$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: /Syu4yoqhFV/Ax1oxEq5ZfWQe1aRaKno+xJv+abl/l4= Subject key identifier: 9A:73:6B:27:95:CF:31:31:4B:71:D1:87:F9:DE:68:EB:25:75:DA:0B Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 06D2 Signing time: Fri 28 Mar 2025 22:20:27 +0000 Manifest this update: Fri 28 Mar 2025 22:20:26 +0000 Manifest next update: Fri 04 Apr 2025 22:20:26 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: bLxlhpumF+spUb/KL6uHiyecsRVmyUgi+Afa8fmZiO0=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE Validity Not Before: Mar 28 22:20:26 2025 GMT Not After : Apr 4 22:20:26 2025 GMT Subject: CN=67e720ab-5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:15:91:e9:c7:29:a2:ec:1f:44:25:79:19: 82:72:dd:a4:c7:13:0b:64:01:59:05:83:4a:c2:b2: d8:9a:3c:96:ec:fc:46:91:bb:44:2c:94:db:9d:a8: f9:94:06:f4:dc:b8:eb:73:77:03:24:e6:c3:7e:97: 35:2c:13:b3:24:3d:6b:c9:8e:a0:d7:10:47:2a:b7: 82:b2:8f:83:e3:a7:2c:39:a9:7a:36:51:36:49:61: b4:0c:5e:c1:2b:77:9e:58:20:56:38:c4:53:f9:10: 5b:77:7b:53:fe:b8:e8:d0:20:ae:50:f5:71:58:8d: 06:cb:b6:f8:97:45:9f:e6:54:df:f8:ff:26:ec:87: d6:2e:7a:65:62:f4:bc:f9:e4:ba:d2:ca:28:7b:ca: 61:80:44:9b:19:97:b0:55:fa:de:d2:0c:79:18:7a: 06:b9:97:fb:9d:92:5d:20:ee:80:b3:be:b6:3c:52: 35:f4:8e:8b:bd:f9:8f:af:a7:01:bd:a0:dd:5e:69: 77:93:87:64:bb:05:e9:10:fa:0d:af:28:15:f3:89: ea:97:16:ae:3c:79:24:cd:1e:8c:90:fc:97:14:28: 5f:ce:a9:74:df:f1:36:36:d3:9d:64:17:3d:c1:d1: 84:c9:90:38:96:0a:00:c8:74:5b:26:f3:09:86:11: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:73:6B:27:95:CF:31:31:4B:71:D1:87:F9:DE:68:EB:25:75:DA:0B X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:9f:44:5e:15:a2:32:55:a7:24:df:97:ea:00:ae:fc:a0: b0:6d:1e:cb:f4:82:42:a1:22:04:4b:f5:88:56:1f:4f:58:dd: d4:9d:00:a6:bf:fe:3e:45:06:1d:f4:c1:93:e1:8e:1e:df:8e: 75:d1:dd:ab:54:12:88:93:79:2c:61:9b:ad:8e:b9:8f:6b:3c: 65:0b:a8:95:b8:73:d7:8e:e3:89:c6:1b:98:70:c5:50:f1:65: 19:c0:fe:35:93:d4:3d:db:f9:e7:f5:78:ff:b4:f8:24:96:eb: bb:6b:c9:f3:96:99:ee:a6:a7:59:cf:05:bf:28:70:67:4e:0a: 15:1a:97:44:f0:c2:53:37:0c:e6:c0:91:46:2e:13:fe:b7:11: 7d:c6:37:6e:90:4b:c0:e1:a6:ea:8e:fc:41:29:77:d9:77:ce: 91:79:9c:be:ab:59:c8:f6:19:78:cc:ee:86:5e:4f:0b:49:d0: 71:03:40:dd:7c:34:83:42:a6:89:fc:bc:e3:1a:9e:5f:bd:48: 7f:f6:bd:3b:33:39:71:1f:e9:a5:a4:cf:3e:69:ac:7e:a1:fc: d6:7b:f0:6b:38:42:9e:5a:88:87:75:f3:7d:68:52:5e:fe:d6: bc:44:89:4a:c2:46:d6:7f:47:50:66:1c:10:33:15:f0:b0:60: e3:be:47:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjUwMzI4MjIyMDI2WhcNMjUwNDA0MjIyMDI2WjAYMRYwFAYD VQQDEw02N2U3MjBhYi01MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJMVkenHKaLsH0QleRmCct2kxxMLZAFZBYNKwrLYmjyW7PxGkbtELJTbnaj5 lAb03Ljrc3cDJObDfpc1LBOzJD1ryY6g1xBHKreCso+D46csOal6NlE2SWG0DF7B K3eeWCBWOMRT+RBbd3tT/rjo0CCuUPVxWI0Gy7b4l0Wf5lTf+P8m7IfWLnplYvS8 +eS60sooe8phgESbGZewVfre0gx5GHoGuZf7nZJdIO6As762PFI19I6LvfmPr6cB vaDdXml3k4dkuwXpEPoNrygV84nqlxauPHkkzR6MkPyXFChfzql03/E2NtOdZBc9 wdGEyZA4lgoAyHRbJvMJhhHCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpzayeV zzExS3HRh/neaOslddoLMB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPNp9EXhWiMlWnJN+X6gCu/KCwbR7L9IJCoSIES/WIVh9PWN3UnQCm v/4+RQYd9MGT4Y4e34510d2rVBKIk3ksYZutjrmPazxlC6iVuHPXjuOJxhuYcMVQ 8WUZwP41k9Q92/nn9Xj/tPgkluu7a8nzlpnupqdZzwW/KHBnTgoVGpdE8MJTNwzm wJFGLhP+txF9xjdukEvA4abqjvxBKXfZd86ReZy+q1nI9hl4zO6GXk8LSdBxA0Dd fDSDQqaJ/LzjGp5fvUh/9r07MzlxH+mlpM8+aax+ofzWe/BrOEKeWoiHdfN9aFJe /ta8RIlKwkbWf0dQZhwQMxXwsGDjvkdL -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:11 2025 by rpki-client