$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: ELIzpQBiR2V2WY3hHG+LoIPDJ/y1JPxi3NhzsFQYHdI= Subject key identifier: 93:14:CA:4D:9E:77:21:59:D1:7E:24:AF:78:DA:7D:24:9B:BD:FD:0E Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 0672 Signing time: Fri 30 May 2025 22:34:22 +0000 Manifest this update: Fri 30 May 2025 22:34:22 +0000 Manifest next update: Fri 06 Jun 2025 22:34:22 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: 0oREvAvqvLmOlwgpmmOfcV9dh4buEH9+3L0uMo+0E6Q=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: May 30 22:34:22 2025 GMT Not After : Jun 6 22:34:22 2025 GMT Subject: CN=683a326e-b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:9f:c2:47:fb:44:61:e3:59:68:11:7d:81: 4c:32:06:b8:62:48:f6:5c:a9:97:ad:2e:15:c9:2a: 2f:71:74:b1:76:ae:6a:fb:c9:c3:2d:13:4f:7a:0c: c9:aa:f3:35:b9:2c:fa:be:1d:67:e2:46:67:26:35: 94:f2:cc:9c:a9:f7:03:55:45:ce:7a:b1:3c:b9:99: d8:03:41:88:97:dc:6d:b0:e6:14:7c:82:c5:d6:b7: f0:a4:09:4f:29:5e:1e:09:8c:18:96:b8:07:7e:22: 5c:48:0d:70:56:bf:b4:ae:55:c3:d6:4e:dc:59:f9: 58:b9:4f:3b:a6:ff:5e:b5:d5:5b:fc:a5:29:95:2f: 23:14:f1:b8:4e:40:a2:ae:33:63:3e:53:1d:8b:31: c6:37:d1:9e:a2:08:6d:5a:80:e5:3e:fb:b8:ec:7f: da:e6:73:95:5c:43:3e:0e:80:ce:28:cc:08:f7:d1: a6:de:8b:ad:fc:cd:45:2d:6d:86:d3:4c:5c:3e:43: 3f:e2:d6:96:00:3e:c3:a5:24:5b:3e:51:f8:b8:e1: f6:b8:00:13:d5:a4:28:c1:18:58:80:09:b7:f6:9b: 1a:03:20:8a:16:78:d5:a9:f4:b3:02:d1:37:a5:d4: ef:dd:f8:77:64:6c:5b:e3:f9:c4:ba:b2:09:c0:0a: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:CA:4D:9E:77:21:59:D1:7E:24:AF:78:DA:7D:24:9B:BD:FD:0E X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:72:81:cf:8f:f5:6c:b2:f0:45:67:85:ba:a6:ec:46:85:c5: c0:48:2a:1a:93:76:8f:99:b8:16:57:bd:e1:c7:fe:78:23:3b: 6b:70:b6:33:e1:16:a7:1e:58:36:5e:d2:27:1c:88:34:08:56: f7:fc:2a:02:17:43:21:96:2c:9e:04:b6:73:2e:b9:9d:0e:48: e6:2d:38:9d:db:62:eb:dc:e2:f8:10:28:8f:50:7a:5b:1c:db: e3:9e:35:4b:ca:4d:83:c5:b3:eb:18:3f:c2:73:26:f3:b6:7e: 7d:3f:fa:9d:03:b3:e5:ca:5b:55:6c:bf:e1:c5:07:57:0b:0f: 3d:13:ad:15:4b:f0:bc:f1:df:ed:31:55:d6:ac:e8:f1:c2:9a: 1d:02:80:c0:49:c2:e6:dc:fe:3b:d1:7a:f4:1a:b0:ed:17:77: 89:18:f4:25:5a:41:5f:5f:5a:fa:06:86:38:0d:e2:d9:56:3e: d4:ce:84:0a:1e:5d:86:41:32:09:ad:50:46:86:05:3a:1e:eb: 25:a0:76:78:94:67:94:fc:c5:1f:1f:78:f4:0f:f4:96:f0:07: ea:55:aa:36:a5:95:ce:c5:39:0b:19:bb:69:0a:87:13:ec:8f: 8e:03:b0:63:72:d3:d8:80:66:c0:39:8b:01:74:dd:1b:9d:40: bd:4d:2b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwNTMwMjIzNDIyWhcNMjUwNjA2MjIzNDIyWjAYMRYwFAYD VQQDEw02ODNhMzI2ZS1iNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0Wfwkf7RGHjWWgRfYFMMga4Ykj2XKmXrS4VySovcXSxdq5q+8nDLRNPegzJ qvM1uSz6vh1n4kZnJjWU8sycqfcDVUXOerE8uZnYA0GIl9xtsOYUfILF1rfwpAlP KV4eCYwYlrgHfiJcSA1wVr+0rlXD1k7cWflYuU87pv9etdVb/KUplS8jFPG4TkCi rjNjPlMdizHGN9GeoghtWoDlPvu47H/a5nOVXEM+DoDOKMwI99Gm3out/M1FLW2G 00xcPkM/4taWAD7DpSRbPlH4uOH2uAAT1aQowRhYgAm39psaAyCKFnjVqfSzAtE3 pdTv3fh3ZGxb4/nEurIJwAoVjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMUyk2e dyFZ0X4kr3jafSSbvf0OMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWcoHPj/VssvBFZ4W6puxGhcXASCoak3aPmbgWV73hx/54IztrcLYz 4RanHlg2XtInHIg0CFb3/CoCF0MhliyeBLZzLrmdDkjmLTid22Lr3OL4ECiPUHpb HNvjnjVLyk2DxbPrGD/Ccybztn59P/qdA7PlyltVbL/hxQdXCw89E60VS/C88d/t MVXWrOjxwpodAoDAScLm3P470Xr0GrDtF3eJGPQlWkFfX1r6BoY4DeLZVj7UzoQK Hl2GQTIJrVBGhgU6HusloHZ4lGeU/MUfH3j0D/SW8AfqVao2pZXOxTkLGbtpCocT 7I+OA7BjctPYgGbAOYsBdN0bnUC9TSsW -----END CERTIFICATE-----Generated at Sat May 31 16:31:16 2025 by rpki-client