$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: f7N2xErh1iY6Lcww97xgSkCjXj/THbO0t9GCa1vdQ2Q= Subject key identifier: 0E:A8:8D:C8:72:E6:A6:AC:B8:9B:69:91:E4:A4:BA:E2:CA:93:63:14 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 3484 Signing time: Sat 31 May 2025 14:39:36 +0000 Manifest this update: Sat 31 May 2025 14:39:35 +0000 Manifest next update: Sat 07 Jun 2025 14:39:35 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: XTarIXEC/o0iKtl/BOnlgL+YHzwIlcaJ2Of9qDLzx2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: May 31 14:39:35 2025 GMT Not After : Jun 7 14:39:35 2025 GMT Subject: CN=683b14a8-7900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:89:32:21:ee:92:4b:34:6d:81:f2:dc:97: e7:17:68:8a:fc:c4:d2:03:86:73:23:ec:fc:4a:ee: fe:3a:21:38:6e:b5:f8:de:66:42:4c:7c:eb:76:0d: a6:97:6d:39:41:1c:ad:25:f0:09:1b:f0:28:00:21: 25:d4:96:18:19:79:d1:fa:22:a4:d2:82:b9:32:f2: 31:93:91:28:b7:5d:9b:fa:49:96:b2:75:04:9d:06: 3c:ef:0f:98:28:43:9d:a1:88:2e:c1:5e:b6:6a:10: df:ab:5d:18:a5:28:82:d7:81:de:29:9b:0e:f4:5d: b6:f2:b3:50:c4:ab:7c:b3:71:12:16:be:e8:57:be: e6:24:aa:d9:45:f9:40:3a:14:c6:5a:e5:45:be:aa: a2:37:c2:5e:92:bb:97:2c:17:50:cf:df:ff:4f:4d: 88:79:2e:8d:62:bc:65:7f:c2:4f:b2:c2:ba:a3:63: 5b:14:52:ed:7e:2f:03:76:82:85:c4:82:a0:3a:70: 48:df:ff:4b:2c:e2:a5:cc:75:0c:46:ac:01:32:ca: 55:08:71:55:fd:91:e2:84:4f:9e:79:9f:5d:70:b8: ba:e2:69:ac:51:fe:68:8d:6a:50:7e:14:53:a7:65: 2d:68:2b:f9:31:a1:5c:6d:d7:f6:c8:3a:9e:48:aa: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:8D:C8:72:E6:A6:AC:B8:9B:69:91:E4:A4:BA:E2:CA:93:63:14 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:d3:17:7b:68:c9:40:df:94:e2:84:a3:fa:6f:c7:0a:58: 0b:da:db:12:b7:30:1b:ed:1e:19:11:2b:5e:1d:1f:c0:eb:54: 05:c9:00:2c:3e:07:24:f8:ae:2b:cb:3c:d9:c2:05:3e:90:f5: fb:49:10:4f:85:0a:df:98:c2:ef:50:20:78:f9:93:95:21:9e: 3a:05:38:04:2e:54:79:7e:0b:19:e7:88:83:25:a7:9e:85:d6: d0:f3:32:51:92:13:84:3d:a2:bf:45:2a:db:7b:f6:1f:f2:4e: 58:52:99:d6:3d:bf:8a:32:24:73:e9:e5:1d:9e:ae:b8:93:d0: da:ca:35:ab:6b:8d:98:76:8b:b0:77:bb:5a:bc:c6:d4:f7:2f: 99:1e:9a:4d:3f:00:97:72:76:ee:d4:32:44:c9:ed:51:7a:08: d5:79:6d:ea:be:4c:3f:5b:8b:53:7b:d3:e4:fe:12:d7:d5:77: 38:d0:0d:3d:d7:78:79:37:ed:e0:f8:03:63:4c:5a:94:9c:ae: 03:a3:f5:d9:01:a8:77:6a:c0:6f:9c:75:6d:5e:8d:08:68:81: fc:2b:70:35:83:ec:f2:d5:6f:b5:e1:24:1b:c7:c7:8e:9c:46: 2a:d2:ef:79:63:95:86:48:9c:ae:c2:28:28:16:fe:cd:a9:dc: 94:60:99:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUwNTMxMTQzOTM1WhcNMjUwNjA3MTQzOTM1WjAYMRYwFAYD VQQDEw02ODNiMTRhOC03OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5aJMiHukks0bYHy3JfnF2iK/MTSA4ZzI+z8Su7+OiE4brX43mZCTHzrdg2m l205QRytJfAJG/AoACEl1JYYGXnR+iKk0oK5MvIxk5Eot12b+kmWsnUEnQY87w+Y KEOdoYguwV62ahDfq10YpSiC14HeKZsO9F228rNQxKt8s3ESFr7oV77mJKrZRflA OhTGWuVFvqqiN8JekruXLBdQz9//T02IeS6NYrxlf8JPssK6o2NbFFLtfi8DdoKF xIKgOnBI3/9LLOKlzHUMRqwBMspVCHFV/ZHihE+eeZ9dcLi64mmsUf5ojWpQfhRT p2UtaCv5MaFcbdf2yDqeSKq/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6ojchy 5qasuJtpkeSkuuLKk2MUMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg3dMXe2jJQN+U4oSj+m/HClgL2tsStzAb7R4ZESteHR/A61QFyQAs Pgck+K4ryzzZwgU+kPX7SRBPhQrfmMLvUCB4+ZOVIZ46BTgELlR5fgsZ54iDJaee hdbQ8zJRkhOEPaK/RSrbe/Yf8k5YUpnWPb+KMiRz6eUdnq64k9DayjWra42Ydouw d7tavMbU9y+ZHppNPwCXcnbu1DJEye1RegjVeW3qvkw/W4tTe9Pk/hLX1Xc40A09 13h5N+3g+ANjTFqUnK4Do/XZAah3asBvnHVtXo0IaIH8K3A1g+zy1W+14SQbx8eO nEYq0u95Y5WGSJyuwigoFv7NqdyUYJkT -----END CERTIFICATE-----Generated at Sat May 31 17:32:58 2025 by rpki-client