$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: RlL+4Xk11ui02qajFBXn7jx+pBENkEF41JRjprVoeGs= Subject key identifier: CA:1C:0E:41:4B:11:95:56:D7:75:19:DF:70:E4:1F:97:D1:FF:E2:F8 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 07B1 Signing time: Fri 30 May 2025 21:25:55 +0000 Manifest this update: Fri 30 May 2025 21:25:54 +0000 Manifest next update: Fri 06 Jun 2025 21:25:54 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: VkWf9bKq5xzLj+DKXQNiVHMOXE2MD19J/BAKmfb7gN0=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: May 30 21:25:54 2025 GMT Not After : Jun 6 21:25:54 2025 GMT Subject: CN=683a2263-32bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:8f:61:c7:2c:9f:f3:bf:cb:38:9e:d6:66: 89:14:81:1c:76:44:7e:cc:60:0f:19:a5:22:88:30: 8d:b2:ac:a4:cc:12:76:d5:43:73:b7:34:5e:28:91: b1:f2:88:5e:27:38:73:89:98:69:fe:02:16:bf:6b: fd:c8:0b:fb:90:07:ac:67:67:b8:24:b8:1d:39:f3: cd:7a:7c:a3:e3:8d:2d:08:1f:63:50:b3:16:81:68: f1:0a:f6:c5:48:bc:75:a0:05:67:88:e2:2c:0f:3a: 86:88:02:5b:00:e2:ec:70:c2:5a:cf:15:31:b3:46: ca:45:c4:ea:ae:a0:af:5b:65:d5:68:9a:7d:35:3a: 71:24:47:fa:67:41:f6:f9:9d:ec:95:83:22:89:2b: 4e:c7:bb:72:68:4d:b2:19:a6:8a:d7:20:b5:42:d9: 72:9b:f9:d7:f9:70:03:2e:18:a1:a0:39:ad:19:84: 96:6f:80:f4:7c:92:1c:e2:e5:19:42:e8:fc:53:0f: 25:b6:26:ab:89:36:cb:8a:8d:21:2c:41:76:f9:e7: b3:e6:ed:30:15:cd:35:57:82:d9:8e:7e:12:0c:a4: 95:61:bf:d3:b9:2b:da:90:2f:9b:c8:bb:ec:ac:b8: 5e:26:2f:54:bb:6a:1f:8f:70:13:af:78:5e:43:96: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1C:0E:41:4B:11:95:56:D7:75:19:DF:70:E4:1F:97:D1:FF:E2:F8 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0e:a5:8d:23:52:5f:75:49:e4:4d:a8:c7:f5:ca:23:24:23: 74:d3:e7:c6:7a:c4:c0:53:b9:eb:8a:55:11:dc:49:40:6f:2c: bb:1e:5b:a9:1d:70:0a:a5:e0:8f:38:c9:dc:b8:2d:13:1c:4d: 27:67:a3:9f:d5:94:84:89:7d:5f:84:75:f4:bb:35:f4:72:56: d5:53:50:6f:44:d8:ea:99:c3:5e:bb:fb:11:79:b6:aa:d6:72: d2:05:fd:c4:32:dd:2c:ec:19:25:e9:fa:73:0a:35:92:01:5d: 97:22:5e:89:a4:bc:09:33:6c:71:a2:76:ef:ad:a6:36:52:5e: 76:92:d1:4f:aa:ac:f3:a8:7f:58:f5:9a:52:c0:27:d1:e9:08: 06:71:9a:3c:bb:de:3f:23:2d:62:ed:2c:2c:0f:87:aa:cd:3c: 16:e8:aa:5d:e4:22:57:89:8b:6c:3e:6a:4f:dc:ed:e9:62:42: 5c:70:49:a8:f5:da:b7:cb:ba:9f:9a:5f:0d:aa:ce:44:f9:b1: b7:49:d8:f3:d7:1f:05:a2:58:75:25:3c:56:80:72:0e:e7:73: 4c:ee:3f:3f:f0:0e:76:0e:3b:de:73:bb:03:8a:2b:9e:3c:d6: 5e:a4:be:39:53:d9:e7:b0:ca:06:ab:f3:a3:46:f2:19:91:f1: e1:e0:d6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUwNTMwMjEyNTU0WhcNMjUwNjA2MjEyNTU0WjAYMRYwFAYD VQQDEw02ODNhMjI2My0zMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzOPYccsn/O/yzie1maJFIEcdkR+zGAPGaUiiDCNsqykzBJ21UNztzReKJGx 8oheJzhziZhp/gIWv2v9yAv7kAesZ2e4JLgdOfPNenyj440tCB9jULMWgWjxCvbF SLx1oAVniOIsDzqGiAJbAOLscMJazxUxs0bKRcTqrqCvW2XVaJp9NTpxJEf6Z0H2 +Z3slYMiiStOx7tyaE2yGaaK1yC1Qtlym/nX+XADLhihoDmtGYSWb4D0fJIc4uUZ Quj8Uw8ltiariTbLio0hLEF2+eez5u0wFc01V4LZjn4SDKSVYb/TuSvakC+byLvs rLheJi9Uu2ofj3ATr3heQ5ZfoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMocDkFL EZVW13UZ33DkH5fR/+L4MB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDqWNI1JfdUnkTajH9cojJCN00+fGesTAU7nrilUR3ElAbyy7Hlup HXAKpeCPOMncuC0THE0nZ6Of1ZSEiX1fhHX0uzX0clbVU1BvRNjqmcNeu/sRebaq 1nLSBf3EMt0s7Bkl6fpzCjWSAV2XIl6JpLwJM2xxonbvraY2Ul52ktFPqqzzqH9Y 9ZpSwCfR6QgGcZo8u94/Iy1i7SwsD4eqzTwW6Kpd5CJXiYtsPmpP3O3pYkJccEmo 9dq3y7qfml8Nqs5E+bG3Sdjz1x8Folh1JTxWgHIO53NM7j8/8A52Djvec7sDiiue PNZepL45U9nnsMoGq/OjRvIZkfHh4NZN -----END CERTIFICATE-----Generated at Sat May 31 17:17:23 2025 by rpki-client