$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: rgYY1m9W0gWPRLR2GdkugzjZ8WJBH4eLGhTD7SV6VBk= Subject key identifier: 72:C7:DC:BA:E1:D1:D4:1B:81:B6:81:BC:55:9D:7B:61:29:33:DB:6A Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02A9 Signing time: Sat 31 May 2025 01:41:33 +0000 Manifest this update: Sat 31 May 2025 01:41:32 +0000 Manifest next update: Sat 07 Jun 2025 01:41:32 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: QoxCd1gb1tcdsL8AWug/nTqinbWKhnPv5RyQt1/qigQ=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: May 31 01:41:32 2025 GMT Not After : Jun 7 01:41:32 2025 GMT Subject: CN=683a5e4d-3247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:c8:7e:3b:c3:ad:fb:e0:57:b5:0a:84:df: 1e:16:02:5d:17:9a:c8:0a:66:90:4b:01:e8:ee:23: 63:e2:df:ac:a5:2c:8d:0c:00:dc:e1:22:70:3b:2e: 48:7e:b3:06:a6:c3:ea:89:67:13:a9:f9:15:d2:bd: 5a:f6:d9:c9:90:af:0a:47:53:43:92:1e:92:4c:e8: 9d:55:6b:92:1a:5a:01:fc:96:7f:09:d4:ef:fe:19: 71:fe:bc:50:47:66:79:a0:65:43:aa:48:a3:b4:f8: 4d:fa:4d:b9:d4:dc:8d:4c:4c:3b:be:89:20:0f:2e: de:b4:4c:55:ee:7d:18:10:e0:fb:0f:07:ce:c1:19: b2:fc:70:c4:eb:39:9f:ad:41:1d:cd:dd:f1:ce:ca: a4:08:4c:2f:e1:65:94:3d:f0:6a:05:e2:a0:63:31: 5b:e6:d4:ca:56:5c:21:72:12:64:9f:ab:9c:da:f5: 21:ba:9e:4b:8c:dc:fa:3b:f7:fb:d0:a6:32:8a:ab: a9:e8:11:22:85:79:57:6b:66:35:78:b6:9d:e9:d1: 2e:cf:a7:00:c4:f8:4a:73:8f:ce:27:97:5e:b6:40: 96:c4:f9:61:81:53:b8:c9:ec:37:61:4d:66:f1:52: 0c:a5:a4:9b:06:d3:f2:ec:bb:e9:6f:31:1a:81:5f: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:DC:BA:E1:D1:D4:1B:81:B6:81:BC:55:9D:7B:61:29:33:DB:6A X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f6:ea:78:e9:a2:ae:2e:ea:8c:c8:bf:3c:92:21:ac:c0:c5: 04:f2:2a:3e:89:4e:91:5c:b7:f3:b1:5a:31:7c:fc:80:d3:88: ce:84:e9:2a:be:90:82:55:0c:96:03:b9:7b:7b:55:71:ca:b8: a8:cc:28:44:b6:a2:f7:3d:44:64:a5:c5:b0:3f:9c:7f:d3:24: 23:10:b7:2d:16:74:fd:65:9c:b1:1a:06:c6:62:cd:6f:9f:71: 40:3f:29:96:ea:2f:31:25:c1:8b:85:8b:4a:c5:eb:56:a2:f5: 08:7b:77:1a:72:d9:58:61:b0:1f:05:91:5d:ee:6c:a4:81:bb: 1b:d7:1a:9a:ef:3d:99:ea:96:72:03:2f:32:bf:cf:e9:fc:55: 0e:3c:3b:7d:6e:d5:cc:55:6c:83:12:cb:9e:3b:6a:e8:29:0f: a7:b0:1d:0d:86:c3:f9:c8:e9:45:da:91:87:0a:a4:c1:af:16: 25:fc:b0:62:b4:b7:c6:14:83:73:e9:99:12:f2:f8:cc:8a:47: c5:cb:27:00:48:7d:84:17:74:60:5b:cb:ef:a3:95:b3:31:66: b2:82:92:fa:ac:5e:72:35:97:f5:42:72:7b:8f:d7:8d:f9:b9: 86:ef:09:a8:4d:81:af:00:28:bf:22:5a:89:d3:1d:8c:1f:64: 37:b3:31:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwNTMxMDE0MTMyWhcNMjUwNjA3MDE0MTMyWjAYMRYwFAYD VQQDEw02ODNhNWU0ZC0zMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndnIfjvDrfvgV7UKhN8eFgJdF5rICmaQSwHo7iNj4t+spSyNDADc4SJwOy5I frMGpsPqiWcTqfkV0r1a9tnJkK8KR1NDkh6STOidVWuSGloB/JZ/CdTv/hlx/rxQ R2Z5oGVDqkijtPhN+k251NyNTEw7vokgDy7etExV7n0YEOD7DwfOwRmy/HDE6zmf rUEdzd3xzsqkCEwv4WWUPfBqBeKgYzFb5tTKVlwhchJkn6uc2vUhup5LjNz6O/f7 0KYyiqup6BEihXlXa2Y1eLad6dEuz6cAxPhKc4/OJ5detkCWxPlhgVO4yew3YU1m 8VIMpaSbBtPy7LvpbzEagV/TyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLH3Lrh 0dQbgbaBvFWde2EpM9tqMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO9up46aKuLuqMyL88kiGswMUE8io+iU6RXLfzsVoxfPyA04jOhOkq vpCCVQyWA7l7e1VxyriozChEtqL3PURkpcWwP5x/0yQjELctFnT9ZZyxGgbGYs1v n3FAPymW6i8xJcGLhYtKxetWovUIe3cactlYYbAfBZFd7mykgbsb1xqa7z2Z6pZy Ay8yv8/p/FUOPDt9btXMVWyDEsueO2roKQ+nsB0NhsP5yOlF2pGHCqTBrxYl/LBi tLfGFINz6ZkS8vjMikfFyycASH2EF3RgW8vvo5WzMWaygpL6rF5yNZf1QnJ7j9eN +bmG7wmoTYGvACi/IlqJ0x2MH2Q3szEg -----END CERTIFICATE-----Generated at Sat May 31 17:16:22 2025 by rpki-client