$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: wbasijWW5jYqsUSc5L8xAGzymuViUZHfVPlpSZCGTis= Subject key identifier: 0D:0F:DF:01:12:3F:3D:46:52:71:2D:27:C1:2A:C3:4A:1F:B3:FC:E4 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 0888 Signing time: Fri 30 May 2025 20:49:28 +0000 Manifest this update: Fri 30 May 2025 20:49:28 +0000 Manifest next update: Fri 06 Jun 2025 20:49:28 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: QuJ9qv0ow6CIvUWtpH29eYPzEWgDF61p3iY0UeHTpa8=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: hcolG+bA9kqJJPc6IsihTDFxcpdloDt804WFQ6sb6CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: May 30 20:49:28 2025 GMT Not After : Jun 6 20:49:28 2025 GMT Subject: CN=683a19d8-ae54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:b2:eb:91:24:69:c0:22:ca:d2:fe:89:db: 17:15:40:9d:05:0c:41:0f:c1:4e:c3:7c:80:4b:ab: 99:6d:ec:92:d9:db:ab:4d:ad:43:0e:45:cb:67:d2: 55:6a:61:24:c0:e1:7c:cb:a6:d7:86:4b:3a:c5:11: ac:87:d7:42:c3:78:bf:dd:1d:11:9a:6c:44:cc:89: 1f:8d:37:f1:e1:06:13:3a:d0:3f:2d:8a:05:0c:18: 05:2e:9e:36:29:54:e9:b5:1b:c0:58:02:36:5b:50: 99:3c:6c:8b:2e:dd:ed:24:c8:68:eb:d7:de:4f:6d: 4c:24:be:68:07:4a:6e:69:ce:2f:05:41:66:da:1e: f7:64:cf:bb:fd:73:c3:62:21:f8:85:9f:f8:06:13: f5:74:6d:ad:24:f6:dd:9c:60:69:35:d7:cb:94:7d: 99:ba:49:3e:e1:45:92:bf:ec:5e:0a:ed:85:38:b4: 87:8c:9e:d1:e9:c6:84:19:e5:7e:55:4f:d5:df:2f: 04:bf:6a:99:12:5c:d5:bf:cd:ea:85:fa:74:bc:52: 47:3f:f8:78:0f:d0:2b:14:c3:08:43:67:d9:e1:a7: 3b:94:ac:97:0e:1f:3f:06:db:db:0c:c7:51:96:61: ae:45:91:e4:1b:33:81:d2:63:2e:78:c7:5d:cb:76: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0F:DF:01:12:3F:3D:46:52:71:2D:27:C1:2A:C3:4A:1F:B3:FC:E4 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:91:ec:52:32:89:a1:fb:73:a0:57:6b:d9:d9:7b:88:35:2d: 16:30:56:50:14:0c:d0:38:d9:2a:52:67:37:e0:4c:a1:24:5c: ad:d2:98:3e:94:cc:ca:59:2c:36:ee:da:d5:2e:c6:6a:77:51: ad:7b:58:f3:ff:16:e5:74:0a:09:3f:6a:05:08:74:f2:26:ec: 8a:df:40:90:d4:6b:de:e8:2f:f5:5d:6e:97:bd:07:40:6d:92: 5e:f0:96:e0:79:34:36:08:2a:cf:d6:9b:72:9f:d1:81:db:e5: 71:15:22:a6:70:10:f9:33:43:57:a4:08:31:ab:5d:bd:99:32: 8c:d0:82:de:a7:15:c0:8e:4b:f1:87:87:cb:7c:6d:d9:c1:c2: cd:05:bc:65:33:80:96:b2:6b:de:20:eb:f3:5d:02:85:86:f9: 21:2d:39:cc:23:dd:5c:fc:15:cb:6d:17:c6:57:43:2d:63:66: 50:f8:d8:ba:4a:22:3b:10:91:08:cd:19:08:f1:36:cf:74:1e: 61:b6:ed:72:66:a4:59:8e:34:1a:47:78:cc:ca:f8:8d:74:88: 26:92:f3:a0:32:d7:b5:bc:d7:02:b5:b5:7a:23:2a:04:b1:b0: 06:74:63:dc:d3:70:83:3b:f8:07:00:cf:6a:fb:cb:3b:7a:8e: fc:11:ae:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwNTMwMjA0OTI4WhcNMjUwNjA2MjA0OTI4WjAYMRYwFAYD VQQDEw02ODNhMTlkOC1hZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Oy65EkacAiytL+idsXFUCdBQxBD8FOw3yAS6uZbeyS2durTa1DDkXLZ9JV amEkwOF8y6bXhks6xRGsh9dCw3i/3R0RmmxEzIkfjTfx4QYTOtA/LYoFDBgFLp42 KVTptRvAWAI2W1CZPGyLLt3tJMho69feT21MJL5oB0puac4vBUFm2h73ZM+7/XPD YiH4hZ/4BhP1dG2tJPbdnGBpNdfLlH2Zukk+4UWSv+xeCu2FOLSHjJ7R6caEGeV+ VU/V3y8Ev2qZElzVv83qhfp0vFJHP/h4D9ArFMMIQ2fZ4ac7lKyXDh8/BtvbDMdR lmGuRZHkGzOB0mMueMddy3aBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0P3wES Pz1GUnEtJ8Eqw0ofs/zkMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSkexSMomh+3OgV2vZ2XuINS0WMFZQFAzQONkqUmc34EyhJFyt0pg+ lMzKWSw27trVLsZqd1Gte1jz/xbldAoJP2oFCHTyJuyK30CQ1Gve6C/1XW6XvQdA bZJe8JbgeTQ2CCrP1ptyn9GB2+VxFSKmcBD5M0NXpAgxq129mTKM0ILepxXAjkvx h4fLfG3ZwcLNBbxlM4CWsmveIOvzXQKFhvkhLTnMI91c/BXLbRfGV0MtY2ZQ+Ni6 SiI7EJEIzRkI8TbPdB5htu1yZqRZjjQaR3jMyviNdIgmkvOgMte1vNcCtbV6IyoE sbAGdGPc03CDO/gHAM9q+8s7eo78Ea5T -----END CERTIFICATE-----Generated at Sat May 31 17:40:59 2025 by rpki-client