$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: 9VnlCkN62joop6RNRze0xC1JMy78n5mrEM9lPVrUEfE= Subject key identifier: 52:FE:BA:32:80:28:0C:AE:DB:DE:58:87:67:14:B6:93:B2:C8:43:A2 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: A5 Signing time: Tue 03 Jun 2025 05:59:22 +0000 Manifest this update: Tue 03 Jun 2025 05:59:21 +0000 Manifest next update: Tue 10 Jun 2025 05:59:21 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: g6RPmMjVKv3YMpO6yVPliyRpbVuxFf89VAE47vL+Au4=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Jun 3 05:59:21 2025 GMT Not After : Jun 10 05:59:21 2025 GMT Subject: CN=683e8f3a-e760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:f6:9b:23:cb:15:7d:5e:87:74:5d:8e:81: 93:68:73:c4:c5:e7:84:69:d9:84:5f:f6:55:9f:12: 1f:7f:2f:bc:a8:94:90:ca:f5:5e:4e:89:e7:ba:9d: b7:7b:1a:ab:eb:cc:fe:a6:4c:45:54:bd:24:7b:10: f9:5f:d8:3c:d7:d3:b3:9e:a3:50:31:39:bc:ad:b0: 36:0b:f2:be:6a:45:ba:c6:c6:8f:f4:a5:8c:9b:85: 51:a0:f3:73:4e:9a:fd:54:47:ab:b8:cd:66:69:29: 69:ef:ce:84:88:6f:ce:d6:59:11:4b:f9:64:ed:db: d2:a3:89:dc:22:03:e4:3a:47:1c:1f:68:e3:66:08: 8c:59:29:2a:d9:6c:b6:bf:3f:97:b0:bf:e6:da:a4: 50:55:6e:51:09:d1:10:7e:a9:5d:98:93:ee:2d:1a: 4e:90:00:f2:e4:d5:13:ff:8a:07:34:46:f7:6f:2f: 8c:e9:de:45:24:86:72:b0:77:9d:9c:98:8f:94:52: ba:03:89:2b:65:ca:52:0e:8d:24:79:05:3b:7b:2a: 31:39:ca:50:66:55:d7:96:37:82:98:7a:36:58:86: b6:5e:50:73:52:27:fe:e8:16:57:f6:9e:44:2b:01: ad:53:6a:3c:ff:17:2a:0f:06:0a:51:82:2f:e0:ba: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:BA:32:80:28:0C:AE:DB:DE:58:87:67:14:B6:93:B2:C8:43:A2 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:71:88:59:eb:57:25:a6:25:2f:b6:5d:0e:f7:2c:34:4e: ef:28:96:10:8b:8b:a4:d5:d6:12:f1:3a:d0:54:1e:70:89:c1: a1:d8:77:5d:72:14:b9:05:51:22:b7:8a:28:3f:d3:95:2f:2f: 34:2c:38:a9:da:1e:bd:6d:42:f7:6f:4a:3a:39:6f:7a:93:d3: 0c:e2:a9:36:26:09:b8:0a:5d:dc:41:73:86:31:45:6a:4f:23: 9d:80:8c:f6:15:63:08:e0:99:23:f7:f8:31:91:b2:46:87:45: 1c:07:de:80:2f:fd:e7:0d:d7:fd:7b:51:8f:e6:d6:52:3c:40: a7:68:1b:dd:b0:fc:cb:cd:2d:9c:d0:38:7f:91:92:ee:59:23: 7b:d2:a6:b2:eb:cb:24:fd:21:c4:93:21:86:48:0b:72:b4:32: b6:88:5b:e6:b8:26:39:ce:f2:26:6e:58:44:38:77:45:c5:9a: 41:48:75:b8:04:a0:00:78:b4:7f:0b:57:19:0a:ec:bb:bb:8f: 14:e8:76:bb:11:27:c2:25:92:9c:8b:42:5b:05:74:eb:ff:41: 08:ca:00:d9:a9:90:31:d1:15:92:ba:b2:d7:7c:6a:b4:9a:df: 8e:72:9e:30:42:55:98:ee:3b:06:28:1b:35:fb:21:2f:da:c6: a6:bb:0a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwNjAzMDU1OTIxWhcNMjUwNjEwMDU1OTIxWjAYMRYwFAYD VQQDEw02ODNlOGYzYS1lNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Iz2myPLFX1eh3RdjoGTaHPExeeEadmEX/ZVnxIffy+8qJSQyvVeTonnup23 exqr68z+pkxFVL0kexD5X9g819OznqNQMTm8rbA2C/K+akW6xsaP9KWMm4VRoPNz Tpr9VEeruM1maSlp786EiG/O1lkRS/lk7dvSo4ncIgPkOkccH2jjZgiMWSkq2Wy2 vz+XsL/m2qRQVW5RCdEQfqldmJPuLRpOkADy5NUT/4oHNEb3by+M6d5FJIZysHed nJiPlFK6A4krZcpSDo0keQU7eyoxOcpQZlXXljeCmHo2WIa2XlBzUif+6BZX9p5E KwGtU2o8/xcqDwYKUYIv4LoPHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL+ujKA KAyu295Yh2cUtpOyyEOiMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbD3GIWetXJaYlL7ZdDvcsNE7vKJYQi4uk1dYS8TrQVB5wicGh2Hdd chS5BVEit4ooP9OVLy80LDip2h69bUL3b0o6OW96k9MM4qk2Jgm4Cl3cQXOGMUVq TyOdgIz2FWMI4Jkj9/gxkbJGh0UcB96AL/3nDdf9e1GP5tZSPECnaBvdsPzLzS2c 0Dh/kZLuWSN70qay68sk/SHEkyGGSAtytDK2iFvmuCY5zvImblhEOHdFxZpBSHW4 BKAAeLR/C1cZCuy7u48U6Ha7ESfCJZKci0JbBXTr/0EIygDZqZAx0RWSurLXfGq0 mt+Ocp4wQlWY7jsGKBs1+yEv2samuwog -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:27 2025 by rpki-client