$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: tT2wVN2CYO208yIs5XJ36WcrCThl88bgeuzskIYtcRo= Subject key identifier: FE:C8:80:D7:47:EA:A0:FE:A7:F6:DF:DD:1F:AB:D6:16:91:A5:70:77 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 0761 Signing time: Fri 30 May 2025 21:51:18 +0000 Manifest this update: Fri 30 May 2025 21:51:17 +0000 Manifest next update: Fri 06 Jun 2025 21:51:17 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: NrfaIkMhy924KdDL0nfsj3dAscijeULb48RPO7pkk08=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: e1Q5MYIIjz5LWcGb0fXsxIuQ9p6/453WvuoEPrSW9e4=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: DbaBLma8zvPIwZ5Spppp0TVJfQzrx6U8bGBh6k5CtpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: May 30 21:51:17 2025 GMT Not After : Jun 6 21:51:17 2025 GMT Subject: CN=683a2855-9c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:ba:c6:b0:ae:37:7f:37:cd:14:64:69:5d: e8:83:0d:e2:0f:2c:e5:fb:de:65:6e:96:68:f4:18: fb:c4:db:07:6f:d7:7d:c6:2b:0c:df:79:a0:7a:34: f6:d3:8b:d1:2e:f0:30:1e:a1:e4:cb:47:d0:84:00: 8c:1c:35:5a:0d:20:78:8b:fb:16:3e:b1:72:96:d7: 8c:7a:54:5d:3d:63:43:bb:16:81:16:49:e6:12:d7: 28:6a:00:83:a4:e4:a8:60:78:a8:4e:e1:d2:b1:45: 07:68:55:b2:13:db:e8:1f:3a:e5:d1:5e:54:5f:fd: 3e:2a:a3:ab:68:62:df:ad:3e:70:a5:64:cd:a5:bf: 84:40:b7:2c:55:54:2c:b1:91:72:70:aa:cb:5b:f5: 93:07:e2:89:c9:74:46:cb:1c:5e:76:a2:63:c5:09: 4b:1d:8d:c5:7a:81:c1:d3:0b:58:58:c3:3f:42:fb: 85:aa:7d:73:94:f1:a6:b2:f1:29:55:48:9f:24:f2: 3d:f8:b2:7b:df:9c:c1:7e:c7:34:8a:9f:d6:80:94: e5:a0:d9:07:34:2a:20:7f:d4:6d:69:65:08:46:8a: 81:31:2e:87:86:65:bc:f6:d2:b6:20:f6:4a:5d:12: 95:65:cb:d3:9d:43:3f:c7:78:4b:6b:85:31:3d:91: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:80:D7:47:EA:A0:FE:A7:F6:DF:DD:1F:AB:D6:16:91:A5:70:77 X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:00:e3:b0:4d:5d:8c:57:a4:17:73:45:87:24:2d:df:53:69: 06:91:b8:c6:bf:06:01:9c:e8:71:34:6e:92:67:82:3f:09:6c: f5:b1:3f:4e:ce:02:7f:6d:56:30:80:22:88:65:16:aa:14:9f: 5c:99:aa:99:a0:96:d3:d6:68:2d:1b:5c:09:9b:40:d7:94:46: 30:94:a5:20:fd:68:c7:0b:f2:04:a9:3d:f9:94:d8:0f:69:bb: 33:52:d1:45:5b:f5:c8:05:08:5c:97:e2:e4:e8:da:b3:0c:40: cb:32:db:0c:82:03:cc:c0:74:b4:42:e9:d2:21:c8:a5:da:b2: cf:e5:de:3f:87:82:09:cb:97:8f:95:e8:66:42:3e:30:f2:62: 80:64:39:52:cc:f5:97:9b:7e:c0:bd:9e:05:bb:02:15:1f:d8: 88:8d:3e:01:d5:eb:87:81:8d:fe:d4:21:d2:b4:5e:f7:67:d8: 4a:d1:c3:b7:2f:49:08:26:c8:ab:cf:e5:95:6e:cc:79:c5:fb: fb:77:80:cb:c4:0e:45:a9:bd:49:07:06:d1:fa:4c:a8:79:38: ec:52:16:cf:70:61:95:b5:2d:f0:66:a6:a3:6e:f8:06:a8:0d: e3:c1:ca:c7:68:f6:4a:25:07:e5:1d:14:c8:ab:c1:6a:ae:77: a5:51:e6:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjUwNTMwMjE1MTE3WhcNMjUwNjA2MjE1MTE3WjAYMRYwFAYD VQQDEw02ODNhMjg1NS05YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+66xrCuN383zRRkaV3ogw3iDyzl+95lbpZo9Bj7xNsHb9d9xisM33mgejT2 04vRLvAwHqHky0fQhACMHDVaDSB4i/sWPrFylteMelRdPWNDuxaBFknmEtcoagCD pOSoYHioTuHSsUUHaFWyE9voHzrl0V5UX/0+KqOraGLfrT5wpWTNpb+EQLcsVVQs sZFycKrLW/WTB+KJyXRGyxxedqJjxQlLHY3FeoHB0wtYWMM/QvuFqn1zlPGmsvEp VUifJPI9+LJ735zBfsc0ip/WgJTloNkHNCogf9RtaWUIRoqBMS6HhmW89tK2IPZK XRKVZcvTnUM/x3hLa4UxPZHl3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7IgNdH 6qD+p/bf3R+r1haRpXB3MB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyAOOwTV2MV6QXc0WHJC3fU2kGkbjGvwYBnOhxNG6SZ4I/CWz1sT9O zgJ/bVYwgCKIZRaqFJ9cmaqZoJbT1mgtG1wJm0DXlEYwlKUg/WjHC/IEqT35lNgP abszUtFFW/XIBQhcl+Lk6NqzDEDLMtsMggPMwHS0QunSIcil2rLP5d4/h4IJy5eP lehmQj4w8mKAZDlSzPWXm37AvZ4FuwIVH9iIjT4B1euHgY3+1CHStF73Z9hK0cO3 L0kIJsirz+WVbsx5xfv7d4DLxA5Fqb1JBwbR+kyoeTjsUhbPcGGVtS3wZqajbvgG qA3jwcrHaPZKJQflHRTIq8FqrnelUeZT -----END CERTIFICATE-----Generated at Sat May 31 17:01:24 2025 by rpki-client