$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: NczNX3+i0sax5Ymx2EpmhysOrX5AjfXjYvpd0/l1euA= Subject key identifier: 26:0B:E4:E4:03:65:C2:95:D1:07:79:73:C8:08:B8:96:74:A3:CC:4D Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D21 Signing time: Fri 30 May 2025 18:18:21 +0000 Manifest this update: Fri 30 May 2025 18:18:21 +0000 Manifest next update: Fri 06 Jun 2025 18:18:21 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: y89+PpbD3ZM5uSbG1DnX05N3M4h2NPx3PiO1dme1xeo=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: May 30 18:18:21 2025 GMT Not After : Jun 6 18:18:21 2025 GMT Subject: CN=6839f66d-2aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:2c:8e:1b:70:de:c3:42:92:ca:b5:af:13: 98:ca:e3:64:bc:31:05:48:60:0a:5b:c7:fc:6d:d0: 3f:23:31:e9:55:a9:f8:29:3b:cb:c0:9f:2d:6c:8d: c9:0a:40:45:f9:ec:c1:d4:24:45:f3:d4:09:cd:97: 0e:e5:28:0c:83:9b:e0:ae:6b:04:68:68:e7:a0:57: ef:bf:c6:3d:b6:9e:17:d4:5b:d9:ac:d1:5a:73:11: 64:fb:7c:f9:e6:a3:7a:f4:de:cf:8b:22:3d:37:ba: a3:bf:2f:c7:1f:25:1e:a3:f6:e1:38:51:f3:f8:2a: 8a:d7:37:8a:31:59:0a:fb:80:92:eb:6b:ec:f0:4d: b7:65:50:08:59:d9:2c:0b:9a:66:0a:b1:32:3b:96: 14:ee:fb:a7:1f:9e:a7:ff:c4:60:5a:f8:bf:33:40: d9:7e:95:85:81:bd:3f:86:5d:a8:f7:10:03:05:5f: 37:32:27:a0:6c:4f:c7:35:7c:5b:dd:8a:d9:40:e5: 1d:b8:bb:c7:bb:2e:f9:3a:54:ef:24:80:14:18:02: 81:66:62:75:ee:0a:86:57:53:f6:48:b8:03:5f:e1: 5f:ef:72:6e:77:55:bb:1f:f1:19:36:f0:fd:b7:6c: cd:13:ea:e6:6f:ea:6a:ee:97:09:1a:1f:18:8a:8b: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:E4:E4:03:65:C2:95:D1:07:79:73:C8:08:B8:96:74:A3:CC:4D X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:80:39:45:a1:38:b7:fb:56:2d:c9:2d:0b:cc:6d:88:56:2b: 2e:93:49:39:e8:d3:ae:8d:23:c8:04:2f:db:7d:46:c6:79:1a: bc:fb:a8:07:b3:09:0b:b1:7c:e5:b5:a5:55:51:41:7a:b6:0c: fe:36:3a:25:fb:e3:be:b2:97:e6:7e:8c:17:4f:bc:93:96:09: 26:19:46:87:61:f4:d7:01:9e:b3:f7:04:be:86:b4:e4:ca:44: 1e:e3:76:6c:9a:95:93:1f:ed:18:d0:8c:05:0d:98:b4:8a:d7: fc:2e:34:ee:8d:27:6c:a3:ce:3b:b2:df:0f:8e:51:1a:8f:a3: d8:13:1a:b5:b3:37:f2:4e:f1:74:c8:25:41:37:45:e0:e3:66: 33:e2:16:01:6d:28:53:7a:76:15:48:be:f1:20:cb:f7:fc:6b: a8:40:14:92:cb:b0:5a:1f:ef:d7:ba:ff:37:da:29:66:57:7c: 21:e9:50:2e:74:66:7d:de:17:ef:0b:2d:aa:cd:97:3f:9c:a9: d3:38:1e:fb:63:98:ce:50:7a:22:08:4b:f9:d6:8e:b0:02:21: 1c:7c:61:df:62:12:48:68:15:a9:14:0c:b6:a2:37:81:d4:d4: 85:05:0a:87:19:46:7a:de:b5:cf:22:ed:1a:0d:74:25:84:37: 07:2e:ce:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwNTMwMTgxODIxWhcNMjUwNjA2MTgxODIxWjAYMRYwFAYD VQQDEw02ODM5ZjY2ZC0yYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxwsjhtw3sNCksq1rxOYyuNkvDEFSGAKW8f8bdA/IzHpVan4KTvLwJ8tbI3J CkBF+ezB1CRF89QJzZcO5SgMg5vgrmsEaGjnoFfvv8Y9tp4X1FvZrNFacxFk+3z5 5qN69N7PiyI9N7qjvy/HHyUeo/bhOFHz+CqK1zeKMVkK+4CS62vs8E23ZVAIWdks C5pmCrEyO5YU7vunH56n/8RgWvi/M0DZfpWFgb0/hl2o9xADBV83MiegbE/HNXxb 3YrZQOUduLvHuy75OlTvJIAUGAKBZmJ17gqGV1P2SLgDX+Ff73Jud1W7H/EZNvD9 t2zNE+rmb+pq7pcJGh8YiovbswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYL5OQD ZcKV0Qd5c8gIuJZ0o8xNMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgDlFoTi3+1YtyS0LzG2IVisuk0k56NOujSPIBC/bfUbGeRq8+6gH swkLsXzltaVVUUF6tgz+Njol++O+spfmfowXT7yTlgkmGUaHYfTXAZ6z9wS+hrTk ykQe43ZsmpWTH+0Y0IwFDZi0itf8LjTujSdso847st8PjlEaj6PYExq1szfyTvF0 yCVBN0Xg42Yz4hYBbShTenYVSL7xIMv3/GuoQBSSy7BaH+/Xuv832ilmV3wh6VAu dGZ93hfvCy2qzZc/nKnTOB77Y5jOUHoiCEv51o6wAiEcfGHfYhJIaBWpFAy2ojeB 1NSFBQqHGUZ63rXPIu0aDXQlhDcHLs5z -----END CERTIFICATE-----Generated at Sat May 31 17:31:53 2025 by rpki-client