$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: Vc/w0Ddx2/Lm5gG6vQG8Nb78IO/ddBYG1Bp58H1q/2w= Subject key identifier: 74:EA:5B:EA:E9:CF:7D:32:74:FC:02:28:82:9D:1F:5C:7A:2E:30:4B Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 028A Signing time: Sat 29 Mar 2025 01:51:01 +0000 Manifest this update: Sat 29 Mar 2025 01:51:01 +0000 Manifest next update: Sat 05 Apr 2025 01:51:01 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: w9V666X4zGkambWH/WcmKI1Uxh7oFhhHxYaZLSM+qaU=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94 Validity Not Before: Mar 29 01:51:01 2025 GMT Not After : Apr 5 01:51:01 2025 GMT Subject: CN=67e75205-db80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:44:9a:c8:99:3c:2a:25:e8:72:0a:06:89:d9: 18:d5:cc:64:9d:80:13:f4:79:79:fd:7e:15:4b:73: 39:96:02:5c:39:5e:13:2d:61:17:cd:5c:a6:f6:56: c3:82:15:0a:c4:20:46:04:64:f5:6b:e6:1d:41:01: dd:46:4e:b3:be:76:76:9d:7b:3a:64:55:aa:cf:6d: ac:cf:59:f1:87:63:8e:70:15:67:76:82:74:97:68: 5b:33:9f:31:11:cb:3c:e2:99:f1:f3:62:da:ba:fe: 34:b2:d4:17:96:89:55:9d:03:a7:af:d8:f8:ec:6b: fe:19:c9:8b:5e:fc:80:12:27:16:5a:b2:27:2e:41: 07:fd:2e:b0:cc:25:77:1e:f9:db:1a:c5:e8:50:b1: a5:74:39:c3:ca:dd:a7:91:2e:9f:8f:a8:b2:52:05: bd:5f:85:07:2d:99:ef:b0:49:b5:bc:5a:6f:e0:b2: 3c:39:64:e6:0d:ab:bb:fb:2d:fa:a8:da:cd:ab:87: 63:76:1a:5d:64:35:8c:64:e7:a6:2c:30:af:17:6a: 67:75:4a:0e:b1:c5:b5:9f:35:59:2b:23:49:ff:e9: d6:24:9c:7e:27:55:65:9c:11:ab:8a:7a:41:fe:c6: d6:ff:65:94:9b:4c:83:2c:1c:5b:c4:c8:73:24:68: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EA:5B:EA:E9:CF:7D:32:74:FC:02:28:82:9D:1F:5C:7A:2E:30:4B X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:d4:97:1c:26:76:3a:94:a5:0b:10:d0:1c:04:cc:fd:2a: c6:01:59:de:c8:d3:bc:9e:53:07:fb:e4:b5:90:7e:70:25:02: 60:a2:5f:35:7f:33:d1:03:71:f4:87:29:e8:2e:97:4f:66:bb: ae:cd:e0:36:3e:b8:da:bf:e6:0a:28:1d:13:0f:e9:e0:17:d2: ca:73:e4:e3:d8:a5:7d:1e:ff:65:b0:f4:bf:34:57:d3:0b:a2: 76:1f:8b:f7:55:44:cd:b6:49:1c:73:90:12:d3:88:82:3a:50: 38:05:ba:f0:27:b7:14:36:63:d6:66:09:cb:fb:65:1f:7e:a2: a4:56:44:c4:76:e9:7e:16:9f:8a:5b:35:85:28:7d:3b:71:77: b3:12:98:f2:39:bf:a6:7f:02:65:c9:36:48:ce:75:aa:ac:69: 34:93:06:b5:dd:dd:dd:37:cb:20:f3:57:72:14:9d:3e:e9:b0: c6:be:37:7d:11:f3:5b:91:c9:da:3c:e9:1e:57:23:d9:2a:83: 29:ef:08:a2:bb:12:a9:79:e9:33:eb:09:4a:51:f8:b7:35:66: 8b:57:48:1d:82:01:16:26:23:2f:f1:c2:21:1a:25:e8:57:f7: ce:05:fc:c1:4b:0f:61:22:37:9d:de:04:f0:13:96:4f:48:df: 94:6c:a6:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwMzI5MDE1MTAxWhcNMjUwNDA1MDE1MTAxWjAYMRYwFAYD VQQDEw02N2U3NTIwNS1kYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ESayJk8KiXocgoGidkY1cxknYAT9Hl5/X4VS3M5lgJcOV4TLWEXzVym9lbD ghUKxCBGBGT1a+YdQQHdRk6zvnZ2nXs6ZFWqz22sz1nxh2OOcBVndoJ0l2hbM58x Ecs84pnx82Lauv40stQXlolVnQOnr9j47Gv+GcmLXvyAEicWWrInLkEH/S6wzCV3 HvnbGsXoULGldDnDyt2nkS6fj6iyUgW9X4UHLZnvsEm1vFpv4LI8OWTmDau7+y36 qNrNq4djdhpdZDWMZOemLDCvF2pndUoOscW1nzVZKyNJ/+nWJJx+J1VlnBGrinpB /sbW/2WUm0yDLBxbxMhzJGi/zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTqW+rp z30ydPwCKIKdH1x6LjBLMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3tSXHCZ2OpSlCxDQHATM/SrGAVneyNO8nlMH++S1kH5wJQJgol81 fzPRA3H0hynoLpdPZruuzeA2Prjav+YKKB0TD+ngF9LKc+Tj2KV9Hv9lsPS/NFfT C6J2H4v3VUTNtkkcc5AS04iCOlA4BbrwJ7cUNmPWZgnL+2UffqKkVkTEdul+Fp+K WzWFKH07cXezEpjyOb+mfwJlyTZIznWqrGk0kwa13d3dN8sg81dyFJ0+6bDGvjd9 EfNbkcnaPOkeVyPZKoMp7wiiuxKpeekz6wlKUfi3NWaLV0gdggEWJiMv8cIhGiXo V/fOBfzBSw9hIjed3gTwE5ZPSN+UbKaV -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:54 2025 by rpki-client