$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: 9LoDNlZld2F+r3kUwt3lZyufDfDI2BfUmL7MNIOy/0c= Subject key identifier: 23:C9:3D:BB:3A:2B:AB:15:55:79:01:AB:2D:0A:C4:6F:EA:19:CD:8A Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 16 Signing time: Sat 05 Apr 2025 07:17:25 +0000 Manifest this update: Sat 05 Apr 2025 07:17:25 +0000 Manifest next update: Sat 12 Apr 2025 07:17:25 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: GuulxrJsU3BISOtfzzRdDlLEReaxtSYfn62B1V7ul6c=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86 Validity Not Before: Apr 5 07:17:25 2025 GMT Not After : Apr 12 07:17:25 2025 GMT Subject: CN=67f0d905-8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:dd:ce:ae:05:c5:67:18:8b:96:e4:48:e9: 7c:fc:c9:a2:8d:1a:20:51:be:41:31:c1:80:e9:7b: 1b:70:22:06:14:ca:cb:26:ea:51:a0:b2:65:bb:5a: 8b:be:e5:c2:32:86:4d:b0:d4:dd:a3:4b:2d:1b:bc: 4c:ec:c0:3a:15:76:54:68:f5:99:9f:f2:42:8a:46: 0d:fe:0e:f1:03:4a:40:7e:0b:aa:eb:e0:ec:43:e5: fa:c0:78:a5:9e:25:02:19:00:6f:11:63:39:98:6d: 1c:61:53:1e:9e:11:3d:07:e8:00:75:13:1a:c7:b9: 56:0e:a3:77:89:a3:f1:5d:d4:10:6c:b0:84:0a:62: 42:ae:17:2e:8f:54:54:37:9d:51:30:2e:32:9f:66: 55:e8:08:05:3f:75:41:e8:69:9d:9a:90:a4:1e:5b: 60:4f:14:cc:e4:ca:42:91:95:19:44:8f:4d:1a:3f: a6:37:9d:7d:ba:45:96:e5:f6:8a:ab:87:4d:1c:fb: fd:fd:2c:3e:54:49:3d:75:c2:f8:21:1c:74:1c:d0: d9:dd:68:a8:ac:70:b0:9a:ae:5a:21:48:b4:53:03: 7d:96:f2:2c:84:53:05:f4:d3:38:8b:8b:3c:ab:1d: c2:c3:bb:56:82:15:23:d5:ae:38:d5:56:9c:a0:e1: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:3D:BB:3A:2B:AB:15:55:79:01:AB:2D:0A:C4:6F:EA:19:CD:8A X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2a:77:c8:58:77:a7:ba:89:a2:bc:e5:18:bc:df:14:d1:81: f6:24:65:3f:46:ff:b7:90:67:a9:a3:80:7e:e2:a5:73:ee:7b: 24:18:b3:e2:8d:1d:11:02:81:b7:26:df:37:e5:97:f8:3a:e4: 51:49:f1:3b:87:10:9a:8a:9c:93:2a:bf:07:6f:ef:61:43:be: 33:37:7f:9d:46:c1:a4:ab:4e:d6:3a:9b:ce:8e:75:80:09:c5: cf:1d:45:7b:4b:de:e2:06:8e:5a:6f:dd:b2:88:bf:9c:36:37: 84:5d:17:4b:97:8e:bb:68:33:a4:87:0e:04:ce:3d:dc:6e:16: d2:e2:9e:38:2b:5f:bf:7c:ea:25:a2:b7:e7:09:65:ea:1e:95: a7:2f:9f:90:18:7b:66:7a:a7:4e:47:37:27:30:c3:27:33:c6: 28:72:a6:bd:fa:9b:af:37:f1:49:c0:49:14:2d:97:62:6c:70: e8:45:21:e2:9d:04:aa:96:9f:ef:a2:3a:35:3f:1b:ea:e5:98: fc:3e:36:26:b8:b5:8e:5e:f1:e3:18:b2:9d:d3:c8:27:30:18: 80:9f:57:9c:ee:3e:bb:d8:6f:f7:63:db:a3:41:ab:d4:95:0f: 5f:13:d6:07:02:55:09:34:e9:ad:dc:3e:2a:3f:5c:71:e8:d9: 88:01:f7:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5 MDQ3MEJBMzAeFw0yNTA0MDUwNzE3MjVaFw0yNTA0MTIwNzE3MjVaMBgxFjAUBgNV BAMTDTY3ZjBkOTA1LThkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6gN3OrgXFZxiLluRI6Xz8yaKNGiBRvkExwYDpextwIgYUyssm6lGgsmW7Wou+ 5cIyhk2w1N2jSy0bvEzswDoVdlRo9Zmf8kKKRg3+DvEDSkB+C6rr4OxD5frAeKWe JQIZAG8RYzmYbRxhUx6eET0H6AB1ExrHuVYOo3eJo/Fd1BBssIQKYkKuFy6PVFQ3 nVEwLjKfZlXoCAU/dUHoaZ2akKQeW2BPFMzkykKRlRlEj00aP6Y3nX26RZbl9oqr h00c+/39LD5UST11wvghHHQc0NndaKiscLCarlohSLRTA32W8iyEUwX00ziLizyr HcLDu1aCFSPVrjjVVpyg4eJHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI8k9uzor qxVVeQGrLQrEb+oZzYowHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3 SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALkqd8hYd6e6iaK85Ri83xTRgfYkZT9G/7eQZ6mjgH7ipXPueyQYs+KN HRECgbcm3zfll/g65FFJ8TuHEJqKnJMqvwdv72FDvjM3f51GwaSrTtY6m86OdYAJ xc8dRXtL3uIGjlpv3bKIv5w2N4RdF0uXjrtoM6SHDgTOPdxuFtLinjgrX7986iWi t+cJZeoelacvn5AYe2Z6p05HNycwwyczxihypr36m6838UnASRQtl2JscOhFIeKd BKqWn++iOjU/G+rlmPw+Nia4tY5e8eMYsp3TyCcwGICfV5zuPrvYb/dj26NBq9SV D18T1gcCVQk06a3cPio/XHHo2YgB95M= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:41 2025 by rpki-client