$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: sAweWdo0bIKm3bs3fe53JZ3rb7JOz1CDTyMlhY87zwU= Subject key identifier: 1E:06:88:7D:F0:0D:A0:8E:79:66:46:D1:55:AD:C3:2C:26:9A:34:75 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 01EA Signing time: Sat 31 May 2025 02:17:35 +0000 Manifest this update: Sat 31 May 2025 02:17:35 +0000 Manifest next update: Sat 07 Jun 2025 02:17:35 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: rVGAlnubVmFjFizKkM1/FX9HYcVqQfWYQmuNfa6QiYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: May 31 02:17:35 2025 GMT Not After : Jun 7 02:17:35 2025 GMT Subject: CN=683a66bf-daee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:4e:c3:ac:ac:5c:f5:83:57:f3:6e:18:72: 46:92:f8:93:9e:39:ad:bb:fb:67:06:04:70:09:55: 01:fe:c3:ab:53:9d:d7:12:a9:f9:2f:e6:ff:1a:ae: 2d:3a:2d:f5:1c:27:ef:16:88:d3:d2:10:6c:81:88: 51:86:d2:4c:ff:4b:c9:14:25:d6:84:df:63:ae:df: 9c:1c:86:34:d1:c0:89:7d:5f:13:77:aa:b9:15:1d: 00:5c:e3:b2:d6:2d:fb:fb:f6:a8:6e:41:2a:0d:91: 87:b7:d6:fc:e3:58:37:84:3e:01:74:a3:a5:c2:ae: 54:88:f1:06:f1:32:fc:4b:ec:70:c0:82:0b:f9:40: fc:f4:f8:89:d2:5a:c2:1b:cb:05:94:8a:43:45:46: 52:4d:75:85:af:f3:9d:20:2c:4a:e3:68:5d:ac:a9: fe:2f:77:b6:06:3b:7f:64:b3:24:25:b9:97:91:4c: 61:5f:14:f2:67:3d:5e:87:6d:68:35:9c:5a:8d:6e: 7b:40:07:8e:af:a9:e2:1b:c3:fb:aa:80:61:78:68: 55:4f:d4:e2:2a:2d:0c:8d:3c:71:74:7b:da:9a:6f: 52:b8:d1:04:bb:1c:a1:87:56:31:37:ac:57:92:20: 8c:04:d6:99:86:f5:fa:1a:76:39:b7:bc:2d:9c:d2: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:88:7D:F0:0D:A0:8E:79:66:46:D1:55:AD:C3:2C:26:9A:34:75 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fb:0d:c8:7f:42:03:ca:d0:97:0e:ae:ba:42:df:f7:dd:2a: 09:d9:f8:cb:72:dd:d9:84:c8:48:a1:c5:c9:37:2c:8f:57:71: 0c:ed:92:c2:bb:80:e1:7e:42:d5:a9:98:66:26:ca:6e:08:84: af:72:23:f3:03:77:ac:26:0f:cf:ca:50:3c:06:dc:07:59:23: 24:75:59:31:3d:ea:79:b6:c0:51:a8:bf:2f:7a:78:db:98:32: 36:5f:01:32:05:5c:68:20:e2:df:cd:34:e5:06:16:5b:f5:ae: 4a:fc:0a:19:01:f9:5c:bf:9d:9c:9d:ee:68:ec:a7:e0:64:a9: 10:0c:c3:3b:e0:29:01:57:1b:25:39:2d:60:5e:a5:f2:1c:55: 46:61:40:47:85:09:eb:82:f0:a3:f3:6c:60:c3:6c:ef:45:15: b2:3d:79:27:5a:bf:e3:52:46:4c:25:2f:db:f1:66:8f:45:e3: 99:c0:4a:d0:da:98:ef:cd:b4:f5:e1:85:26:cf:18:c8:b9:42: 10:7a:74:31:fe:16:96:a6:44:77:c4:d0:4f:c4:bb:93:05:6d: 02:6e:8b:67:ec:91:3d:87:70:dc:9b:c6:13:3c:23:49:6e:49: 7a:92:58:c5:0f:3f:1a:43:4f:34:9b:77:3b:2e:8c:91:ae:68: b0:1e:00:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUwNTMxMDIxNzM1WhcNMjUwNjA3MDIxNzM1WjAYMRYwFAYD VQQDEw02ODNhNjZiZi1kYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeZOw6ysXPWDV/NuGHJGkviTnjmtu/tnBgRwCVUB/sOrU53XEqn5L+b/Gq4t Oi31HCfvFojT0hBsgYhRhtJM/0vJFCXWhN9jrt+cHIY00cCJfV8Td6q5FR0AXOOy 1i37+/aobkEqDZGHt9b841g3hD4BdKOlwq5UiPEG8TL8S+xwwIIL+UD89PiJ0lrC G8sFlIpDRUZSTXWFr/OdICxK42hdrKn+L3e2Bjt/ZLMkJbmXkUxhXxTyZz1eh21o NZxajW57QAeOr6niG8P7qoBheGhVT9TiKi0MjTxxdHvamm9SuNEEuxyhh1YxN6xX kiCMBNaZhvX6GnY5t7wtnNL1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4GiH3w DaCOeWZG0VWtwywmmjR1MB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd+w3If0IDytCXDq66Qt/33SoJ2fjLct3ZhMhIocXJNyyPV3EM7ZLC u4DhfkLVqZhmJspuCISvciPzA3esJg/PylA8BtwHWSMkdVkxPep5tsBRqL8venjb mDI2XwEyBVxoIOLfzTTlBhZb9a5K/AoZAflcv52cne5o7KfgZKkQDMM74CkBVxsl OS1gXqXyHFVGYUBHhQnrgvCj82xgw2zvRRWyPXknWr/jUkZMJS/b8WaPReOZwErQ 2pjvzbT14YUmzxjIuUIQenQx/haWpkR3xNBPxLuTBW0Cbotn7JE9h3Dcm8YTPCNJ bkl6kljFDz8aQ080m3c7LoyRrmiwHgAC -----END CERTIFICATE-----Generated at Sat May 31 16:52:15 2025 by rpki-client