$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: WwlzaYoK71teyg3BoLNfykTE98oePmfICWXItnxsrQY= Subject key identifier: 1E:40:31:D9:A7:96:C0:11:79:98:51:A7:3A:8E:0D:61:EC:84:80:02 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0A32 Signing time: Fri 30 May 2025 19:57:39 +0000 Manifest this update: Fri 30 May 2025 19:57:38 +0000 Manifest next update: Fri 06 Jun 2025 19:57:38 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: uHCIKtWJX0G1K5lJTEelKvfhfalcTiiypSEzg2+qAp4=) 2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2619 (0xa3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: May 30 19:57:38 2025 GMT Not After : Jun 6 19:57:38 2025 GMT Subject: CN=683a0db2-c5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:64:1e:9f:62:4d:5c:e6:45:5f:8f:69:05: 32:be:42:e1:d3:6a:b2:a8:b5:ae:06:42:39:69:67: 1e:0f:d4:ab:40:54:36:07:ac:12:8c:54:49:23:91: e7:b4:2b:2a:ee:a7:16:dd:fa:e6:9d:31:96:99:ed: 98:bd:71:14:f2:4a:b8:e7:d5:fd:1d:8b:2d:9d:8c: f9:10:cb:32:b9:83:db:18:0d:be:67:ae:1d:40:8c: 53:22:06:73:d0:2f:9e:83:73:c8:0d:8a:b8:39:f7: 6e:4e:72:96:05:f1:06:84:0b:c1:b9:85:03:d5:2b: a6:18:31:43:36:b8:ad:7c:8b:c5:a2:ee:c7:27:a2: 2c:c4:ca:d1:aa:62:8f:97:94:fa:16:6e:ec:9b:55: 76:5c:d0:ba:e6:c9:00:ff:63:88:c9:af:03:15:48: fc:9b:b7:f7:c6:bc:b8:40:87:0d:7b:66:bb:fd:44: 7a:a5:d4:84:8b:d2:db:0e:bd:46:b5:58:1d:03:4e: f3:86:08:b7:19:13:ac:e5:20:74:82:a2:76:96:c6: ce:1a:ea:c1:d0:12:5e:c3:db:6a:0f:a3:1e:6c:df: 92:2e:5d:9b:78:44:0d:e5:b2:bc:b6:21:14:95:c8: 1d:b1:e4:82:8e:2d:ec:a4:72:cc:d9:bd:b8:e9:cf: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:40:31:D9:A7:96:C0:11:79:98:51:A7:3A:8E:0D:61:EC:84:80:02 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e4:ce:af:bc:99:19:07:89:18:26:4d:df:98:1e:79:2d:cb: 6d:50:54:3c:0b:9f:d2:59:9b:e1:f3:b6:21:58:c7:2c:2d:1e: 64:96:9e:d9:c6:d2:56:6f:77:d7:a5:5f:ab:db:7d:b6:a7:4b: b4:74:e3:44:3a:c9:6b:0b:0d:4e:ac:b0:ae:13:df:da:44:ff: 5e:35:f9:ca:09:37:2c:6a:70:8b:cb:49:c6:f9:3a:d5:c9:34: fd:de:c4:88:d2:5a:15:ec:51:89:c2:97:73:96:9a:a0:35:f6: f5:6e:ea:37:62:b9:17:9b:98:88:4c:97:76:3d:78:c0:2f:34: c5:40:5d:6f:a1:fc:7d:96:2a:67:f6:c6:d0:a8:5c:76:c7:b7: 22:e7:ac:58:5c:fc:07:a5:89:5c:c0:b4:b9:8b:b3:cf:7a:e5: 81:3c:7a:ef:83:9d:ff:07:83:c6:7b:3c:8f:12:e4:51:2e:ad: be:83:05:fe:fd:f5:b1:17:a1:13:f7:48:d4:ec:2a:c2:3e:0c: 8e:11:69:a2:e5:2a:5c:72:20:7b:35:40:fd:02:1c:d3:78:76: 11:21:67:f9:c4:e9:16:4c:d1:e1:83:64:06:83:8b:e4:b1:25: 88:d7:72:a3:eb:1a:31:02:da:3f:08:12:11:47:a2:d8:d8:34: 88:a3:cd:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjUwNTMwMTk1NzM4WhcNMjUwNjA2MTk1NzM4WjAYMRYwFAYD VQQDEw02ODNhMGRiMi1jNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneNkHp9iTVzmRV+PaQUyvkLh02qyqLWuBkI5aWceD9SrQFQ2B6wSjFRJI5Hn tCsq7qcW3frmnTGWme2YvXEU8kq459X9HYstnYz5EMsyuYPbGA2+Z64dQIxTIgZz 0C+eg3PIDYq4OfduTnKWBfEGhAvBuYUD1SumGDFDNritfIvFou7HJ6IsxMrRqmKP l5T6Fm7sm1V2XNC65skA/2OIya8DFUj8m7f3xry4QIcNe2a7/UR6pdSEi9LbDr1G tVgdA07zhgi3GROs5SB0gqJ2lsbOGurB0BJew9tqD6MebN+SLl2beEQN5bK8tiEU lcgdseSCji3spHLM2b246c9d1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5AMdmn lsAReZhRpzqODWHshIACMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz5M6vvJkZB4kYJk3fmB55LcttUFQ8C5/SWZvh87YhWMcsLR5klp7Z xtJWb3fXpV+r2322p0u0dONEOslrCw1OrLCuE9/aRP9eNfnKCTcsanCLy0nG+TrV yTT93sSI0loV7FGJwpdzlpqgNfb1buo3YrkXm5iITJd2PXjALzTFQF1vofx9lipn 9sbQqFx2x7ci56xYXPwHpYlcwLS5i7PPeuWBPHrvg53/B4PGezyPEuRRLq2+gwX+ /fWxF6ET90jU7CrCPgyOEWmi5SpcciB7NUD9AhzTeHYRIWf5xOkWTNHhg2QGg4vk sSWI13Kj6xoxAto/CBIRR6LY2DSIo824 -----END CERTIFICATE-----Generated at Sat May 31 17:23:36 2025 by rpki-client