$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: 35ZL0Z6yWgSnZ1kk/Nas9AOM2z6wxG4L6JZ19h7SlH0= Subject key identifier: 9C:0A:18:58:64:F1:F8:84:72:9C:21:98:48:D8:08:07:C4:C1:35:7C Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 34D3 Signing time: Mon 02 Jun 2025 14:23:38 +0000 Manifest this update: Mon 02 Jun 2025 14:23:37 +0000 Manifest next update: Mon 09 Jun 2025 14:23:37 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: /PALOekZDdySR8JR6nS3N97Y5qM/uFKJMc1aOB4UjvE=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: Tkov50IGnDt1hyq9qJWuipAiAibSfj8yyNwvUl9JT4c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: WjrEbNUJ4DVarxA0iyhxVHDDaIrwbJkyI1tAP4DGJzI=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: 4sO+Kf2WaaDXEC/1X4RERNKVRvAzlJHXuYZYU7/KNho=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: klKJYHTI4INqcBgBGuobupIA1CcWLSCCQBLrEH0i7XE=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: eRgET6FlBHt/Mo7JjkKJdhZ1XnrQ5sT4pK+CsAVXRfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Jun 2 14:23:37 2025 GMT Not After : Jun 9 14:23:37 2025 GMT Subject: CN=683db3e9-d36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:18:21:c6:20:70:86:1f:c6:b8:a0:af:43: 11:f1:c4:d4:78:fb:2e:1d:e2:2e:0c:c7:ae:35:8f: 0a:67:e3:e9:6f:f3:70:af:65:ae:5c:b6:86:bc:83: 36:b5:17:23:97:ea:2c:62:e2:95:7b:8d:12:ec:ea: 1c:09:ff:97:01:11:a6:a1:ca:55:1e:8d:8b:e2:f7: ee:a1:67:f4:03:a7:55:c4:36:e5:da:b3:93:72:fe: 4a:7e:18:66:1e:dc:48:73:5e:01:06:c5:aa:f1:f0: fe:e7:80:f2:29:a1:40:e9:28:2c:dc:df:67:b3:a5: 11:4a:3e:86:80:1b:27:af:4e:3a:6f:6d:51:50:05: 57:35:2b:a2:78:26:6f:7d:52:2f:dc:60:a3:fb:07: 0b:68:fe:a9:fa:04:40:26:ff:5c:d2:67:2a:f2:ea: e2:d3:37:85:4b:2b:26:0a:01:00:d3:2a:c0:78:c2: 57:c4:b6:9a:00:b5:8c:51:2c:f1:fd:00:47:31:95: 5a:0f:15:b4:d8:83:6b:c0:42:aa:3b:db:fa:32:2d: 64:b7:cd:aa:7b:78:23:40:1c:65:1a:1e:d6:0b:6c: d7:be:26:07:e6:a2:ff:c6:d9:73:a9:53:e5:cd:88: 92:23:ef:e5:78:18:cc:b1:aa:41:ff:24:e8:87:6d: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0A:18:58:64:F1:F8:84:72:9C:21:98:48:D8:08:07:C4:C1:35:7C X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7c:d1:47:3a:f0:4e:2a:64:d7:79:64:1b:47:2e:e6:3c:8f: 5a:ed:e8:25:07:fb:a7:5d:25:ed:45:dc:c3:ee:2e:b3:83:70: 3b:80:b3:af:79:be:be:53:51:a3:6c:8d:3c:be:b4:68:00:8f: 0e:d0:91:47:52:69:10:a0:d5:58:b3:78:58:d3:ff:a2:7c:d6: bc:54:4c:87:8e:aa:8a:8c:a5:5e:d7:5b:a9:70:37:c5:b0:08: ed:f9:ad:ac:a5:10:5e:9d:d0:a4:f8:4c:e8:76:be:08:98:9b: b2:a2:6d:3e:b1:aa:a8:b2:7f:40:3b:09:ce:f5:89:47:ff:d0: 14:68:45:33:3a:e4:73:2a:d0:7e:6a:c0:d1:07:2f:91:34:3f: 50:43:9e:59:e4:ff:0a:6a:79:95:7d:19:23:21:8a:4b:a6:b2: 8d:4c:65:8f:75:56:0a:b8:9d:73:d7:28:30:2b:c0:3f:25:9d: 73:66:34:81:e9:7a:80:7e:0d:6e:a2:8c:42:7a:07:05:51:d4: da:78:c1:16:55:dd:43:e3:b0:05:74:16:54:16:78:2b:92:40: 8f:64:c2:da:f4:1f:aa:78:c9:33:90:b3:f0:c2:9f:0a:c3:e2: 94:db:8c:9c:dc:b1:67:18:9c:73:54:d8:a8:35:34:d9:61:2b: e2:9e:8b:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwNjAyMTQyMzM3WhcNMjUwNjA5MTQyMzM3WjAYMRYwFAYD VQQDEw02ODNkYjNlOS1kMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjgYIcYgcIYfxrigr0MR8cTUePsuHeIuDMeuNY8KZ+Ppb/Nwr2WuXLaGvIM2 tRcjl+osYuKVe40S7OocCf+XARGmocpVHo2L4vfuoWf0A6dVxDbl2rOTcv5Kfhhm HtxIc14BBsWq8fD+54DyKaFA6Sgs3N9ns6URSj6GgBsnr046b21RUAVXNSuieCZv fVIv3GCj+wcLaP6p+gRAJv9c0mcq8uri0zeFSysmCgEA0yrAeMJXxLaaALWMUSzx /QBHMZVaDxW02INrwEKqO9v6Mi1kt82qe3gjQBxlGh7WC2zXviYH5qL/xtlzqVPl zYiSI+/leBjMsapB/yToh20gHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwKGFhk 8fiEcpwhmEjYCAfEwTV8MB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+fNFHOvBOKmTXeWQbRy7mPI9a7eglB/unXSXtRdzD7i6zg3A7gLOv eb6+U1GjbI08vrRoAI8O0JFHUmkQoNVYs3hY0/+ifNa8VEyHjqqKjKVe11upcDfF sAjt+a2spRBendCk+Ezodr4ImJuyom0+saqosn9AOwnO9YlH/9AUaEUzOuRzKtB+ asDRBy+RND9QQ55Z5P8KanmVfRkjIYpLprKNTGWPdVYKuJ1z1ygwK8A/JZ1zZjSB 6XqAfg1uooxCegcFUdTaeMEWVd1D47AFdBZUFngrkkCPZMLa9B+qeMkzkLPwwp8K w+KU24yc3LFnGJxzVNioNTTZYSvinou+ -----END CERTIFICATE-----Generated at Wed Jun 4 13:29:46 2025 by rpki-client