$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json) Hash identifier: x4fCTE2HOWNyRKYjECgZfBLieq77Y1YyufDe59cBp/E= Subject key identifier: 68:BE:49:89:19:A2:0A:F5:55:4C:C3:23:AE:17:65:FA:3A:84:61:13 Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft Manifest number: 0152 Signing time: Sat 31 May 2025 03:52:20 +0000 Manifest this update: Sat 31 May 2025 03:52:19 +0000 Manifest next update: Sat 07 Jun 2025 03:52:19 +0000 Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: luHYankX+yJuNSMeK36TFNk+yOK+u4YG2x2qZ8/xfqk=) 2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=) 3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: kNV7VPtOhVOV5sWtOMUE/oMw0hk3N1NsBatuZRoh3AE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Validity Not Before: May 31 03:52:19 2025 GMT Not After : Jun 7 03:52:19 2025 GMT Subject: CN=683a7cf4-e643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:30:fa:e3:35:11:e3:16:9c:12:1a:23:1b: 29:07:c2:8f:7d:3e:32:e5:9a:d8:93:89:f3:4c:fc: 68:32:e7:c8:08:34:7c:b9:41:29:63:2d:92:e1:5a: 82:63:87:47:77:fb:0a:19:e0:f6:6a:59:8c:08:c3: 67:52:05:08:bc:e6:dc:10:68:f7:2d:88:78:17:4b: 5b:bd:35:0e:bb:35:c6:de:a2:0c:bc:94:5d:32:65: 55:07:c8:00:ca:cc:94:8b:d2:21:8e:d4:1c:08:71: 03:08:ab:7b:ba:a4:e7:f2:78:50:7f:32:d8:53:48: fc:e7:df:c8:fb:af:c9:e9:77:a0:a9:2e:73:46:d7: 9b:ff:8b:fd:5e:f4:ff:1c:b9:1a:d6:45:ee:ed:1a: 42:5a:81:2a:7b:bf:94:12:bc:c6:ca:3a:41:29:42: 22:a0:eb:a1:56:26:56:40:7e:3b:d2:64:a8:e5:5b: 1b:0e:d8:b1:d5:b4:df:de:8b:b5:cd:c3:d2:4a:e4: 73:df:cd:d8:bb:49:e7:fe:fa:fd:04:2c:f6:1f:8a: f2:81:1b:fb:64:72:c9:4e:41:af:c0:47:f6:a6:4d: c7:01:77:94:c4:fc:df:74:51:f6:0c:17:59:fc:80: 74:7b:91:02:b8:07:9d:78:dd:c8:be:1e:c1:41:5b: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:49:89:19:A2:0A:F5:55:4C:C3:23:AE:17:65:FA:3A:84:61:13 X509v3 Authority Key Identifier: keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:26:85:a8:d6:01:be:78:19:15:ec:12:5a:96:20:02:9c:8d: 70:c6:44:eb:73:dc:ef:89:76:62:6a:02:82:92:c2:92:46:71: c3:51:44:ed:f8:f6:a8:a2:78:8b:d6:a4:a6:69:6b:e1:f0:5c: 0c:64:be:9f:c7:3d:8e:06:73:5e:48:cf:98:e4:f0:fe:f9:62: df:29:03:69:e6:a9:f7:d6:b7:99:12:43:bd:a2:d5:6b:81:ca: 06:0c:09:38:91:b5:14:10:e7:3d:65:8a:83:86:5a:f4:56:8f: e7:87:10:bf:44:c1:4b:68:1d:28:e4:4b:8b:df:e5:14:21:51: 9c:0e:96:32:6c:cc:9f:9c:26:1a:fc:ae:6a:69:b4:13:68:50: 04:03:a2:da:3e:90:d4:56:47:9a:56:f7:71:cc:11:97:be:68: 88:67:a7:73:4b:c8:ba:e3:49:19:17:b0:ca:0b:60:94:6e:ea: a9:ab:54:0b:c9:8f:be:80:4c:02:e3:c3:cb:b3:8d:e1:a3:de: 52:62:54:a8:94:1b:c3:17:a3:8e:55:a9:96:9f:71:ea:6a:09: 9e:80:78:f4:02:d1:f9:cd:6e:a0:d7:58:75:4e:48:1b:fd:1e: a1:41:d6:4e:6d:64:2a:6e:1d:99:f4:0c:56:c1:9a:a9:a1:9b: c7:bf:a8:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3NjMxMTAvBgNVBAUTKEE1NUQzRkY4QTg1QkUxMDNCNTgzNzUwRDc3OTQzRjQ3 Qzk3NkY1QjMwHhcNMjUwNTMxMDM1MjE5WhcNMjUwNjA3MDM1MjE5WjAYMRYwFAYD VQQDEw02ODNhN2NmNC1lNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFAw+uM1EeMWnBIaIxspB8KPfT4y5ZrYk4nzTPxoMufICDR8uUEpYy2S4VqC Y4dHd/sKGeD2almMCMNnUgUIvObcEGj3LYh4F0tbvTUOuzXG3qIMvJRdMmVVB8gA ysyUi9IhjtQcCHEDCKt7uqTn8nhQfzLYU0j859/I+6/J6XegqS5zRteb/4v9XvT/ HLka1kXu7RpCWoEqe7+UErzGyjpBKUIioOuhViZWQH470mSo5VsbDtix1bTf3ou1 zcPSSuRz383Yu0nn/vr9BCz2H4rygRv7ZHLJTkGvwEf2pk3HAXeUxPzfdFH2DBdZ /IB0e5ECuAedeN3Ivh7BQVtXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi+SYkZ ogr1VUzDI64XZfo6hGETMB8GA1UdIwQYMBaAFKVdP/ioW+EDtYN1DXeUP0fJdvWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTc2My83MUY3OUMxQzQy NDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRRTzFnM1VOZDVRX1I4bDI5 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWMF8tS2hiNFFPMWczVU5kNVFfUjhsMjliTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTc2My83MUY3OUMxQzQyNDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRR TzFnM1VOZDVRX1I4bDI5Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVJoWo1gG+eBkV7BJaliACnI1wxkTrc9zviXZiagKCksKSRnHDUUTt +PaooniL1qSmaWvh8FwMZL6fxz2OBnNeSM+Y5PD++WLfKQNp5qn31reZEkO9otVr gcoGDAk4kbUUEOc9ZYqDhlr0Vo/nhxC/RMFLaB0o5EuL3+UUIVGcDpYybMyfnCYa /K5qabQTaFAEA6LaPpDUVkeaVvdxzBGXvmiIZ6dzS8i640kZF7DKC2CUbuqpq1QL yY++gEwC48PLs43ho95SYlSolBvDF6OOVamWn3HqagmegHj0AtH5zW6g11h1Tkgb /R6hQdZObWQqbh2Z9AxWwZqpoZvHv6jy -----END CERTIFICATE-----Generated at Sat May 31 17:45:01 2025 by rpki-client