$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: FWYH1IwQyVwyLO4OUXk2vqIHANLIgEUITmTU6jKDBDs= Subject key identifier: E8:CE:90:5C:0B:CE:9E:1F:87:B3:27:49:DC:08:26:0D:48:FF:E9:43 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 047D Signing time: Sat 31 May 2025 00:16:18 +0000 Manifest this update: Sat 31 May 2025 00:16:18 +0000 Manifest next update: Sat 07 Jun 2025 00:16:18 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: IGF0JA+TZbpIiAB7tZKVXTmfCDIttizTTQCgEf+BLm0=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: May 31 00:16:18 2025 GMT Not After : Jun 7 00:16:18 2025 GMT Subject: CN=683a4a52-f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:30:49:2f:3a:41:c1:1e:71:b3:a4:c2:05: 8f:1b:c4:87:1f:f5:31:bb:ac:68:ce:92:70:83:07: 6d:58:f0:f3:db:6e:73:50:74:06:77:44:97:de:92: e4:51:ef:6a:10:cc:6c:f0:32:30:ab:fc:0a:55:38: 59:b5:df:5e:a2:79:69:ac:e9:23:8c:15:31:f0:10: e0:ed:e8:bd:6e:15:b8:ae:e2:7c:52:4f:8d:e2:07: cd:b8:5b:34:6c:ab:17:42:8c:d8:d4:00:61:02:c6: bb:c1:a2:d3:a2:76:15:81:76:e1:60:f6:6a:45:53: db:46:72:9a:2b:72:73:96:78:8f:59:27:1b:77:a6: 1c:4a:44:8d:74:5d:66:90:2f:11:18:4c:c9:d1:c5: 43:e8:1c:4a:d3:03:f1:34:72:b8:0d:75:f3:4f:94: 5e:1b:7e:f7:d8:5d:8f:51:74:63:cf:e5:2f:30:82: 9f:47:45:5d:cd:b1:a8:94:71:8f:63:37:44:6f:00: 02:4a:cb:d9:9b:9d:31:0a:51:8e:8a:d7:b9:ea:fc: f8:66:28:c9:01:f0:50:5c:ac:06:37:13:c6:c6:25: 2a:89:ab:fd:f2:52:22:c6:d3:43:8b:55:b4:88:6b: ec:f2:e7:50:69:dc:94:60:d4:f4:c7:b7:9d:06:bd: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:90:5C:0B:CE:9E:1F:87:B3:27:49:DC:08:26:0D:48:FF:E9:43 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:02:fe:e4:ba:d9:d9:a2:c6:c8:10:3a:94:c7:46:80:e4:78: 9b:8d:7c:dd:9e:3b:f6:91:61:dc:16:f9:47:36:1a:27:c3:bc: d5:fb:c3:93:e9:df:41:93:2a:88:cc:64:90:5d:94:1b:9c:8f: 24:7d:37:0f:84:a7:31:2e:c8:9d:d3:c0:77:23:b9:f6:71:8d: 92:77:aa:97:b6:3c:63:b4:f1:8c:ab:d1:99:38:a3:86:d5:00: 2f:05:09:d9:b5:5f:35:8e:80:37:65:3d:22:3b:7e:cc:13:21: bc:b9:7f:07:77:5a:8a:26:b0:4e:09:95:17:bf:5a:b8:31:ef: bd:2d:c3:9b:7e:00:7a:32:2e:7a:2d:c0:55:28:3f:50:78:42: ee:9a:4c:fe:eb:b8:c9:89:5d:bb:9c:6d:07:6e:37:57:6a:59: e6:8e:d7:0b:ac:19:39:ef:c3:8d:c8:cc:a0:97:b6:c4:07:af: e8:85:54:ea:f8:4f:d7:04:cc:09:4a:69:1e:fc:9f:63:f0:99: 2c:6a:f9:43:a9:e7:00:a1:95:1a:e0:ba:61:d6:2e:16:27:2b: bd:e2:73:7f:11:17:03:fb:26:db:86:f2:cd:fe:3f:1f:b5:88: a0:14:36:3d:c9:3b:67:63:4d:ea:8d:10:6c:01:c5:44:74:ac: 26:eb:8a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwNTMxMDAxNjE4WhcNMjUwNjA3MDAxNjE4WjAYMRYwFAYD VQQDEw02ODNhNGE1Mi1mMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKIwSS86QcEecbOkwgWPG8SHH/Uxu6xozpJwgwdtWPDz225zUHQGd0SX3pLk Ue9qEMxs8DIwq/wKVThZtd9eonlprOkjjBUx8BDg7ei9bhW4ruJ8Uk+N4gfNuFs0 bKsXQozY1ABhAsa7waLTonYVgXbhYPZqRVPbRnKaK3JzlniPWScbd6YcSkSNdF1m kC8RGEzJ0cVD6BxK0wPxNHK4DXXzT5ReG3732F2PUXRjz+UvMIKfR0VdzbGolHGP YzdEbwACSsvZm50xClGOite56vz4ZijJAfBQXKwGNxPGxiUqiav98lIixtNDi1W0 iGvs8udQadyUYNT0x7edBr0g0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjOkFwL zp4fh7MnSdwIJg1I/+lDMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Av7kutnZosbIEDqUx0aA5HibjXzdnjv2kWHcFvlHNhonw7zV+8OT 6d9BkyqIzGSQXZQbnI8kfTcPhKcxLsid08B3I7n2cY2Sd6qXtjxjtPGMq9GZOKOG 1QAvBQnZtV81joA3ZT0iO37MEyG8uX8Hd1qKJrBOCZUXv1q4Me+9LcObfgB6Mi56 LcBVKD9QeELumkz+67jJiV27nG0HbjdXalnmjtcLrBk578ONyMygl7bEB6/ohVTq +E/XBMwJSmke/J9j8JksavlDqecAoZUa4Lph1i4WJyu94nN/ERcD+ybbhvLN/j8f tYigFDY9yTtnY03qjRBsAcVEdKwm64qf -----END CERTIFICATE-----Generated at Sat May 31 17:37:44 2025 by rpki-client