$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: CguQHAxG0b/zB42rN9nmepbogoNn4tKYxIh7CQP04Ho= Subject key identifier: 78:4A:B1:F8:EE:83:12:32:CD:EB:C0:1B:B9:D2:5B:1F:0B:92:DB:2B Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 0277 Signing time: Sun 01 Jun 2025 01:53:30 +0000 Manifest this update: Sun 01 Jun 2025 01:53:30 +0000 Manifest next update: Sun 08 Jun 2025 01:53:30 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: oLkUJeK8a/Q2NRbXjnjya1mSGM3Ji58r8sUP7Pps2yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Jun 1 01:53:30 2025 GMT Not After : Jun 8 01:53:30 2025 GMT Subject: CN=683bb29a-61c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:5e:01:5f:e1:47:76:bb:e0:cb:be:78:78: a3:ed:b1:27:a3:73:60:47:48:3a:b9:6d:30:a3:dc: db:b3:27:47:02:2c:ec:d8:f9:6b:66:75:e3:cf:09: 22:c2:5a:8b:e7:d7:92:0a:8d:78:96:fd:a8:85:1e: 25:e9:ca:16:31:90:44:47:45:4f:0a:5f:b4:18:65: 5d:92:ad:38:ac:a4:00:74:8d:dd:9a:07:aa:bf:6f: 2a:b3:ad:29:7b:5f:9f:fb:7f:45:7a:c5:43:da:bf: 3f:e6:53:31:53:68:f5:c4:78:fb:bf:6a:4a:88:86: 23:60:1d:7c:7a:b7:ac:16:9c:37:e5:eb:85:d8:d4: e8:aa:de:ee:b0:27:53:34:f0:f3:6a:de:4d:2a:1d: 1e:6f:c0:2f:31:99:4e:5b:1d:a6:b6:b2:35:f9:44: fe:6e:14:3e:72:66:4a:b0:9b:04:d6:22:d1:6a:16: 09:d1:d2:d8:e8:de:e5:00:d6:7b:be:20:fa:bb:88: 13:fb:aa:16:eb:f9:b0:3c:3c:35:f8:a9:53:bb:d6: a6:3c:25:67:d3:55:34:e0:26:cc:58:a4:42:f7:f1: c0:9c:93:38:b5:21:13:d1:af:44:43:a0:a3:91:5f: 6a:4d:ce:b2:40:81:22:ed:7a:e9:e1:72:9b:a5:69: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:B1:F8:EE:83:12:32:CD:EB:C0:1B:B9:D2:5B:1F:0B:92:DB:2B X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:52:19:05:f5:16:a1:c2:01:35:f4:bc:df:c6:e8:ea:a3:7f: fb:e3:84:72:56:25:d8:6c:ab:bd:2f:bc:14:f7:c2:e7:63:88: 70:fb:a6:e8:d1:00:ec:86:c7:7c:7a:13:43:b5:24:b5:df:34: 2f:ff:47:a8:ba:b2:58:ce:a4:d5:9f:25:b2:5e:bb:d2:dc:e1: 5a:6a:ee:13:dc:a5:cc:06:24:d1:16:8e:3b:2f:12:e2:5a:ad: f5:24:17:f8:3e:22:71:ac:e6:34:3b:73:df:15:4f:31:ae:d1: 95:e6:63:5f:ac:de:91:ae:9a:e1:1f:8b:07:e7:32:99:08:4a: 22:4d:b2:c2:e6:b2:b9:0e:36:4b:56:4b:6b:72:80:36:45:d3: 05:fd:5a:47:0f:79:89:cf:72:c7:41:b6:2c:d1:84:8b:31:90: 8d:7e:7a:4c:86:e0:24:b9:db:ac:a8:85:42:aa:3d:5a:21:24: 08:b5:da:bf:5e:92:0b:84:28:86:93:4a:c8:88:47:51:43:21: 26:81:8a:93:6d:53:79:78:8f:0c:8a:49:01:ff:31:66:fd:9f: 09:3d:6b:26:f7:ff:81:5e:ab:60:c8:6f:ac:d9:41:d1:39:f3: b9:f6:7a:16:c9:6d:38:2b:e8:fb:43:25:7b:63:b8:38:17:78: a3:48:35:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwNjAxMDE1MzMwWhcNMjUwNjA4MDE1MzMwWjAYMRYwFAYD VQQDEw02ODNiYjI5YS02MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbteAV/hR3a74Mu+eHij7bEno3NgR0g6uW0wo9zbsydHAizs2PlrZnXjzwki wlqL59eSCo14lv2ohR4l6coWMZBER0VPCl+0GGVdkq04rKQAdI3dmgeqv28qs60p e1+f+39FesVD2r8/5lMxU2j1xHj7v2pKiIYjYB18eresFpw35euF2NToqt7usCdT NPDzat5NKh0eb8AvMZlOWx2mtrI1+UT+bhQ+cmZKsJsE1iLRahYJ0dLY6N7lANZ7 viD6u4gT+6oW6/mwPDw1+KlTu9amPCVn01U04CbMWKRC9/HAnJM4tSET0a9EQ6Cj kV9qTc6yQIEi7Xrp4XKbpWko6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhKsfju gxIyzevAG7nSWx8LktsrMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANUhkF9RahwgE19Lzfxujqo3/744RyViXYbKu9L7wU98LnY4hw+6bo 0QDshsd8ehNDtSS13zQv/0eourJYzqTVnyWyXrvS3OFaau4T3KXMBiTRFo47LxLi Wq31JBf4PiJxrOY0O3PfFU8xrtGV5mNfrN6RrprhH4sH5zKZCEoiTbLC5rK5DjZL VktrcoA2RdMF/VpHD3mJz3LHQbYs0YSLMZCNfnpMhuAkudusqIVCqj1aISQItdq/ XpILhCiGk0rIiEdRQyEmgYqTbVN5eI8MikkB/zFm/Z8JPWsm9/+BXqtgyG+s2UHR OfO59noWyW04K+j7QyV7Y7g4F3ijSDUM -----END CERTIFICATE-----Generated at Mon Jun 2 21:03:18 2025 by rpki-client