$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: punAAXstmW46NGp5lBFEtBPp3SYfQdUP+WltYYEVRM8= Subject key identifier: 6C:BD:A6:12:16:DE:30:F5:F6:EE:D5:F1:01:95:7F:8E:26:FB:05:F5 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 0379 Signing time: Fri 11 Apr 2025 00:50:01 +0000 Manifest this update: Fri 11 Apr 2025 00:50:00 +0000 Manifest next update: Fri 18 Apr 2025 00:50:00 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: mC+PSwqO2qXQEDUXyXzel2NM0Cvi0UIfwsuw4XZ7xA4=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Apr 11 00:50:00 2025 GMT Not After : Apr 18 00:50:00 2025 GMT Subject: CN=67f86738-9fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:bb:eb:d7:f6:e8:d3:b7:6b:4b:49:49:e7: b4:ef:74:8c:f0:29:c4:7b:a8:a6:7e:2c:50:e9:ee: ee:55:71:4f:dc:a1:73:23:95:b4:07:c1:a6:51:88: 49:d0:90:ab:75:b3:91:5d:c9:e2:eb:8e:5c:78:45: b3:a5:6e:b2:5a:e4:e0:e6:d1:af:0c:af:e5:a3:db: ad:7e:81:7d:d5:f1:22:2e:5d:89:9a:61:37:b5:4d: d0:f4:9f:ec:31:2f:85:32:4c:42:8c:90:cd:48:15: 18:3c:da:af:7d:44:85:ea:76:eb:84:82:42:a6:d6: 18:6a:6c:93:03:7a:c1:48:6f:1f:84:99:40:68:b7: 47:26:94:97:b8:bf:e7:86:08:f7:da:37:e3:33:c3: 6b:75:66:ca:88:ae:3d:dc:68:34:c0:4a:ac:dd:91: a4:db:de:ba:cf:26:dc:65:c5:68:c9:af:68:d3:76: 9d:50:98:7d:2f:12:61:1d:d1:34:00:ea:a0:09:52: df:c7:cf:98:8d:37:c1:48:91:14:9e:d5:77:61:d4: 51:b0:d2:e1:97:c1:6c:f0:b1:c8:70:f0:17:35:2d: 9a:23:8b:ef:ac:d6:5c:df:f2:15:6e:aa:75:96:58: f2:61:78:c3:46:5b:1a:ce:ca:f3:d0:f1:4e:9a:b0: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BD:A6:12:16:DE:30:F5:F6:EE:D5:F1:01:95:7F:8E:26:FB:05:F5 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:35:3a:b3:ad:c9:e1:83:15:85:92:12:9a:87:51:99:43:98: d5:50:46:b4:1a:32:9a:21:3b:c4:9f:ac:3c:f7:a2:a5:bc:fe: e8:9f:7a:bb:33:72:c1:b2:85:4d:20:ce:94:0b:4a:93:36:2e: 92:4c:30:9e:1d:3a:bc:b3:cc:42:b9:fc:f2:e5:94:8b:8e:dd: 25:ea:46:ed:03:eb:8c:e5:d3:60:db:c1:98:c8:27:60:ff:34: 72:16:c5:07:6d:70:0b:d2:9c:af:ae:dd:93:84:d7:5f:f8:7a: ef:d8:e1:fc:72:99:70:35:ef:ab:cc:e0:a3:06:df:15:05:72: 24:35:e9:e8:4d:de:82:62:85:10:76:c0:8f:2c:a4:25:20:c6: 58:93:2e:79:cd:5b:80:22:b8:c9:12:d3:77:c4:83:7d:44:dc: 3a:61:34:bf:58:b3:e7:95:69:bc:3d:ed:7c:40:a4:c9:0b:76: ee:99:b2:e7:cf:d0:31:f6:34:66:59:9d:2e:4c:a2:62:fd:31: e6:06:b1:f4:c6:a6:4f:db:58:79:93:64:fd:aa:b3:ed:48:ae: 25:2a:89:67:88:1d:a4:16:6c:b8:3a:ff:28:86:2d:92:27:99: ea:82:f7:91:aa:63:68:c4:f3:37:37:53:eb:9d:40:af:81:61: 3c:4e:c5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwNDExMDA1MDAwWhcNMjUwNDE4MDA1MDAwWjAYMRYwFAYD VQQDEw02N2Y4NjczOC05ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmm769f26NO3a0tJSee073SM8CnEe6imfixQ6e7uVXFP3KFzI5W0B8GmUYhJ 0JCrdbORXcni645ceEWzpW6yWuTg5tGvDK/lo9utfoF91fEiLl2JmmE3tU3Q9J/s MS+FMkxCjJDNSBUYPNqvfUSF6nbrhIJCptYYamyTA3rBSG8fhJlAaLdHJpSXuL/n hgj32jfjM8NrdWbKiK493Gg0wEqs3ZGk2966zybcZcVoya9o03adUJh9LxJhHdE0 AOqgCVLfx8+YjTfBSJEUntV3YdRRsNLhl8Fs8LHIcPAXNS2aI4vvrNZc3/IVbqp1 lljyYXjDRlsazsrz0PFOmrDx6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy9phIW 3jD19u7V8QGVf44m+wX1MB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgNTqzrcnhgxWFkhKah1GZQ5jVUEa0GjKaITvEn6w896KlvP7on3q7 M3LBsoVNIM6UC0qTNi6STDCeHTq8s8xCufzy5ZSLjt0l6kbtA+uM5dNg28GYyCdg /zRyFsUHbXAL0pyvrt2ThNdf+Hrv2OH8cplwNe+rzOCjBt8VBXIkNenoTd6CYoUQ dsCPLKQlIMZYky55zVuAIrjJEtN3xIN9RNw6YTS/WLPnlWm8Pe18QKTJC3bumbLn z9Ax9jRmWZ0uTKJi/THmBrH0xqZP21h5k2T9qrPtSK4lKolniB2kFmy4Ov8ohi2S J5nqgveRqmNoxPM3N1PrnUCvgWE8TsX3 -----END CERTIFICATE-----Generated at Sat Apr 12 17:06:45 2025 by rpki-client