$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft File: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json) Hash identifier: 3lhYGYq3lBH4f7yAB4k98Y6Wx+pNpICsb+RcgnD6jfE= Subject key identifier: 8F:A2:9F:F2:1C:30:CA:A6:4F:E5:A4:56:7E:3A:44:86:43:1F:3C:86 Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 Certificate issuer: /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft Manifest number: 6A Signing time: Sat 31 May 2025 06:30:09 +0000 Manifest this update: Sat 31 May 2025 06:30:09 +0000 Manifest next update: Sat 07 Jun 2025 06:30:08 +0000 Files and hashes: 1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: G5XzdWLk2GU2LTtzSwzSWEGuZx+GSyVaExIGwIe5CYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Validity Not Before: May 31 06:30:09 2025 GMT Not After : Jun 7 06:30:08 2025 GMT Subject: CN=683aa1f1-9066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:c8:14:d0:74:ab:db:f8:94:41:5d:f6:96: 89:c9:30:62:19:78:1b:36:8c:84:3b:9c:60:e2:6b: 7e:a9:7c:c7:79:5c:b1:9b:8b:70:bd:53:8b:e7:72: 6b:d7:f3:27:d1:99:66:68:bc:a8:6c:61:51:f3:47: 34:fb:5b:42:41:63:47:ef:28:42:e4:3d:65:4c:ae: 05:8b:26:e9:47:e6:4e:a6:17:fa:c9:3e:9f:0b:fa: da:6f:d1:47:ff:c6:f9:72:4c:34:6d:e8:33:ee:0c: 9a:4e:ab:58:1a:af:ac:0f:9a:27:81:d2:fd:16:df: de:91:2f:ec:d5:fb:b2:33:ef:11:2b:c1:2e:10:8a: 3c:f7:5a:a5:04:bc:c1:ba:01:b2:f8:25:f0:4f:5e: 45:aa:65:db:86:50:d3:01:1c:26:f9:4a:70:19:9c: a3:b6:99:8c:c9:21:11:f6:89:bb:4f:98:4a:bb:8a: 94:62:09:90:b8:d7:d7:a3:34:b9:d4:5b:6b:7c:b7: b2:8a:ec:73:92:d1:b4:b5:13:ad:ee:7d:93:3f:ea: 70:e3:fd:b2:1c:3c:0b:36:d3:8d:08:55:50:42:83: 5e:e6:77:cb:f4:a4:8a:07:12:c3:9d:7f:99:1e:18: 7c:8b:39:da:4d:81:b0:45:96:bc:31:cb:8a:26:4c: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:9F:F2:1C:30:CA:A6:4F:E5:A4:56:7E:3A:44:86:43:1F:3C:86 X509v3 Authority Key Identifier: keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b5:e8:8d:52:08:e8:83:da:8a:81:7d:b4:ab:30:35:5c:86: ec:f6:2d:0e:25:f0:48:d6:2e:8b:cb:a8:89:0d:7f:92:1a:8c: 88:a7:47:f1:cc:77:0b:43:5f:2e:34:99:09:5e:dd:b6:69:7e: 7e:8f:99:27:36:b3:2f:7f:32:9b:55:34:da:43:46:93:a9:69: 17:20:6b:1d:ac:3a:8a:ec:d7:60:23:c6:f8:c7:8b:e9:e4:dc: c3:94:bc:e5:79:bb:ee:c6:e2:37:97:d8:27:c8:43:00:9a:18: 74:bc:28:93:10:b6:5b:4f:1d:9f:5f:34:44:bf:f1:a7:89:0d: a8:4a:b3:06:31:9d:93:8d:f9:f0:ba:00:bf:cf:83:79:a7:fa: 59:45:12:bf:67:7b:6a:ad:55:0b:98:b4:16:6a:ad:ef:9c:6f: ba:23:6e:1c:0a:7c:f6:d3:45:25:4d:87:9a:c6:31:a9:46:0f: e8:b4:5c:d7:51:fb:23:3e:74:cb:4b:39:8a:31:9e:03:c7:5e: cb:0f:db:3c:ed:e7:51:fb:59:66:3c:87:9d:2e:1c:6d:f1:46: c0:85:8b:49:68:32:a9:1d:14:77:8b:21:1d:81:e7:ba:9c:ae: 6e:35:37:8c:3c:d8:41:5c:81:88:54:a3:f6:05:9e:03:33:9d: 14:f4:04:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODI5RDExMC8GA1UEBRMoM0MxOENEOEI1QjAxRDUwMjM3NjQwQzI2QzAzNzc1NDZE ODA0RkRCNDAeFw0yNTA1MzEwNjMwMDlaFw0yNTA2MDcwNjMwMDhaMBgxFjAUBgNV BAMTDTY4M2FhMWYxLTkwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4GMgU0HSr2/iUQV32lonJMGIZeBs2jIQ7nGDia36pfMd5XLGbi3C9U4vncmvX 8yfRmWZovKhsYVHzRzT7W0JBY0fvKELkPWVMrgWLJulH5k6mF/rJPp8L+tpv0Uf/ xvlyTDRt6DPuDJpOq1gar6wPmieB0v0W396RL+zV+7Iz7xErwS4Qijz3WqUEvMG6 AbL4JfBPXkWqZduGUNMBHCb5SnAZnKO2mYzJIRH2ibtPmEq7ipRiCZC419ejNLnU W2t8t7KK7HOS0bS1E63ufZM/6nDj/bIcPAs2040IVVBCg17md8v0pIoHEsOdf5ke GHyLOdpNgbBFlrwxy4omTFC/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj6Kf8hww yqZP5aRWfjpEhkMfPIYwHwYDVR0jBBgwFoAUPBjNi1sB1QI3ZAwmwDd1RtgE/bQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MjlELzUxMjU1MjZFOUM2 RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJM1pBd213RGQxUnRnRV9i US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEJqTmkxc0IxUUkzWkF3bXdEZDFSdGdFX2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MjlELzUxMjU1MjZFOUM2RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJ M1pBd213RGQxUnRnRV9iUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIm16I1SCOiD2oqBfbSrMDVchuz2LQ4l8EjWLovLqIkNf5IajIinR/HM dwtDXy40mQle3bZpfn6PmSc2sy9/MptVNNpDRpOpaRcgax2sOors12AjxvjHi+nk 3MOUvOV5u+7G4jeX2CfIQwCaGHS8KJMQtltPHZ9fNES/8aeJDahKswYxnZON+fC6 AL/Pg3mn+llFEr9ne2qtVQuYtBZqre+cb7ojbhwKfPbTRSVNh5rGMalGD+i0XNdR +yM+dMtLOYoxngPHXssP2zzt51H7WWY8h50uHG3xRsCFi0loMqkdFHeLIR2B57qc rm41N4w82EFcgYhUo/YFngMznRT0BBY= -----END CERTIFICATE-----Generated at Sat May 31 17:42:36 2025 by rpki-client