$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft File: PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json) Hash identifier: yYemQrh4Ds/ZziCAU4yG8GQmvU0qYKoatppz9PE90dA= Subject key identifier: CF:E7:7E:DE:A7:45:D5:11:59:7F:5C:E6:19:69:CA:4C:E0:80:F1:A6 Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B Certificate issuer: /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft Manifest number: AC Signing time: Sat 31 May 2025 05:37:53 +0000 Manifest this update: Sat 31 May 2025 05:37:52 +0000 Manifest next update: Sat 07 Jun 2025 05:37:52 +0000 Files and hashes: 1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: M0hfgvwSqQ3TR/ZJBeVy/I46i+rrhZXFo39zqrmihqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Validity Not Before: May 31 05:37:52 2025 GMT Not After : Jun 7 05:37:52 2025 GMT Subject: CN=683a95b0-5b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:f3:ac:4e:9d:65:f8:c4:6c:f6:73:23:09: a0:8e:92:0f:78:e2:32:5f:09:bd:bd:d1:66:48:ae: fb:ae:8e:ec:43:ec:64:d3:dd:bb:4c:d8:3d:13:73: 40:60:76:36:4c:94:e5:b3:49:83:40:df:06:79:95: d0:a0:36:cc:26:58:6c:c5:cf:a7:e5:a8:42:16:06: da:0f:0d:c5:45:8f:f2:c8:bd:dc:e5:4e:68:4a:48: e6:94:60:25:ef:d2:50:59:c1:ce:21:bd:ee:0a:35: 3a:7d:39:ac:67:d5:33:12:7e:c3:f9:e1:e7:71:84: 17:6f:04:77:19:8a:93:9d:a6:f9:96:52:5b:84:8d: f6:6e:fa:f7:16:a3:d3:d5:e7:86:be:9b:28:c7:18: 9e:bf:16:93:5e:db:82:6c:df:50:1b:a1:31:48:fa: 84:38:8d:6a:09:fa:2d:1f:64:a8:f7:4c:09:0d:01: 2a:f8:0e:45:21:e7:db:fc:01:c4:fe:dd:32:81:cc: 05:ae:9b:c8:de:a9:b4:89:d4:67:fc:e1:72:d3:f1: 5e:8c:ec:cb:f9:37:15:a2:3e:b4:2b:b6:83:5c:8f: 3d:8c:07:4c:4b:b7:6e:b2:c0:29:9f:cd:59:46:03: 94:e9:93:8a:01:4b:3f:b1:cc:9f:0c:4a:96:f4:38: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:7E:DE:A7:45:D5:11:59:7F:5C:E6:19:69:CA:4C:E0:80:F1:A6 X509v3 Authority Key Identifier: keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:84:f7:6a:75:84:08:4e:6d:52:08:ac:d9:22:9e:60:92:9c: 6e:7d:4c:78:4d:59:d1:74:c0:66:42:71:17:47:37:41:0d:09: e7:68:95:e1:c0:45:98:f2:67:21:ca:ff:de:70:1a:2f:64:d1: c6:92:10:34:88:b5:22:34:30:0a:67:ee:a6:4b:ed:db:d4:2c: 43:69:0c:45:dc:a3:8b:b9:ba:99:1f:b8:84:00:18:75:6b:bf: 95:d3:c2:10:fb:ce:81:21:88:6f:f1:3a:28:e6:59:d9:8d:f4: 61:9d:43:e7:90:59:d9:fc:b7:d3:98:02:f2:f0:8d:4c:74:7f: 60:22:fd:e2:8c:9b:e6:91:8b:e0:92:42:45:6a:57:f3:67:c2: 5c:a2:bf:2c:51:fa:bd:8f:62:81:cc:7e:8b:44:c9:c4:8a:48: 3d:83:02:31:5a:ab:21:91:e1:ac:37:fb:e7:f3:22:be:07:2e: 7e:ad:ac:57:ff:91:97:43:14:eb:9e:75:dd:6d:d6:a7:80:bb: b0:16:eb:2d:cf:73:c2:48:af:0b:42:d9:04:06:3e:49:35:a1: a5:2b:33:98:eb:8f:8b:99:8f:8b:b9:18:6d:eb:0c:09:f4:f3: ac:bb:ef:0b:c6:10:3f:6e:51:d5:ec:94:4c:e3:b4:c0:72:4b: 83:6d:67:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDNDMkRGOEVCN0MxQkQ1MDIzMzAyRjYxMUE5N0UwNUQ3 ODQxNzA5M0IwHhcNMjUwNTMxMDUzNzUyWhcNMjUwNjA3MDUzNzUyWjAYMRYwFAYD VQQDEw02ODNhOTViMC01Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4nzrE6dZfjEbPZzIwmgjpIPeOIyXwm9vdFmSK77ro7sQ+xk0927TNg9E3NA YHY2TJTls0mDQN8GeZXQoDbMJlhsxc+n5ahCFgbaDw3FRY/yyL3c5U5oSkjmlGAl 79JQWcHOIb3uCjU6fTmsZ9UzEn7D+eHncYQXbwR3GYqTnab5llJbhI32bvr3FqPT 1eeGvpsoxxievxaTXtuCbN9QG6ExSPqEOI1qCfotH2So90wJDQEq+A5FIefb/AHE /t0ygcwFrpvI3qm0idRn/OFy0/FejOzL+TcVoj60K7aDXI89jAdMS7dussApn81Z RgOU6ZOKAUs/scyfDEqW9DhqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/nft6n RdURWX9c5hlpykzggPGmMB8GA1UdIwQYMBaAFDwt+Ot8G9UCMwL2Eal+BdeEFwk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8xNjBDQUIzQTM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9QQzM0NjN3YjFRSXpBdllScVg0RjE0UVhD VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BDMzQ2M3diMVFJekF2WVJxWDRGMTRRWENUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8xNjBDQUIzQTM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9QQzM0NjN3YjFR SXpBdllScVg0RjE0UVhDVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPhPdqdYQITm1SCKzZIp5gkpxufUx4TVnRdMBmQnEXRzdBDQnnaJXh wEWY8mchyv/ecBovZNHGkhA0iLUiNDAKZ+6mS+3b1CxDaQxF3KOLubqZH7iEABh1 a7+V08IQ+86BIYhv8Too5lnZjfRhnUPnkFnZ/LfTmALy8I1MdH9gIv3ijJvmkYvg kkJFalfzZ8Jcor8sUfq9j2KBzH6LRMnEikg9gwIxWqshkeGsN/vn8yK+By5+raxX /5GXQxTrnnXdbdangLuwFustz3PCSK8LQtkEBj5JNaGlKzOY64+LmY+LuRht6wwJ 9POsu+8LxhA/blHV7JRM47TAckuDbWcT -----END CERTIFICATE-----Generated at Sat May 31 16:38:56 2025 by rpki-client