$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: e2o8r4EgJ7yHvNTynHi8S+8YW3l3rUb4F7dudvFvD4A= Subject key identifier: AD:DC:40:4E:81:2E:7F:7F:63:B2:0D:2F:A8:06:DD:56:E3:3E:10:F2 Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3BB8 Signing time: Sat 31 May 2025 14:34:47 +0000 Manifest this update: Sat 31 May 2025 14:34:46 +0000 Manifest next update: Sat 07 Jun 2025 14:34:46 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: c5NfoPw6okNr0Kc0tioyMgE9id8nkFNUGnYuTDe+jhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: May 31 14:34:46 2025 GMT Not After : Jun 7 14:34:46 2025 GMT Subject: CN=683b1387-6ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:13:3e:16:a0:09:67:72:7a:68:25:df:a7: 1b:5f:42:dd:48:c9:da:49:df:78:fd:85:71:d5:84: 05:4e:ea:28:b9:46:1f:e7:31:5d:80:7c:6f:6c:2f: cd:7c:84:56:9f:b8:35:43:82:c8:02:e8:da:95:e9: 1b:09:7d:b5:c6:e2:92:37:3a:22:f4:d2:31:59:18: fa:97:74:0b:c2:00:e3:9b:61:5f:96:0f:59:43:9e: 2a:cc:7e:7c:bb:32:3e:05:56:c4:9d:65:5e:36:4a: 62:24:25:74:cf:50:3e:35:38:b6:ef:fe:8e:e4:e8: 13:09:19:02:33:37:88:55:a2:cc:f4:fe:29:eb:4d: 1c:1d:05:37:55:4c:86:06:c7:5c:83:1b:50:8a:1a: 3d:46:b3:62:4a:05:b7:9f:7e:d0:f0:39:0a:94:0b: 49:5e:cf:a9:8c:e5:9e:cd:06:3b:1c:85:04:6c:48: cd:69:0f:f6:6b:a5:b2:4d:ac:07:21:a4:53:ea:d3: bd:4a:21:2d:a7:41:74:f4:c7:ad:b5:1d:43:bc:40: 1b:b0:c6:a1:31:49:64:5c:c9:0c:51:fb:c8:27:a4: 24:75:c9:6d:8f:04:d8:e4:3e:45:8a:5c:9e:23:f4: ee:8c:7a:3a:8a:cf:f7:44:cb:8c:88:c7:a6:17:4c: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:40:4E:81:2E:7F:7F:63:B2:0D:2F:A8:06:DD:56:E3:3E:10:F2 X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:4e:e6:bc:cd:fb:8d:be:8e:b5:1b:25:7c:9c:c0:f8:4f: 6b:e7:72:b4:5a:1c:55:3c:a9:7b:6a:33:70:fd:2a:ec:70:92: 16:06:3a:a2:f8:59:c9:93:8a:f7:83:4d:76:78:1c:e2:e1:f9: 4d:fd:12:81:5d:39:35:fb:60:e1:52:78:87:26:90:95:04:2d: e8:cb:4b:0e:61:71:93:2d:ca:73:eb:03:93:88:95:d0:5f:61: 05:c3:3a:c8:63:ba:90:c2:21:ab:59:41:97:f4:ee:ae:1e:84: 73:9f:dc:98:44:c4:20:e6:c8:a6:75:2a:9c:4f:3d:29:69:0f: 04:82:a5:b1:83:02:7d:62:61:f5:b8:45:a4:b1:43:55:a4:c7: 2e:8f:05:db:94:a3:fc:bd:8e:9c:03:83:5d:91:a3:4c:10:d2: ae:77:b9:5b:28:1b:01:09:2f:1c:ca:e4:df:8e:36:26:d0:67: 38:e7:88:02:90:37:72:ad:41:39:63:d1:ca:83:b9:7f:da:94: 05:30:48:be:93:d3:6d:4a:e2:12:3e:38:16:15:e0:3c:ec:79: 87:66:bf:07:58:c1:96:b6:b1:a8:a3:28:14:d5:64:45:bf:3c: 85:22:1a:14:23:85:a5:ba:46:be:d7:35:ed:bb:85:a9:09:d1: ed:46:b7:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUwNTMxMTQzNDQ2WhcNMjUwNjA3MTQzNDQ2WjAYMRYwFAYD VQQDEw02ODNiMTM4Ny02Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM0TPhagCWdyemgl36cbX0LdSMnaSd94/YVx1YQFTuoouUYf5zFdgHxvbC/N fIRWn7g1Q4LIAujalekbCX21xuKSNzoi9NIxWRj6l3QLwgDjm2Fflg9ZQ54qzH58 uzI+BVbEnWVeNkpiJCV0z1A+NTi27/6O5OgTCRkCMzeIVaLM9P4p600cHQU3VUyG BsdcgxtQiho9RrNiSgW3n37Q8DkKlAtJXs+pjOWezQY7HIUEbEjNaQ/2a6WyTawH IaRT6tO9SiEtp0F09MettR1DvEAbsMahMUlkXMkMUfvIJ6QkdcltjwTY5D5Filye I/TujHo6is/3RMuMiMemF0xg2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3cQE6B Ln9/Y7INL6gG3VbjPhDyMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2E07mvM37jb6OtRslfJzA+E9r53K0WhxVPKl7ajNw/SrscJIWBjqi +FnJk4r3g012eBzi4flN/RKBXTk1+2DhUniHJpCVBC3oy0sOYXGTLcpz6wOTiJXQ X2EFwzrIY7qQwiGrWUGX9O6uHoRzn9yYRMQg5simdSqcTz0paQ8EgqWxgwJ9YmH1 uEWksUNVpMcujwXblKP8vY6cA4NdkaNMENKud7lbKBsBCS8cyuTfjjYm0Gc454gC kDdyrUE5Y9HKg7l/2pQFMEi+k9NtSuISPjgWFeA87HmHZr8HWMGWtrGooygU1WRF vzyFIhoUI4Wluka+1zXtu4WpCdHtRrdK -----END CERTIFICATE-----Generated at Sat May 31 16:40:42 2025 by rpki-client