$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json) Hash identifier: pbHwSiwagsduv8Yy/wwq/qsFQuGRazAlqOc5Vv9kURM= Subject key identifier: BE:3E:C8:DE:46:E9:98:EA:C7:3C:CD:A8:C9:51:3C:6B:3E:26:95:43 Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 075A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft Manifest number: 074C Signing time: Fri 30 May 2025 21:54:42 +0000 Manifest this update: Fri 30 May 2025 21:54:41 +0000 Manifest next update: Fri 06 Jun 2025 21:54:40 +0000 Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: L3MLLUOD0EswuB1ww6u0pSLfdikvD2QB2l8QMnTgqOs=) 2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: May 30 21:54:41 2025 GMT Not After : Jun 6 21:54:40 2025 GMT Subject: CN=683a2921-b841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:4e:d8:c7:43:b0:02:b5:da:da:93:90:8b: 24:2c:d9:6b:f0:d3:4f:05:1d:cb:43:7f:84:e5:66: 5a:fc:60:61:a3:9b:ec:a8:c8:a6:74:42:4e:06:e5: f0:e0:bf:1c:3f:c9:55:28:46:6f:ca:8d:94:be:ae: 9d:0a:2b:c6:d2:59:4a:36:ad:26:03:d2:88:e8:7e: 33:f6:b9:c1:6a:fa:d1:be:be:5b:6d:cf:09:db:42: f4:bc:1a:58:1a:e8:27:c7:3a:4e:fb:62:66:c5:50: fb:61:f0:cc:82:30:c2:b7:58:cd:5a:af:3d:3d:4b: 67:ef:a8:2e:3c:24:f2:ef:c6:fc:91:b4:24:89:f2: 44:a1:f9:93:c9:aa:37:55:7e:24:e9:27:9e:88:2a: 34:9e:61:e4:e1:6f:90:03:52:ff:58:c4:c8:e1:0a: 0b:0a:a4:92:7b:93:54:a1:b2:4f:2c:bb:1b:95:92: c0:3f:d9:8f:43:2a:22:a0:7a:db:57:c0:89:16:f0: 8d:57:1f:d3:4a:b4:78:f9:bd:fa:82:35:c1:12:04: 68:a6:d2:68:12:65:99:e6:cb:c3:30:f3:f6:ae:cf: 6a:2a:5d:c8:72:c8:d1:44:e1:d2:c7:0f:c7:be:ba: 61:0b:5e:f4:10:cc:2a:96:cf:28:21:fd:b1:8f:d3: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3E:C8:DE:46:E9:98:EA:C7:3C:CD:A8:C9:51:3C:6B:3E:26:95:43 X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4d:f3:07:43:d6:cf:32:d5:e1:e1:cb:31:a1:ce:2b:5e:25: 89:01:f4:f8:63:bf:89:db:f6:e9:9c:32:8f:9c:1c:36:ac:e5: 82:85:00:8d:0a:48:37:27:b6:77:48:0d:7e:e0:8f:eb:15:72: 2a:1a:97:a9:07:84:58:bd:ea:29:21:74:cc:b8:95:5b:73:0c: a1:4b:c5:dc:9c:4a:af:dc:c5:d7:e7:84:c0:0c:45:18:d6:4a: 03:ff:e7:fb:5a:82:6a:29:18:bb:85:34:47:64:ea:32:14:21: 82:03:d8:5c:1a:db:9e:a6:bf:51:71:01:97:c0:c6:cf:62:6c: 41:8e:a3:fd:5b:16:18:d9:e9:2a:54:56:cf:0b:2b:06:91:f5: 32:07:e7:fa:46:42:9e:d3:7d:7c:81:47:41:cd:0a:a3:26:99: 68:f1:35:b3:1d:ca:88:e8:d6:e5:55:44:62:b2:4b:fb:c4:b2: 27:ef:32:4e:5b:c1:4a:b7:cd:80:b0:e6:ad:8a:7d:50:b7:f7: b4:4c:d2:85:ef:a0:78:79:a9:66:20:59:e4:5f:96:30:cb:b6: 63:e2:9b:a7:e0:fc:e1:64:3f:3f:73:dd:45:16:d6:37:74:aa: 41:61:48:d1:33:97:26:83:f1:3e:b2:41:5c:26:c7:c8:3a:f0: 3a:f7:e7:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjUwNTMwMjE1NDQxWhcNMjUwNjA2MjE1NDQwWjAYMRYwFAYD VQQDEw02ODNhMjkyMS1iODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbFO2MdDsAK12tqTkIskLNlr8NNPBR3LQ3+E5WZa/GBho5vsqMimdEJOBuXw 4L8cP8lVKEZvyo2Uvq6dCivG0llKNq0mA9KI6H4z9rnBavrRvr5bbc8J20L0vBpY GugnxzpO+2JmxVD7YfDMgjDCt1jNWq89PUtn76guPCTy78b8kbQkifJEofmTyao3 VX4k6SeeiCo0nmHk4W+QA1L/WMTI4QoLCqSSe5NUobJPLLsblZLAP9mPQyoioHrb V8CJFvCNVx/TSrR4+b36gjXBEgRoptJoEmWZ5svDMPP2rs9qKl3IcsjRROHSxw/H vrphC170EMwqls8oIf2xj9P/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4+yN5G 6ZjqxzzNqMlRPGs+JpVDMB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYxMy81Mzg3MzJGRTI5NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1l bGx0YnhLTV96bkc1MDE1NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkTfMHQ9bPMtXh4csxoc4rXiWJAfT4Y7+J2/bpnDKPnBw2rOWChQCN Ckg3J7Z3SA1+4I/rFXIqGpepB4RYveopIXTMuJVbcwyhS8XcnEqv3MXX54TADEUY 1koD/+f7WoJqKRi7hTRHZOoyFCGCA9hcGtuepr9RcQGXwMbPYmxBjqP9WxYY2ekq VFbPCysGkfUyB+f6RkKe0318gUdBzQqjJplo8TWzHcqI6NblVURiskv7xLIn7zJO W8FKt82AsOatin1Qt/e0TNKF76B4ealmIFnkX5Ywy7Zj4pun4PzhZD8/c91FFtY3 dKpBYUjRM5cmg/E+skFcJsfIOvA69+ef -----END CERTIFICATE-----Generated at Sat May 31 17:46:27 2025 by rpki-client