$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: iXwSceU72lnt2Glv2cMMzxBWQkT8hcqw+orNRJ82/0w= Subject key identifier: A1:A5:A9:E7:36:5D:BD:DF:C0:51:A8:FA:F7:58:CB:06:BE:0F:EF:C9 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 0436 Signing time: Sat 29 Mar 2025 00:33:41 +0000 Manifest this update: Sat 29 Mar 2025 00:33:41 +0000 Manifest next update: Sat 05 Apr 2025 00:33:41 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: 04qDZYMYWE/fWye6gFnKfj8BuQF4AKfJ0yDfQH13AT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7 Validity Not Before: Mar 29 00:33:41 2025 GMT Not After : Apr 5 00:33:41 2025 GMT Subject: CN=67e73fe5-152b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:4e:50:21:75:f3:56:7e:fa:89:36:2d:0f: 82:f1:c3:46:18:25:03:8a:ff:73:88:ae:35:2d:8a: 53:d8:4d:81:11:14:21:8e:fa:0c:67:0f:d9:1e:0d: 78:f3:fb:00:4a:1f:b5:ef:fe:69:f8:2a:fe:ba:00: 28:fa:da:88:d6:d8:94:f9:16:81:82:eb:14:f5:e2: 1f:c5:ab:8a:f4:f8:8e:f5:58:71:9d:d5:2b:ea:92: e1:63:f8:31:73:87:47:88:c2:45:1a:3e:94:a0:29: 10:26:e5:98:37:61:37:53:ed:8d:94:9d:3c:16:47: 5f:30:45:1c:a2:ca:0f:1e:1f:ed:6b:10:e4:c4:b5: 01:49:1b:59:4c:b3:a0:d3:d7:b1:68:66:7a:ce:8d: db:86:a2:a2:1c:91:9e:87:2b:08:b3:22:4c:f0:16: 3f:55:2c:34:5e:a6:77:45:4f:9e:ef:00:e5:d7:3b: 71:ef:57:1e:bd:86:80:02:15:0a:34:2c:9e:98:6d: 8c:08:01:19:13:42:86:b6:03:1c:e7:66:ef:24:8f: 5e:a3:41:2e:d4:3a:fc:5b:da:d6:76:bc:12:85:94: db:01:a8:b5:51:61:91:6d:7a:75:9a:60:eb:86:d2: 68:f6:88:31:7b:d9:f0:60:1a:a3:6d:f2:00:b0:88: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:A9:E7:36:5D:BD:DF:C0:51:A8:FA:F7:58:CB:06:BE:0F:EF:C9 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:84:d6:27:96:c9:44:be:cb:34:d1:89:b0:77:e3:96:eb:64: b1:1c:b6:1d:10:7f:7d:db:ac:e2:19:df:a2:c3:92:c3:7c:10: 46:e1:6c:17:16:cc:b7:4c:52:e0:1d:6e:45:3e:83:3a:68:f4: b8:24:9b:be:b5:ac:e7:12:02:8a:8e:84:a6:04:92:f5:9a:15: a6:ad:8e:45:26:a5:d5:cb:cd:f7:38:a8:99:04:66:40:b2:52: d8:5e:5d:f4:70:96:b4:80:36:b6:b8:27:a3:b0:15:cf:5c:40: 91:e0:3c:41:fb:43:6d:62:b4:60:cb:06:d8:5a:68:91:1f:5c: 9a:e2:9e:3c:10:0c:d4:56:cd:c6:77:78:a0:5e:84:07:fd:49: a9:d2:a7:83:11:5d:52:27:bc:e2:41:f9:09:27:21:44:80:91: 21:40:4c:41:32:41:f5:a1:af:8c:1f:2d:1e:5c:6e:09:6d:d2: 03:83:d5:f1:cc:95:fe:be:5b:f0:8c:95:f8:37:ef:f5:ab:08: d1:5b:73:be:75:6c:03:2b:a2:7e:92:0d:b4:f9:0e:74:9b:0f: 03:1d:e0:43:9f:9f:ea:56:f8:37:fe:3e:3d:5a:bf:1a:e6:eb: 7d:2f:e1:96:a7:e0:32:55:96:73:8c:e6:ec:28:85:d1:a1:bf: 36:64:f9:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUwMzI5MDAzMzQxWhcNMjUwNDA1MDAzMzQxWjAYMRYwFAYD VQQDEw02N2U3M2ZlNS0xNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjFOUCF181Z++ok2LQ+C8cNGGCUDiv9ziK41LYpT2E2BERQhjvoMZw/ZHg14 8/sASh+17/5p+Cr+ugAo+tqI1tiU+RaBgusU9eIfxauK9PiO9VhxndUr6pLhY/gx c4dHiMJFGj6UoCkQJuWYN2E3U+2NlJ08FkdfMEUcosoPHh/taxDkxLUBSRtZTLOg 09exaGZ6zo3bhqKiHJGehysIsyJM8BY/VSw0XqZ3RU+e7wDl1ztx71cevYaAAhUK NCyemG2MCAEZE0KGtgMc52bvJI9eo0Eu1Dr8W9rWdrwShZTbAai1UWGRbXp1mmDr htJo9ogxe9nwYBqjbfIAsIiwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGlqec2 Xb3fwFGo+vdYywa+D+/JMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHhNYnlslEvss00Ymwd+OW62SxHLYdEH9926ziGd+iw5LDfBBG4WwX Fsy3TFLgHW5FPoM6aPS4JJu+taznEgKKjoSmBJL1mhWmrY5FJqXVy833OKiZBGZA slLYXl30cJa0gDa2uCejsBXPXECR4DxB+0NtYrRgywbYWmiRH1ya4p48EAzUVs3G d3igXoQH/Ump0qeDEV1SJ7ziQfkJJyFEgJEhQExBMkH1oa+MHy0eXG4JbdIDg9Xx zJX+vlvwjJX4N+/1qwjRW3O+dWwDK6J+kg20+Q50mw8DHeBDn5/qVvg3/j49Wr8a 5ut9L+GWp+AyVZZzjObsKIXRob82ZPlz -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:47 2025 by rpki-client