$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: 41CrxWcCpmOCYY3/+Kv3Oj3LNttnzKrAtMZVug6lXbQ= Subject key identifier: B9:63:62:3C:BD:A8:CC:55:39:D2:8A:88:AB:66:FF:0A:EF:92:B6:A2 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 8C Signing time: Sat 29 Mar 2025 05:51:48 +0000 Manifest this update: Sat 29 Mar 2025 05:51:48 +0000 Manifest next update: Sat 05 Apr 2025 05:51:47 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: ZHVjM+2l/a2luuuGoDwZFUDQq5ORqYmpYC0iGMmKOsw=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: Ls+MqXGV/peb18S4iXh7J0QZNFdZuOz4J59MYeTRfFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A Validity Not Before: Mar 29 05:51:48 2025 GMT Not After : Apr 5 05:51:47 2025 GMT Subject: CN=67e78a74-9832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:18:52:66:86:43:41:2c:82:d7:84:84:31: a9:23:56:63:b6:e0:5d:97:df:42:e4:ae:ad:5a:ac: cb:1b:30:ba:39:8d:a2:0c:a2:69:90:76:3e:48:e9: 9f:d5:5e:f3:69:4b:f6:e0:d3:2d:d5:e1:52:76:eb: 92:c3:87:de:7e:00:b5:de:5c:39:aa:5c:98:1a:bd: 89:8b:c8:ad:83:d7:bc:f8:b8:d6:42:c2:d5:e3:25: 0f:41:63:7c:f0:ac:0b:10:b4:85:2f:2d:a2:d8:ad: d2:43:e8:40:16:5a:b7:20:9f:9e:11:42:40:43:2a: 69:76:90:e5:ac:51:39:1d:e3:8b:a1:6b:38:7c:a1: 3e:c2:31:e0:6f:48:67:32:a9:57:b4:b8:1b:97:2e: 17:4b:c7:75:53:47:cb:ce:26:b1:32:db:b8:dc:59: b7:7a:6e:4e:25:9d:fa:f6:8f:c4:ca:c4:96:f5:97: 9c:ca:d0:19:e3:50:2a:db:08:5c:da:4b:98:36:1e: 4b:50:d6:33:03:06:d1:74:0d:3b:41:d2:f9:97:a0: 6d:f4:b6:a9:b6:51:b0:11:9e:2b:a6:4e:79:7a:51: 61:fd:e4:fa:01:ad:90:30:05:bd:e9:95:fa:cb:2d: e5:74:cc:4f:81:d9:ac:ca:7c:aa:44:1f:f4:45:53: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:62:3C:BD:A8:CC:55:39:D2:8A:88:AB:66:FF:0A:EF:92:B6:A2 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d0:d7:3c:e7:aa:5d:02:9a:fc:5a:21:82:3a:80:4f:cf:43: 9d:8d:f7:06:c0:8f:62:84:91:4f:2a:64:99:54:c0:c2:1a:0a: 52:b3:c6:72:52:00:47:7c:98:b5:61:05:95:55:e8:77:fe:92: 0f:cc:bd:cd:33:7b:e4:16:2f:9d:f2:25:17:5a:30:80:92:b9: 3b:5a:1e:01:fa:f2:06:b9:ed:20:5a:48:c8:11:b6:44:ca:0a: e1:0a:9b:ff:ee:81:40:d2:79:94:0f:4a:70:51:50:9f:77:aa: d5:38:9a:c8:c3:51:6b:74:54:af:5b:a9:12:bd:ee:c8:da:1d: 81:ac:48:0b:1b:51:95:d6:5e:53:fc:d8:45:ef:cf:5e:5b:fa: 06:7f:47:63:9d:fa:63:90:ec:b7:5e:ba:e0:d5:ec:bc:4a:ea: 11:7c:97:6d:ab:aa:98:9a:d3:b8:41:eb:ad:06:fa:63:fd:0f: 1b:9f:99:d7:7c:a6:ba:f2:18:7b:01:3f:97:9e:59:01:f5:86: a8:74:bd:b4:6a:09:c0:08:48:5b:4f:b9:51:c7:2b:c5:2e:89: b1:99:1a:69:18:4b:fd:e5:f0:d8:6a:5d:d8:56:c6:0d:ce:a0: 72:9d:bc:69:67:0e:19:54:36:a1:2a:f9:25:00:8e:44:89:b6: 60:5f:c6:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUwMzI5MDU1MTQ4WhcNMjUwNDA1MDU1MTQ3WjAYMRYwFAYD VQQDEw02N2U3OGE3NC05ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxgYUmaGQ0EsgteEhDGpI1ZjtuBdl99C5K6tWqzLGzC6OY2iDKJpkHY+SOmf 1V7zaUv24NMt1eFSduuSw4fefgC13lw5qlyYGr2Ji8itg9e8+LjWQsLV4yUPQWN8 8KwLELSFLy2i2K3SQ+hAFlq3IJ+eEUJAQyppdpDlrFE5HeOLoWs4fKE+wjHgb0hn MqlXtLgbly4XS8d1U0fLziaxMtu43Fm3em5OJZ369o/EysSW9ZecytAZ41Aq2whc 2kuYNh5LUNYzAwbRdA07QdL5l6Bt9LaptlGwEZ4rpk55elFh/eT6Aa2QMAW96ZX6 yy3ldMxPgdmsynyqRB/0RVM/FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLljYjy9 qMxVOdKKiKtm/wrvkraiMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv0Nc856pdApr8WiGCOoBPz0OdjfcGwI9ihJFPKmSZVMDCGgpSs8Zy UgBHfJi1YQWVVeh3/pIPzL3NM3vkFi+d8iUXWjCAkrk7Wh4B+vIGue0gWkjIEbZE ygrhCpv/7oFA0nmUD0pwUVCfd6rVOJrIw1FrdFSvW6kSve7I2h2BrEgLG1GV1l5T /NhF789eW/oGf0djnfpjkOy3Xrrg1ey8SuoRfJdtq6qYmtO4QeutBvpj/Q8bn5nX fKa68hh7AT+XnlkB9YaodL20agnACEhbT7lRxyvFLomxmRppGEv95fDYal3YVsYN zqBynbxpZw4ZVDahKvklAI5EibZgX8b+ -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:51 2025 by rpki-client