$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: VHLrSzTYVFmTTyFjEVXdxSTiWj9v9OVruNDgUlH86vg= Subject key identifier: 26:B9:AF:1A:FA:30:10:9A:93:E5:D9:52:B3:70:6E:F3:C1:B1:90:E7 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 01B5 Signing time: Thu 03 Apr 2025 02:29:46 +0000 Manifest this update: Thu 03 Apr 2025 02:29:46 +0000 Manifest next update: Thu 10 Apr 2025 02:29:46 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: x2gXpJKvvUDZTx4l6gi7cxSL3UKqMzCghcyT3DtTQ+I=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052 Validity Not Before: Apr 3 02:29:46 2025 GMT Not After : Apr 10 02:29:46 2025 GMT Subject: CN=67edf29a-9114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:00:21:d0:b9:3e:93:6b:22:36:67:7c:54:15: 0f:c9:fe:2f:50:2c:9e:35:10:4b:6b:07:58:0b:5f: 7c:4e:56:7b:3f:62:c6:db:c8:83:5b:f5:3a:ad:d4: e0:23:44:ff:69:2c:2d:f0:60:a7:3b:68:fc:e1:80: 74:55:65:aa:63:1d:e8:33:f8:77:85:1b:5b:ab:a5: f4:14:e1:39:4e:11:f6:4a:e8:02:fb:f0:fe:b3:1d: 17:31:a9:3f:37:75:9c:b4:ee:79:4a:58:28:13:27: 4d:90:0d:c5:2a:f2:98:80:64:d1:ef:37:bb:dd:aa: 56:aa:26:1d:4b:57:5e:3d:b6:96:60:cf:78:57:9f: 5a:20:07:d1:21:22:53:83:df:62:15:e3:5e:92:06: 23:aa:34:f3:58:b1:2f:19:42:f8:9d:94:b9:cf:40: 3d:0c:7e:ce:ed:70:6b:ef:bb:18:bd:bf:d2:c4:be: b1:ba:c4:ef:cb:f0:e9:57:00:57:7f:ee:da:56:48: f2:04:48:da:4c:c8:27:0a:d1:89:d9:9f:30:1f:62: a5:61:ed:63:f8:ea:f7:b5:cf:20:c5:4f:7a:df:61: 09:8b:84:ec:1c:b8:2d:c1:0a:0b:76:d1:ae:81:b4: 08:de:26:15:6b:31:b9:e7:f1:da:55:c9:3e:6a:c0: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:AF:1A:FA:30:10:9A:93:E5:D9:52:B3:70:6E:F3:C1:B1:90:E7 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a8:6f:8f:d5:1b:0c:06:74:d0:d9:e3:5f:ac:79:98:43:cd: 67:2e:ae:4e:0d:db:9c:5a:8d:2c:5a:bf:80:6b:66:88:18:af: 20:ec:e1:96:e6:9c:86:32:17:38:13:04:df:2d:d5:74:46:8f: 5f:8e:1d:01:74:8c:45:ac:cd:28:fd:8f:e6:02:e1:4b:fb:a0: aa:59:7e:cb:8c:af:1b:8a:99:04:27:db:1a:41:0b:b1:2b:53: 66:9a:20:cd:c6:1e:ed:e4:57:77:4b:18:09:58:09:d2:b7:3d: 46:15:7b:78:d8:02:f3:2d:f9:1b:2e:db:4c:92:e8:ff:81:27: ba:0f:36:62:3f:56:6b:99:fe:ed:9d:c8:bd:f4:ae:fa:32:7f: 02:8f:38:79:09:cb:c0:dd:2b:1d:6a:4f:7f:ab:3c:2c:18:50: af:d5:87:f8:f3:33:b2:4f:47:bf:88:63:d6:13:1a:6f:78:95: 1d:1e:24:c1:e6:07:b8:a5:6b:34:80:09:79:a5:0a:4d:41:fe: 1c:cf:99:72:5a:c2:62:0c:ff:db:da:c0:82:57:e1:2c:47:55: 33:14:1e:e7:da:d3:6c:4a:89:38:1f:7d:66:52:2a:69:89:c4: f4:4b:9e:34:f3:06:a5:dc:a0:de:a7:4f:f1:74:d5:14:80:2a: c2:53:a4:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwNDAzMDIyOTQ2WhcNMjUwNDEwMDIyOTQ2WjAYMRYwFAYD VQQDEw02N2VkZjI5YS05MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wAh0Lk+k2siNmd8VBUPyf4vUCyeNRBLawdYC198TlZ7P2LG28iDW/U6rdTg I0T/aSwt8GCnO2j84YB0VWWqYx3oM/h3hRtbq6X0FOE5ThH2SugC+/D+sx0XMak/ N3WctO55SlgoEydNkA3FKvKYgGTR7ze73apWqiYdS1dePbaWYM94V59aIAfRISJT g99iFeNekgYjqjTzWLEvGUL4nZS5z0A9DH7O7XBr77sYvb/SxL6xusTvy/DpVwBX f+7aVkjyBEjaTMgnCtGJ2Z8wH2KlYe1j+Or3tc8gxU9632EJi4TsHLgtwQoLdtGu gbQI3iYVazG55/HaVck+asDfxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa5rxr6 MBCak+XZUrNwbvPBsZDnMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9qG+P1RsMBnTQ2eNfrHmYQ81nLq5ODducWo0sWr+Aa2aIGK8g7OGW 5pyGMhc4EwTfLdV0Ro9fjh0BdIxFrM0o/Y/mAuFL+6CqWX7LjK8bipkEJ9saQQux K1NmmiDNxh7t5Fd3SxgJWAnStz1GFXt42ALzLfkbLttMkuj/gSe6DzZiP1Zrmf7t nci99K76Mn8Cjzh5CcvA3Ssdak9/qzwsGFCv1Yf48zOyT0e/iGPWExpveJUdHiTB 5ge4pWs0gAl5pQpNQf4cz5lyWsJiDP/b2sCCV+EsR1UzFB7n2tNsSok4H31mUipp icT0S5408wal3KDep0/xdNUUgCrCU6TP -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:51 2025 by rpki-client