$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: r4uVOnKGu59NZIC/fRQF+Aq0x49ZSC1evkcDQQ2DaY4= Subject key identifier: 65:97:DF:51:E9:7A:B0:09:23:97:2D:98:97:7C:3B:C4:A3:93:65:13 Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 09D6 Signing time: Fri 30 May 2025 20:08:50 +0000 Manifest this update: Fri 30 May 2025 20:08:49 +0000 Manifest next update: Fri 06 Jun 2025 20:08:49 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: crdBJnRVDiDoUpwSlKnWLsExWdk2L5tplMsEmfeeVGo=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: May 30 20:08:49 2025 GMT Not After : Jun 6 20:08:49 2025 GMT Subject: CN=683a1051-5f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:13:9d:a3:5e:aa:bc:6f:67:cc:5c:82:82: ff:08:68:e2:3f:2d:3a:17:3d:35:e6:27:09:0a:d8: b9:e9:08:1a:d5:ba:04:27:cd:81:6d:f6:76:a5:98: b6:d4:35:06:8f:21:9a:e8:ae:a9:53:88:5c:b2:d6: d2:a4:de:1d:e0:b5:e8:38:13:0b:91:02:8e:de:4a: 6e:d3:4e:b7:d3:4f:bc:3a:d2:81:e9:e3:b9:75:6f: a8:d6:3e:92:07:a0:91:8f:85:64:fa:91:4c:7c:01: 85:66:85:d4:59:af:2e:ba:a4:45:c8:a5:41:fe:9c: ac:fd:e1:6b:4d:a2:c4:97:30:6b:50:17:64:8a:28: f8:42:56:2e:88:3f:c4:21:5c:5e:a8:47:9e:38:6c: d9:d2:17:22:8b:68:f9:ef:26:24:1e:5c:9f:73:c0: 85:7c:19:39:f3:6d:74:43:b0:71:2b:ca:a8:bb:be: 31:a1:3a:b9:41:8c:60:5b:35:79:87:22:8a:68:7f: 0f:62:20:68:a8:d1:a5:e3:35:4d:6a:65:f9:f1:9e: 21:a5:cc:2e:7f:89:3b:a8:70:d5:d1:9a:b7:f0:0e: f2:70:d5:4c:d0:7f:51:1e:5e:41:be:61:c4:65:bb: a7:7c:6e:91:6e:ba:17:2f:59:9a:18:05:ad:fb:80: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:DF:51:E9:7A:B0:09:23:97:2D:98:97:7C:3B:C4:A3:93:65:13 X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0a:9f:e2:94:8c:6a:3f:77:9a:56:2f:bf:06:b1:e2:38:70: 40:cc:f7:2e:8a:18:bb:c8:46:55:71:61:d8:be:96:70:8b:cd: 9c:cf:b8:53:cb:35:46:2e:f7:bb:fd:ef:55:88:b1:35:72:53: 89:91:02:3f:1c:d4:cf:31:69:1d:c7:2a:fe:71:e3:22:80:61: 41:cd:b2:82:e9:70:2a:90:1a:a2:91:f2:da:89:bb:84:0f:17: 2f:9d:45:83:a3:41:87:92:12:0c:00:4b:96:40:85:ac:7f:89: 5d:fe:94:35:d0:f4:13:e8:b9:c4:f0:9b:2a:01:8a:4b:4e:02: eb:21:79:fd:11:98:28:06:e0:4c:ea:b2:a1:ff:39:3a:02:c8: 73:66:f4:6f:fe:7e:1b:f3:bb:e3:c8:05:7a:f2:6e:d0:af:61: 0a:5c:b8:c2:40:b0:5b:c0:eb:d0:d9:59:ce:ed:09:75:60:5c: d8:c8:18:90:07:ed:02:bc:49:2f:ef:45:f8:7b:fd:8e:56:5d: 90:93:2d:4a:d6:cd:a3:83:44:02:ed:73:2e:4c:1e:00:54:d0: e2:3f:d3:39:9c:c2:8a:43:8a:2a:6e:93:07:d5:db:38:81:ca: 94:a5:bc:8a:31:65:0f:7c:4b:2d:e8:1a:98:2e:18:6a:b0:d0: 0a:5b:13:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUwNTMwMjAwODQ5WhcNMjUwNjA2MjAwODQ5WjAYMRYwFAYD VQQDEw02ODNhMTA1MS01ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dQTnaNeqrxvZ8xcgoL/CGjiPy06Fz015icJCti56Qga1boEJ82BbfZ2pZi2 1DUGjyGa6K6pU4hcstbSpN4d4LXoOBMLkQKO3kpu006300+8OtKB6eO5dW+o1j6S B6CRj4Vk+pFMfAGFZoXUWa8uuqRFyKVB/pys/eFrTaLElzBrUBdkiij4QlYuiD/E IVxeqEeeOGzZ0hcii2j57yYkHlyfc8CFfBk58210Q7BxK8qou74xoTq5QYxgWzV5 hyKKaH8PYiBoqNGl4zVNamX58Z4hpcwuf4k7qHDV0Zq38A7ycNVM0H9RHl5BvmHE ZbunfG6RbroXL1maGAWt+4DitQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWX31Hp erAJI5ctmJd8O8Sjk2UTMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeCp/ilIxqP3eaVi+/BrHiOHBAzPcuihi7yEZVcWHYvpZwi82cz7hT yzVGLve7/e9ViLE1clOJkQI/HNTPMWkdxyr+ceMigGFBzbKC6XAqkBqikfLaibuE DxcvnUWDo0GHkhIMAEuWQIWsf4ld/pQ10PQT6LnE8JsqAYpLTgLrIXn9EZgoBuBM 6rKh/zk6AshzZvRv/n4b87vjyAV68m7Qr2EKXLjCQLBbwOvQ2VnO7Ql1YFzYyBiQ B+0CvEkv70X4e/2OVl2Qky1K1s2jg0QC7XMuTB4AVNDiP9M5nMKKQ4oqbpMH1ds4 gcqUpbyKMWUPfEst6BqYLhhqsNAKWxON -----END CERTIFICATE-----Generated at Sat May 31 17:44:12 2025 by rpki-client