$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: tYyqzfjEL/HjLCQMZm/WEoOrzj/Epx4aFTM3x6ALHVg= Subject key identifier: 8B:6E:23:BE:01:C3:BC:5A:CF:CE:FD:06:27:83:40:3A:87:66:A7:C8 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 280C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 2807 Signing time: Sun 20 Apr 2025 15:34:31 +0000 Manifest this update: Sun 20 Apr 2025 15:34:30 +0000 Manifest next update: Sun 27 Apr 2025 15:34:30 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: Axh/d5fAPG5QQAFZyB57GlRMCKdVASA1rAXDTN/RdS4=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10252 (0x280c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Apr 20 15:34:30 2025 GMT Not After : Apr 27 15:34:30 2025 GMT Subject: CN=68051406-bacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:2b:e2:0b:cd:a8:02:8a:e3:78:ff:8b:75: 8e:41:93:ef:3a:35:68:ef:dd:29:fa:e1:be:06:a7: 97:26:df:06:38:b2:93:ce:f4:56:3c:8c:72:d2:6f: 36:90:63:f9:c2:24:d8:ee:7b:df:23:36:5c:14:45: 46:0f:a7:86:6d:98:ff:4c:98:cc:22:02:45:78:6d: 5a:bd:d5:69:81:35:67:52:44:a3:c8:06:77:89:21: 57:8f:de:07:69:78:f3:64:13:56:57:d6:7f:87:5e: cd:39:8c:24:f7:67:cc:1c:80:f8:f3:64:a7:5a:02: e7:6b:60:23:64:72:d3:ec:56:68:c5:16:c3:68:13: 33:9d:26:9e:cc:1d:9b:c3:2b:28:c9:87:b5:b6:8b: 29:47:aa:de:33:6d:35:a5:4c:d0:ed:ae:c6:96:cd: 18:77:86:54:cf:34:27:17:bb:9e:c8:31:e3:67:27: 90:c3:db:3b:26:e6:09:95:f7:90:2a:ce:08:ca:61: ba:2c:28:13:de:b7:2c:32:7b:b3:a3:cf:58:66:8f: 6f:4c:63:e2:78:88:44:2c:cc:76:e3:cd:cc:fc:e5: 70:c3:08:f5:a9:1e:32:17:92:f8:8e:28:73:63:da: cc:35:6d:62:60:b7:0c:8e:5f:98:65:53:e9:38:94: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:23:BE:01:C3:BC:5A:CF:CE:FD:06:27:83:40:3A:87:66:A7:C8 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:8a:5b:2c:9e:b9:ec:0b:9b:a7:5d:1f:34:36:3d:2f:44:a6: a6:08:e2:46:f3:f2:a6:c9:4e:be:2d:35:09:4d:33:00:fd:df: f9:8e:8d:8f:50:36:05:30:52:99:54:ee:09:ec:1e:a7:b8:dc: 75:c5:7f:84:fa:c6:46:ab:cf:5e:d4:44:9b:f4:f1:7d:5f:e5: 0e:32:05:fa:b3:27:ff:42:c1:74:2b:f0:16:59:09:11:f4:77: ae:ba:ff:31:2d:47:fe:f6:b0:39:35:7a:c4:38:b0:1f:c0:bc: e3:a9:40:83:78:3f:a5:98:ba:55:85:79:77:b7:03:ff:70:ec: 10:4b:fd:5b:30:1d:44:f6:3b:1c:32:f8:44:c7:46:32:66:88: fa:2e:f2:75:ac:16:d4:d8:7b:6e:ec:7e:81:c3:6e:96:15:5a: df:17:cf:01:f2:92:3d:4d:00:a6:61:f2:85:74:57:b2:1a:24: 28:36:fa:ac:fc:27:df:0e:77:0a:53:9a:55:6f:c4:5a:7c:7f: 12:66:54:62:18:90:08:41:b9:db:4b:92:8e:e2:8c:b6:03:ce: 3c:c9:78:b6:a1:28:22:54:04:53:cf:05:85:80:f4:85:21:80: 9b:a6:18:22:9b:7d:7f:94:6d:08:8a:03:14:71:d0:ce:16:03: 59:e4:27:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUwNDIwMTUzNDMwWhcNMjUwNDI3MTUzNDMwWjAYMRYwFAYD VQQDEw02ODA1MTQwNi1iYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8gr4gvNqAKK43j/i3WOQZPvOjVo790p+uG+BqeXJt8GOLKTzvRWPIxy0m82 kGP5wiTY7nvfIzZcFEVGD6eGbZj/TJjMIgJFeG1avdVpgTVnUkSjyAZ3iSFXj94H aXjzZBNWV9Z/h17NOYwk92fMHID482SnWgLna2AjZHLT7FZoxRbDaBMznSaezB2b wysoyYe1tospR6reM201pUzQ7a7Gls0Yd4ZUzzQnF7ueyDHjZyeQw9s7JuYJlfeQ Ks4IymG6LCgT3rcsMnuzo89YZo9vTGPieIhELMx2483M/OVwwwj1qR4yF5L4jihz Y9rMNW1iYLcMjl+YZVPpOJQZpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItuI74B w7xaz879BieDQDqHZqfIMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRilssnrnsC5unXR80Nj0vRKamCOJG8/KmyU6+LTUJTTMA/d/5jo2P UDYFMFKZVO4J7B6nuNx1xX+E+sZGq89e1ESb9PF9X+UOMgX6syf/QsF0K/AWWQkR 9Heuuv8xLUf+9rA5NXrEOLAfwLzjqUCDeD+lmLpVhXl3twP/cOwQS/1bMB1E9jsc MvhEx0YyZoj6LvJ1rBbU2Htu7H6Bw26WFVrfF88B8pI9TQCmYfKFdFeyGiQoNvqs /CffDncKU5pVb8RafH8SZlRiGJAIQbnbS5KO4oy2A848yXi2oSgiVARTzwWFgPSF IYCbphgim31/lG0IigMUcdDOFgNZ5CcH -----END CERTIFICATE-----Generated at Sun Apr 20 22:24:00 2025 by rpki-client