$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft File: PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json) Hash identifier: apv71UmKSiXzJhN+Z27rfZNRgJsEasfy6K4ejq865Pw= Subject key identifier: 7E:24:9B:92:84:2F:5C:1C:52:32:BD:09:54:39:53:20:61:9E:28:6A Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 0934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft Manifest number: 090B Signing time: Fri 30 May 2025 20:38:35 +0000 Manifest this update: Fri 30 May 2025 20:38:34 +0000 Manifest next update: Fri 06 Jun 2025 20:38:34 +0000 Files and hashes: 1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: 2cP6SxBOs3+JN+zp+QyQw5E3fgYFgow6Fa8PaRwPXWA=) 2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: WXRoqSuJ7ylbw7K72AAOsaJLTW5zfW38lPIwxiTLRCE=) 3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: May 30 20:38:34 2025 GMT Not After : Jun 6 20:38:34 2025 GMT Subject: CN=683a174a-f8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:d2:f9:fd:bd:6e:e6:8c:1a:9b:1e:b2:f0: d9:f0:ed:47:64:96:19:c9:b6:b3:b4:a3:7b:88:c2: 1a:33:ca:a8:ff:0a:10:30:cc:ea:b5:28:95:5e:5c: 80:94:56:e4:2d:7c:4b:79:0e:5c:77:b0:3a:96:37: 4f:98:2a:2c:c5:a9:29:ce:a2:8e:6b:ae:6f:ca:c2: b6:7c:12:44:cd:60:72:71:1e:70:ae:da:e3:c4:83: 02:82:a8:6e:5e:9e:55:c0:8e:da:86:3a:f8:31:60: 9c:23:49:8d:01:08:22:c9:3e:c6:57:90:f3:e3:9c: 10:1e:7d:e8:2b:1f:e4:df:04:6b:e1:d4:c7:e8:5a: 3e:70:65:6b:07:2d:a9:2c:21:9f:a7:ee:f1:01:15: 33:c3:bc:b4:3b:5a:71:b5:53:e9:e3:b2:8a:27:24: 56:7f:a4:aa:18:df:5c:61:c0:97:77:72:6e:b3:2f: d8:96:20:62:0a:08:05:34:b1:c1:1f:ce:24:c2:84: f3:6c:df:5a:5a:36:ca:c2:c1:77:92:6f:36:ab:6d: 8c:86:36:46:23:df:44:bb:cf:5f:46:08:a2:39:04: 4d:ff:48:05:93:b1:b1:56:d0:43:fd:47:83:b4:34: ad:14:50:ab:2d:24:a9:80:93:91:06:1f:de:1f:f4: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:9B:92:84:2F:5C:1C:52:32:BD:09:54:39:53:20:61:9E:28:6A X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:4c:5f:97:b5:ef:da:9e:1f:43:75:8f:62:74:27:80:42: 03:da:b8:35:2b:f3:fc:6a:54:cc:b6:42:ea:57:31:20:f0:13: 33:55:f3:47:49:8e:68:4d:ee:53:c2:ec:46:1f:e2:8c:96:32: 3e:80:fc:bc:9c:d7:0b:90:ff:6c:ca:96:b2:9d:9a:be:51:66: 69:98:f8:e9:02:9d:fc:cf:a3:d5:63:c9:8d:4c:d2:6e:ef:6d: e8:41:f9:22:be:63:82:d2:03:57:84:1e:6a:1a:20:b2:d7:67: 5f:c1:6a:14:5e:bd:d2:5e:0a:cf:4e:9c:32:1f:18:91:58:7c: ef:7c:d6:6f:a0:c8:f2:a7:b6:85:22:2b:a3:05:63:71:41:c1: bb:81:41:b8:e4:49:3b:ac:67:5b:a6:d2:a9:47:af:a6:31:10: 34:f8:2e:bf:61:a3:2a:61:fe:98:8f:3a:33:44:74:3b:79:b1: 30:2f:b0:07:24:3e:77:6e:6e:9f:36:fa:2d:92:7c:c7:8e:21: 0e:c9:84:01:57:7e:d9:2b:ce:ae:f2:3d:15:0a:72:df:4d:09: 65:c5:93:99:68:9e:ab:b1:b5:fe:53:53:96:4a:b6:4a:66:8a: 57:f2:91:fb:f2:eb:f0:da:ff:8a:7f:fb:f1:e9:53:10:ea:6f: ce:9f:60:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjUwNTMwMjAzODM0WhcNMjUwNjA2MjAzODM0WjAYMRYwFAYD VQQDEw02ODNhMTc0YS1mOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfDS+f29buaMGpsesvDZ8O1HZJYZybaztKN7iMIaM8qo/woQMMzqtSiVXlyA lFbkLXxLeQ5cd7A6ljdPmCosxakpzqKOa65vysK2fBJEzWBycR5wrtrjxIMCgqhu Xp5VwI7ahjr4MWCcI0mNAQgiyT7GV5Dz45wQHn3oKx/k3wRr4dTH6Fo+cGVrBy2p LCGfp+7xARUzw7y0O1pxtVPp47KKJyRWf6SqGN9cYcCXd3Jusy/YliBiCggFNLHB H84kwoTzbN9aWjbKwsF3km82q22MhjZGI99Eu89fRgiiOQRN/0gFk7GxVtBD/UeD tDStFFCrLSSpgJORBh/eH/QAzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4km5KE L1wcUjK9CVQ5UyBhnihqMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE5MC9DMzczMDBFOEFFMTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1 a2x1N3ZjWVRLeEtYWGJTbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw70xfl7Xv2p4fQ3WPYnQngEID2rg1K/P8alTMtkLqVzEg8BMzVfNH SY5oTe5TwuxGH+KMljI+gPy8nNcLkP9sypaynZq+UWZpmPjpAp38z6PVY8mNTNJu 723oQfkivmOC0gNXhB5qGiCy12dfwWoUXr3SXgrPTpwyHxiRWHzvfNZvoMjyp7aF IiujBWNxQcG7gUG45Ek7rGdbptKpR6+mMRA0+C6/YaMqYf6YjzozRHQ7ebEwL7AH JD53bm6fNvotknzHjiEOyYQBV37ZK86u8j0VCnLfTQllxZOZaJ6rsbX+U1OWSrZK ZopX8pH78uvw2v+Kf/vx6VMQ6m/On2B3 -----END CERTIFICATE-----Generated at Sat May 31 17:32:52 2025 by rpki-client