIzWG0mMtX7nAhVN3y0VyQ6nULsB2OqT6j+Q1ULbUiC7peIT0 aRcFf/fVaZPReGmt0cHsb6WLFbU+a7/BPKWA3S9Tb5F8q8tYrWa8YjhpOhZY+wEu gI994PnQ/wGpgV4NVhVkQEUUe2loz49priZ69ySAhHHO2gz+Au5B3t1LU2irbPg8 iHNpepwtcXge8GC4o6Kj/Y25evuLEGlE -----END CERTIFICATE-----Generated at Mon Apr 7 13:51:21 2025 by rpki-client