$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: a7LqyB8FLIJ9IgZUGBXUQXrl1A5AXTSJV5Gfx2Gjabk= Subject key identifier: 77:0F:17:07:B5:1D:BC:06:1E:6C:29:B8:4E:49:33:5A:DD:1D:F4:8C Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 09BB Signing time: Fri 04 Apr 2025 20:10:16 +0000 Manifest this update: Fri 04 Apr 2025 20:10:16 +0000 Manifest next update: Fri 11 Apr 2025 20:10:16 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: otk8etHmnol4jnZU36rmdcbNI8hxp3+ngqCiyko0OGU=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C Validity Not Before: Apr 4 20:10:16 2025 GMT Not After : Apr 11 20:10:16 2025 GMT Subject: CN=67f03ca8-9c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:62:2b:9f:67:fd:02:38:26:98:38:d7:d4: 9d:3d:52:16:57:d8:36:d2:94:1a:05:e6:02:fe:b5: 56:19:47:bc:51:05:2e:80:2c:6f:45:b1:72:78:a2: e9:50:d8:60:5d:ca:c7:08:01:5c:77:a0:d2:52:f8: 7f:f1:70:6a:f7:de:7b:ff:ee:ae:e7:51:e1:69:7a: ae:ed:50:88:cf:d2:64:c9:a1:5f:ff:1b:df:a8:27: d1:bd:97:52:3a:97:82:2e:d0:90:91:6f:ae:60:ff: 4c:af:8e:82:35:94:4e:ac:21:7c:9a:d2:7f:3a:7e: 82:83:cd:37:bf:43:06:c2:df:99:93:0e:18:4d:b1: 1b:4f:da:cd:bf:f4:33:bb:e9:5c:7d:84:db:e8:e0: 5f:09:97:ae:de:ab:f2:bc:65:ce:33:04:93:d8:6f: 38:5f:9b:de:13:cc:8b:ee:31:ca:b9:05:09:55:8f: b9:dd:ee:67:a3:f6:37:71:c3:03:33:f6:2b:b2:0c: 3a:e9:31:04:e6:51:2b:fc:d2:af:90:07:a7:80:b8: 34:46:74:7a:c0:e1:68:da:52:cc:01:5f:e5:b3:ef: e6:50:5e:72:9c:6f:f4:6a:ce:c7:cf:e1:af:5c:8a: 79:d8:7c:dd:0c:1b:97:73:e6:22:ac:41:6e:06:02: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0F:17:07:B5:1D:BC:06:1E:6C:29:B8:4E:49:33:5A:DD:1D:F4:8C X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:79:fa:c6:a4:09:ba:c6:82:59:90:46:a8:c3:ee:78:f5: c1:97:08:7c:c3:aa:ae:e2:02:a8:98:b8:44:e7:1e:9b:45:a7: bb:bc:20:7b:95:5c:70:8e:a8:27:2a:97:d1:5e:f2:ae:3e:f1: 33:be:2c:cb:e5:08:c0:f3:69:fb:1a:13:a6:57:5b:c6:cb:4f: a5:90:4f:b0:63:35:80:3f:fb:9d:fb:05:97:98:c7:f5:5d:51: bc:4c:b5:7a:40:b3:49:ab:f5:f3:f9:b7:06:59:66:31:80:eb: 00:66:45:24:49:b1:6a:11:27:6c:40:66:5d:d5:7e:03:1e:e4: be:9d:c7:56:6a:0e:fa:ef:65:54:4a:d9:6c:9a:66:e3:80:3b: 04:39:42:cd:f5:43:39:41:02:1f:2a:22:d7:a3:0a:9e:6e:b3: 5b:42:9d:43:b0:f3:31:b2:1a:62:fe:6c:de:0a:36:f5:da:99: 52:1d:ae:81:b8:ab:b8:27:01:9c:44:9d:26:f0:37:df:83:e3: f3:11:47:b5:90:a3:f3:0a:24:8d:af:c7:76:fb:b0:fd:5a:04: 29:71:f0:42:c6:25:8b:a5:4e:e7:b4:e3:28:ec:30:d3:e6:6d: a4:14:9f:24:57:17:b0:8a:37:cf:f6:55:c6:b1:72:a9:22:af: c5:b3:51:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUwNDA0MjAxMDE2WhcNMjUwNDExMjAxMDE2WjAYMRYwFAYD VQQDEw02N2YwM2NhOC05Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh5iK59n/QI4Jpg419SdPVIWV9g20pQaBeYC/rVWGUe8UQUugCxvRbFyeKLp UNhgXcrHCAFcd6DSUvh/8XBq9957/+6u51HhaXqu7VCIz9JkyaFf/xvfqCfRvZdS OpeCLtCQkW+uYP9Mr46CNZROrCF8mtJ/On6Cg803v0MGwt+Zkw4YTbEbT9rNv/Qz u+lcfYTb6OBfCZeu3qvyvGXOMwST2G84X5veE8yL7jHKuQUJVY+53e5no/Y3ccMD M/Yrsgw66TEE5lEr/NKvkAengLg0RnR6wOFo2lLMAV/ls+/mUF5ynG/0as7Hz+Gv XIp52HzdDBuXc+YirEFuBgJkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcPFwe1 HbwGHmwpuE5JM1rdHfSMMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZann6xqQJusaCWZBGqMPuePXBlwh8w6qu4gKomLhE5x6bRae7vCB7 lVxwjqgnKpfRXvKuPvEzvizL5QjA82n7GhOmV1vGy0+lkE+wYzWAP/ud+wWXmMf1 XVG8TLV6QLNJq/Xz+bcGWWYxgOsAZkUkSbFqESdsQGZd1X4DHuS+ncdWag7672VU StlsmmbjgDsEOULN9UM5QQIfKiLXowqebrNbQp1DsPMxshpi/mzeCjb12plSHa6B uKu4JwGcRJ0m8Dffg+PzEUe1kKPzCiSNr8d2+7D9WgQpcfBCxiWLpU7ntOMo7DDT 5m2kFJ8kVxewijfP9lXGsXKpIq/Fs1FS -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:01 2025 by rpki-client