$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: tmhCwyoHSuSt5SmkkcTtManw80GsX+zwPNmc5ji02HI= Subject key identifier: FF:EB:51:25:68:CA:6C:72:E8:8B:59:D9:D4:9B:11:E5:41:6B:75:A7 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 113E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 112A Signing time: Wed 16 Apr 2025 17:15:10 +0000 Manifest this update: Wed 16 Apr 2025 17:15:09 +0000 Manifest next update: Wed 23 Apr 2025 17:15:09 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: lxxJP2/0IwEYHl0yDf17iSLzcKU0ILZJrz1nikuHVbs=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4414 (0x113e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Apr 16 17:15:09 2025 GMT Not After : Apr 23 17:15:09 2025 GMT Subject: CN=67ffe59d-610f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:0c:f3:de:6f:02:64:8c:b5:1d:5f:72:da: 9f:05:a3:03:46:22:e5:72:72:e1:b2:1d:84:43:4d: 5c:e1:24:26:8a:76:07:79:3c:5f:d4:85:d3:7b:4b: 8e:13:26:2e:a7:34:f0:cf:1c:22:c1:31:d9:98:8d: 05:64:d5:32:4c:2c:5b:5f:a9:8a:66:c5:97:f6:68: 4d:46:05:da:aa:5a:cf:ca:65:3b:dc:1c:d6:c9:8a: f1:d2:6d:58:f3:46:9d:a9:6c:35:d8:2f:9c:11:09: 66:b7:3b:0d:b8:4b:af:4d:1f:64:03:92:72:23:70: da:03:0a:c7:b2:4f:d2:3f:07:0b:97:3b:a2:f6:cf: c4:6b:48:0d:f1:58:ff:cc:76:fc:ec:9e:fd:a3:c1: 7c:70:08:b6:45:53:19:ee:34:04:45:38:df:72:cc: ae:ef:6c:80:d8:92:85:4b:27:fd:4e:85:da:a6:f3: 50:42:3f:77:01:35:ab:a3:ae:be:b3:a4:12:a0:18: a6:b2:3d:cb:be:e9:7c:49:92:90:99:3e:7f:e5:bd: 54:61:d8:a7:6a:85:e3:d9:55:88:73:6f:7c:d6:5b: 53:fd:90:02:32:7f:d9:a6:ec:3a:b4:c9:79:f5:cc: 10:92:f2:7a:33:e8:ec:bf:7e:dd:c1:fb:75:03:d6: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:51:25:68:CA:6C:72:E8:8B:59:D9:D4:9B:11:E5:41:6B:75:A7 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:54:12:f4:0f:df:2f:b7:cf:3b:00:6f:61:b8:35:f2:ee: 70:d7:2b:9c:8e:32:80:57:7b:ab:e8:1e:5a:7b:b2:0c:7f:9b: 75:d0:6e:b6:46:0b:e5:55:e3:1e:90:e9:fe:1d:41:d4:19:47: 39:47:e0:9c:85:c7:51:bf:d5:2c:e8:35:24:1d:fe:49:f5:f9: bf:d3:2d:0d:4a:a0:35:aa:a8:6f:7b:83:07:b3:34:54:68:31: 99:ef:f6:db:70:53:c8:58:e2:51:eb:bd:ac:07:c9:6f:14:8a: 88:75:d4:48:f2:07:77:86:08:b0:fe:b8:de:26:26:e2:a0:6d: b6:20:11:80:06:db:1b:58:03:64:4f:4b:28:42:6b:53:03:83: 85:98:eb:b9:84:95:94:94:7d:16:d8:f6:71:01:6d:71:b2:38: 07:e8:89:6d:6f:77:bd:5a:ae:80:4a:8d:49:65:25:a6:0f:80: 6d:04:5f:be:e1:18:33:21:e1:86:57:45:93:f4:83:46:82:fd: f9:f6:85:cc:ac:68:e0:e6:6b:f1:97:35:3c:7e:a4:b1:cb:4a: 67:a8:ed:37:ad:1a:1a:2d:07:08:97:d7:55:ac:9f:cc:77:de: 11:be:3a:ed:47:d6:d7:c7:9a:1a:85:3e:00:06:35:53:e2:9e: f7:6c:02:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICET4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwNDE2MTcxNTA5WhcNMjUwNDIzMTcxNTA5WjAYMRYwFAYD VQQDEw02N2ZmZTU5ZC02MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9MM895vAmSMtR1fctqfBaMDRiLlcnLhsh2EQ01c4SQminYHeTxf1IXTe0uO EyYupzTwzxwiwTHZmI0FZNUyTCxbX6mKZsWX9mhNRgXaqlrPymU73BzWyYrx0m1Y 80adqWw12C+cEQlmtzsNuEuvTR9kA5JyI3DaAwrHsk/SPwcLlzui9s/Ea0gN8Vj/ zHb87J79o8F8cAi2RVMZ7jQERTjfcsyu72yA2JKFSyf9ToXapvNQQj93ATWro66+ s6QSoBimsj3Lvul8SZKQmT5/5b1UYdinaoXj2VWIc2981ltT/ZACMn/Zpuw6tMl5 9cwQkvJ6M+jsv37dwft1A9YLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/rUSVo ymxy6ItZ2dSbEeVBa3WnMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTFQS9A/fL7fPOwBvYbg18u5w1yucjjKAV3ur6B5ae7IMf5t10G62 RgvlVeMekOn+HUHUGUc5R+CchcdRv9Us6DUkHf5J9fm/0y0NSqA1qqhve4MHszRU aDGZ7/bbcFPIWOJR672sB8lvFIqIddRI8gd3hgiw/rjeJibioG22IBGABtsbWANk T0soQmtTA4OFmOu5hJWUlH0W2PZxAW1xsjgH6Iltb3e9Wq6ASo1JZSWmD4BtBF++ 4RgzIeGGV0WT9INGgv359oXMrGjg5mvxlzU8fqSxy0pnqO03rRoaLQcIl9dVrJ/M d94RvjrtR9bXx5oahT4ABjVT4p73bAIe -----END CERTIFICATE-----Generated at Wed Apr 16 22:19:13 2025 by rpki-client