$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: P/GbxzmB8HMT/eRkhEdujf0wMJ3K+VSjfpqogO/BArA= Subject key identifier: D2:A3:B5:98:80:D7:83:BF:89:00:31:4F:E0:A2:A5:EE:52:52:49:05 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0A17 Signing time: Fri 04 Apr 2025 19:58:33 +0000 Manifest this update: Fri 04 Apr 2025 19:58:32 +0000 Manifest next update: Fri 11 Apr 2025 19:58:32 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: rSh/fFVi0RWOK5RSHd7KjKWZMOcYctZNlCQSuT7EQMc=) 2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537 Validity Not Before: Apr 4 19:58:32 2025 GMT Not After : Apr 11 19:58:32 2025 GMT Subject: CN=67f039e8-9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:ca:53:8c:b2:6f:34:3b:eb:01:6c:33:98: c6:81:dc:b0:47:27:21:87:30:9d:66:22:0e:47:fd: a9:92:de:ff:be:f0:2a:e9:be:fc:6a:20:dd:2d:13: 2e:03:c0:4b:53:5f:96:44:17:4e:eb:3f:57:5e:a9: 2a:55:b8:81:d1:36:38:03:1d:99:6d:50:8c:15:9e: c8:0c:47:ca:ea:7f:be:c8:71:a9:98:5a:0a:de:23: c2:e8:11:21:91:b8:38:1a:56:ea:87:df:6e:6b:96: 86:45:82:02:f2:56:f4:4b:e9:b3:24:83:1e:b5:a4: b1:9f:35:00:61:44:b1:8d:1b:10:97:b3:3b:fb:5e: 8c:17:1f:8a:74:84:2f:2c:4e:7f:04:97:c6:fa:38: fe:f6:6c:13:8e:1e:53:05:05:aa:f8:a6:18:45:57: 32:ca:ef:c0:a3:f9:88:c6:fd:5a:4c:50:1d:28:1d: 6f:70:d3:81:a8:49:b1:5d:c2:3e:f9:ea:69:78:5b: 0b:a8:9c:75:3f:d4:bc:f5:f7:43:26:04:3f:bf:43: f2:a4:e8:18:bd:6f:7a:cd:67:a5:cd:78:a1:f4:c8: 86:df:ca:fd:ae:b7:b4:66:c5:a2:b5:a6:9d:37:a4: 6e:0f:49:fb:0f:ac:a3:40:66:75:1c:4f:82:42:70: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A3:B5:98:80:D7:83:BF:89:00:31:4F:E0:A2:A5:EE:52:52:49:05 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:58:58:b8:f3:9d:a8:73:90:53:ad:26:5b:b2:3e:23:ac:65: 7b:86:b6:31:02:08:ba:02:a9:1d:3e:68:bf:71:4f:43:b9:fc: f1:5d:c0:11:87:30:fe:13:79:cb:7a:49:92:46:ea:19:d4:17: cb:64:ac:16:8b:33:a2:81:2b:43:d2:a2:0e:f7:3c:a1:ea:5d: 26:42:01:6d:e8:28:ce:75:bf:6f:89:0c:b4:af:2b:ff:da:03: 3e:81:23:9e:b0:3f:b9:c7:7d:1e:05:44:af:dc:4d:a9:40:79: 38:30:86:3f:ab:41:0d:f2:dc:55:6b:36:ef:3d:d5:76:f3:43: bb:5a:52:09:39:fa:51:8c:2b:47:82:4f:fd:08:f5:6d:f2:7b: 14:22:7b:39:31:b2:ce:0c:54:85:fe:cc:18:89:a0:e1:c2:68: d8:88:9f:22:a5:4a:de:7e:2c:3e:3b:4c:40:b1:b1:d5:58:d7: 60:07:b4:26:bb:c8:99:f5:a9:28:26:56:50:11:14:f2:20:0a: bf:e4:d8:df:05:dd:d5:4b:e6:68:63:22:a5:ad:58:0d:a5:9e: 58:86:c5:e7:84:fa:bd:8e:b6:a6:ed:34:80:ba:e3:60:3e:68: 9f:0c:ee:c9:8d:a7:df:f8:ef:c4:8a:7d:82:34:d2:05:ec:84: 83:da:c5:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjUwNDA0MTk1ODMyWhcNMjUwNDExMTk1ODMyWjAYMRYwFAYD VQQDEw02N2YwMzllOC05MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30jKU4yybzQ76wFsM5jGgdywRychhzCdZiIOR/2pkt7/vvAq6b78aiDdLRMu A8BLU1+WRBdO6z9XXqkqVbiB0TY4Ax2ZbVCMFZ7IDEfK6n++yHGpmFoK3iPC6BEh kbg4Glbqh99ua5aGRYIC8lb0S+mzJIMetaSxnzUAYUSxjRsQl7M7+16MFx+KdIQv LE5/BJfG+jj+9mwTjh5TBQWq+KYYRVcyyu/Ao/mIxv1aTFAdKB1vcNOBqEmxXcI+ +eppeFsLqJx1P9S89fdDJgQ/v0PypOgYvW96zWelzXih9MiG38r9rre0ZsWitaad N6RuD0n7D6yjQGZ1HE+CQnCJ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKjtZiA 14O/iQAxT+Cipe5SUkkFMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaWFi4852oc5BTrSZbsj4jrGV7hrYxAgi6AqkdPmi/cU9DufzxXcAR hzD+E3nLekmSRuoZ1BfLZKwWizOigStD0qIO9zyh6l0mQgFt6CjOdb9viQy0ryv/ 2gM+gSOesD+5x30eBUSv3E2pQHk4MIY/q0EN8txVazbvPdV280O7WlIJOfpRjCtH gk/9CPVt8nsUIns5MbLODFSF/swYiaDhwmjYiJ8ipUrefiw+O0xAsbHVWNdgB7Qm u8iZ9akoJlZQERTyIAq/5NjfBd3VS+ZoYyKlrVgNpZ5YhsXnhPq9jram7TSAuuNg PmifDO7Jjaff+O/Ein2CNNIF7ISD2sVq -----END CERTIFICATE-----Generated at Sat Apr 5 22:14:37 2025 by rpki-client