$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: 6/oLQEWclMhUVl0zXTg2AKh5VotL5mVRKVUWQD3z6Is= Subject key identifier: 3B:91:42:92:49:BA:B5:4C:15:FC:63:88:77:C6:32:AC:F0:47:34:42 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 0127 Signing time: Thu 03 Apr 2025 04:22:45 +0000 Manifest this update: Thu 03 Apr 2025 04:22:44 +0000 Manifest next update: Thu 10 Apr 2025 04:22:44 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: XQXu1uWwRiKIzunhRmTDJs26yDBduzJcOXwonqUiR9s=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C Validity Not Before: Apr 3 04:22:44 2025 GMT Not After : Apr 10 04:22:44 2025 GMT Subject: CN=67ee0d14-8c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:29:e4:43:fa:2e:25:93:15:5e:b8:38:73: b4:fc:e0:59:13:a9:2e:a9:df:18:f2:b1:ff:54:ad: 12:b6:6b:6c:a2:5c:5d:8d:b0:95:89:76:10:ec:7d: 57:c2:de:21:04:69:fe:19:22:35:98:60:7b:c9:f5: 05:a3:68:5c:76:69:67:83:1b:41:41:df:f2:b2:1a: 00:40:80:dc:6c:05:f4:78:50:d4:dd:27:b1:b2:14: 0b:cc:68:d1:50:89:6b:f3:60:9c:bd:3e:75:b1:bf: 12:a5:b0:4f:45:3b:b7:4d:d8:fb:66:28:1e:ad:19: 54:ab:7f:6c:03:43:03:ff:84:f6:29:50:be:65:11: 8b:7f:e7:4d:07:9a:7b:ab:40:57:1a:d1:9d:50:9c: 53:9b:d0:27:ea:a3:bb:ea:05:70:e1:cf:ab:d3:a3: 57:9e:2a:80:eb:83:f0:8a:9b:42:62:ee:f5:75:14: 52:ee:f6:e6:20:13:fd:2c:c4:44:fd:3c:b3:55:cb: 76:b4:ed:73:bb:e5:24:5e:07:20:8b:12:7b:37:95: 82:6c:db:04:b8:87:df:55:4a:c5:2a:a5:91:2c:c4: 34:df:e3:b7:13:4a:30:ae:e7:39:a0:fb:4b:86:f1: cf:3b:2b:c6:4e:0e:fd:b3:d7:3f:4f:95:67:f0:03: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:42:92:49:BA:B5:4C:15:FC:63:88:77:C6:32:AC:F0:47:34:42 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:42:67:46:70:cd:db:25:e2:9f:3c:6b:dc:97:1e:d7:b7:59: 83:c4:52:e7:2a:1c:4e:ef:e4:16:35:7a:70:dd:32:c8:2f:cc: 49:b3:0f:3e:0a:6a:be:e0:a1:2c:ff:86:19:bf:a7:91:01:58: 4d:36:3a:e5:0d:07:43:11:d6:56:7d:58:ca:c8:3f:f5:00:84: 26:c7:22:e5:5a:f1:5c:5c:71:20:0c:b7:2d:5f:4f:dd:da:c3: d1:79:91:4a:ff:e4:72:76:c3:df:1f:6a:10:8f:35:a5:8f:cf: 8d:a6:fc:cc:3b:1f:aa:cb:42:78:99:52:0d:fa:19:92:2e:4c: ca:7a:d9:2f:bf:9f:be:c8:e5:36:7a:e9:12:2c:ea:bd:09:1d: e2:13:8d:d2:53:d5:3e:69:bc:b9:a8:b4:f1:b6:12:83:f8:9b: c6:06:30:23:09:01:b7:b8:06:dd:d1:fb:bf:bc:0f:d7:52:34: 26:39:40:aa:48:14:83:99:2f:5a:d4:91:08:4f:a9:bf:a6:a6: cb:c7:25:34:ff:39:6d:26:dc:d3:35:25:06:8f:ea:ff:37:f7: 68:d7:55:b3:e3:6d:27:e2:68:93:c2:13:08:0c:8a:c1:b5:e7: 35:2d:d3:c6:a6:6b:12:56:47:b1:7a:5a:de:c5:69:e8:45:73: 67:12:ee:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUwNDAzMDQyMjQ0WhcNMjUwNDEwMDQyMjQ0WjAYMRYwFAYD VQQDEw02N2VlMGQxNC04YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/Qp5EP6LiWTFV64OHO0/OBZE6kuqd8Y8rH/VK0StmtsolxdjbCViXYQ7H1X wt4hBGn+GSI1mGB7yfUFo2hcdmlngxtBQd/yshoAQIDcbAX0eFDU3SexshQLzGjR UIlr82CcvT51sb8SpbBPRTu3Tdj7ZigerRlUq39sA0MD/4T2KVC+ZRGLf+dNB5p7 q0BXGtGdUJxTm9An6qO76gVw4c+r06NXniqA64PwiptCYu71dRRS7vbmIBP9LMRE /TyzVct2tO1zu+UkXgcgixJ7N5WCbNsEuIffVUrFKqWRLMQ03+O3E0owruc5oPtL hvHPOyvGTg79s9c/T5Vn8AMTpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuRQpJJ urVMFfxjiHfGMqzwRzRCMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnQmdGcM3bJeKfPGvclx7Xt1mDxFLnKhxO7+QWNXpw3TLIL8xJsw8+ Cmq+4KEs/4YZv6eRAVhNNjrlDQdDEdZWfVjKyD/1AIQmxyLlWvFcXHEgDLctX0/d 2sPReZFK/+RydsPfH2oQjzWlj8+NpvzMOx+qy0J4mVIN+hmSLkzKetkvv5++yOU2 eukSLOq9CR3iE43SU9U+aby5qLTxthKD+JvGBjAjCQG3uAbd0fu/vA/XUjQmOUCq SBSDmS9a1JEIT6m/pqbLxyU0/zltJtzTNSUGj+r/N/do11Wz420n4miTwhMIDIrB tec1LdPGpmsSVkexelrexWnoRXNnEu6c -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:25 2025 by rpki-client