$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: G3pDfPhI6jUa49wBmk7xu0rp1/N8bHx07U2LgY8wMoI= Subject key identifier: 5A:C2:92:36:16:66:8C:34:40:C0:C2:F3:C7:E5:9D:CD:6D:8F:DC:AC Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: 61 Signing time: Sat 31 May 2025 06:40:23 +0000 Manifest this update: Sat 31 May 2025 06:40:22 +0000 Manifest next update: Sat 07 Jun 2025 06:40:22 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: cH+22/LnqSuj8NE76pArJYOzxoE6rhUfGdpJyWNXE7A=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: May 31 06:40:22 2025 GMT Not After : Jun 7 06:40:22 2025 GMT Subject: CN=683aa456-7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b5:c1:cb:c1:7e:2a:65:4e:30:89:9e:4c:d0: 8d:c7:fc:c0:c3:cb:41:bf:18:fb:b9:a5:a8:00:b3: 6c:7f:2d:9f:c3:43:8e:35:aa:b6:79:61:f9:66:34: 2a:e0:41:a4:1e:f1:6e:cb:0a:60:2f:91:3d:db:e8: 11:83:0d:1b:14:86:b6:95:7f:f0:e1:b6:db:27:22: f6:f2:a6:7b:94:0b:ff:6e:89:70:ac:51:b8:4b:b3: 52:e4:6f:c4:78:94:59:3d:df:e1:88:6b:b8:97:c8: e0:0a:fa:b8:32:ff:e1:9d:79:4b:58:62:19:f2:67: 5e:2a:8c:69:b4:8c:9c:f3:82:dd:82:ae:b6:a4:51: c1:88:7e:7e:8a:0d:ca:12:c3:94:53:c9:2e:10:fc: 1a:31:1a:48:f6:5e:ce:6e:83:2c:a9:c3:46:60:28: 27:ab:4f:9e:5f:0b:85:a0:04:24:53:c4:ff:b5:30: 29:b7:64:1c:35:3b:1d:a5:fb:16:7b:2e:6b:24:b7: 46:9c:c9:e4:54:f5:0f:30:98:c7:9c:5b:20:a9:b0: 02:6c:f3:5d:72:f0:7f:fa:db:cb:b6:da:00:17:dc: 3a:05:0b:3c:57:54:d1:94:da:22:ef:fe:ad:cf:42: ad:37:28:e8:f8:74:63:c0:bd:f4:4e:83:27:40:50: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:92:36:16:66:8C:34:40:C0:C2:F3:C7:E5:9D:CD:6D:8F:DC:AC X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:40:a4:b3:fe:8e:af:31:f2:bd:ed:5e:45:36:b9:11:b7:f3: 55:2b:d8:30:fe:0f:e9:d7:84:02:5c:81:00:40:0b:67:1a:1c: a4:1f:e9:d2:88:ad:93:ff:6f:ec:12:73:70:79:82:9e:b3:19: 31:8b:dc:84:db:11:9f:1c:11:47:38:d7:bd:22:4c:b9:f5:85: f1:06:9d:46:fd:93:26:a2:f0:4d:c2:7c:35:8c:59:50:7b:96: b8:6d:10:5f:6e:d5:03:3a:a7:58:34:69:ef:75:5b:23:12:da: 8c:79:4e:3e:eb:91:aa:d3:f8:cf:06:3c:9f:08:e3:ff:13:f9: bb:63:c8:09:79:48:68:e5:fe:a5:16:3c:cf:1b:25:2f:b7:d4: 1a:84:b6:3c:a7:92:9a:d4:99:69:81:38:93:f9:e6:43:4a:43: 56:ed:18:e9:1d:c2:48:50:a7:7e:64:52:30:c6:a9:60:7a:25: da:af:ad:dd:c8:5f:92:ec:d8:ef:90:7d:13:cb:7d:59:d8:9a: f9:a9:a9:96:e3:fd:5d:ba:61:77:99:dd:55:e5:4f:76:91:c3: 33:34:9e:e1:71:15:d6:52:f0:76:56:62:5c:ed:41:e5:54:e4: a7:4c:7f:cb:b1:7f:ce:d1:65:24:1f:74:d5:76:ca:98:61:3f: 2a:b4:e4:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDlDMTExMC8GA1UEBRMoQTQxNTA0RTY2RTMxNDQzNDg2MjUxOTA2OTZFMEU4OEZG QjFGNTI3MDAeFw0yNTA1MzEwNjQwMjJaFw0yNTA2MDcwNjQwMjJaMBgxFjAUBgNV BAMTDTY4M2FhNDU2LTdmNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDltcHLwX4qZU4wiZ5M0I3H/MDDy0G/GPu5pagAs2x/LZ/DQ441qrZ5YflmNCrg QaQe8W7LCmAvkT3b6BGDDRsUhraVf/DhttsnIvbypnuUC/9uiXCsUbhLs1Lkb8R4 lFk93+GIa7iXyOAK+rgy/+GdeUtYYhnyZ14qjGm0jJzzgt2CrrakUcGIfn6KDcoS w5RTyS4Q/BoxGkj2Xs5ugyypw0ZgKCerT55fC4WgBCRTxP+1MCm3ZBw1Ox2l+xZ7 Lmskt0acyeRU9Q8wmMecWyCpsAJs811y8H/628u22gAX3DoFCzxXVNGU2iLv/q3P Qq03KOj4dGPAvfROgydAUDgNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWsKSNhZm jDRAwMLzx+WdzW2P3KwwHwYDVR0jBBgwFoAUpBUE5m4xRDSGJRkGluDoj/sfUnAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOUMxLzMwODA1Q0FBQUQ3 MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJVRTVtNHhSRFNHSlJrR2x1RG9qX3NmVW5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OUMxLzMwODA1Q0FBQUQ3MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRT R0pSa0dsdURval9zZlVuQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALpApLP+jq8x8r3tXkU2uRG381Ur2DD+D+nXhAJcgQBAC2caHKQf6dKI rZP/b+wSc3B5gp6zGTGL3ITbEZ8cEUc4170iTLn1hfEGnUb9kyai8E3CfDWMWVB7 lrhtEF9u1QM6p1g0ae91WyMS2ox5Tj7rkarT+M8GPJ8I4/8T+btjyAl5SGjl/qUW PM8bJS+31BqEtjynkprUmWmBOJP55kNKQ1btGOkdwkhQp35kUjDGqWB6Jdqvrd3I X5Ls2O+QfRPLfVnYmvmpqZbj/V26YXeZ3VXlT3aRwzM0nuFxFdZS8HZWYlztQeVU 5KdMf8uxf87RZSQfdNV2yphhPyq05PE= -----END CERTIFICATE-----Generated at Sat May 31 14:58:06 2025 by rpki-client