$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: vr0WHDvzlCGNmaJpaq+fP7BjYnVjeWL3Oh2uXplRBIk= Subject key identifier: 08:DC:29:71:82:B7:29:CC:F1:86:4A:19:02:B2:5D:DD:3C:B9:B9:95 Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 02F5 Signing time: Sat 31 May 2025 01:28:39 +0000 Manifest this update: Sat 31 May 2025 01:28:38 +0000 Manifest next update: Sat 07 Jun 2025 01:28:38 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: n2yacqXGx9wUQ3XOEek0swG0J1gNJu+AlzmUQZEP8xc=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: pktrHR+QS/er0s+loh1K6z6/oPCthVtEcSW6fBSWLVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: May 31 01:28:38 2025 GMT Not After : Jun 7 01:28:38 2025 GMT Subject: CN=683a5b47-ff81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:ae:af:4d:ee:c3:d4:9d:ff:73:a3:65:ea: ff:20:26:cc:a5:85:55:e8:f6:d3:8f:03:39:66:56: 44:31:3e:6d:1f:55:ba:73:e6:5a:12:3a:06:4e:e0: 2d:c6:7e:33:37:69:29:e2:66:bc:d1:71:6e:5d:35: b0:98:97:e2:41:2f:84:f2:89:24:65:62:d2:86:c6: 83:ec:eb:d5:fe:20:f6:9f:35:10:eb:9e:8b:77:5b: 8c:3c:7e:5c:80:4b:e8:6f:85:90:88:a8:8c:c5:01: 83:31:1c:8d:c5:42:18:f2:6e:74:76:b8:9b:2a:99: 86:e2:08:5b:bd:26:75:6d:66:5b:29:ce:99:58:33: 15:3c:09:84:c2:87:74:09:eb:af:5d:d4:25:69:e8: ec:ef:13:27:51:45:d5:10:c3:9c:7d:bc:19:a3:e5: 6b:37:bd:a8:41:05:da:ed:62:3e:1c:3f:f8:52:b4: df:4a:d3:ea:8a:e5:f8:7f:15:ff:65:94:35:ec:e1: fc:23:27:93:86:6f:3b:b4:0a:b7:1f:08:63:27:11: d2:8e:15:85:68:2a:07:5c:af:b0:00:e9:89:a5:b2: 04:06:a7:57:62:b0:75:88:92:4f:3d:e8:cd:89:a4: 86:05:81:e6:ca:e7:d5:c0:7e:e9:b6:58:df:16:61: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DC:29:71:82:B7:29:CC:F1:86:4A:19:02:B2:5D:DD:3C:B9:B9:95 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:77:f9:c0:8f:8f:ac:6a:db:6d:66:44:ce:1f:6a:da:98:90: 6d:70:fe:16:e6:5e:36:72:3a:e2:78:bd:d6:56:3f:fb:28:fd: 0e:d3:6d:f7:9d:8b:4b:6f:4e:ef:92:ea:7e:c1:bc:40:cc:fd: 1b:de:04:a0:60:dd:91:9b:a0:e3:3f:02:e7:7f:e7:50:d1:b3: fe:fc:1e:08:9d:46:45:8a:12:30:98:59:25:4b:d9:e2:d6:56: 9f:8f:c1:97:c0:e0:ec:8b:df:97:be:c7:98:eb:7c:3c:f1:a5: 76:16:4b:c1:8c:51:2a:eb:4c:12:c4:37:10:55:cc:a2:a7:b7: aa:b8:25:d8:84:85:8f:6e:f9:65:79:02:a0:7e:5e:2d:a7:4a: a6:e4:07:a9:a6:64:b5:64:0e:52:c3:c1:eb:c8:c2:bf:00:8b: f7:6b:67:9e:79:6b:1c:c4:13:82:dd:93:30:51:c5:d0:1a:a2: 77:cb:be:00:15:22:84:0f:9f:22:51:27:bf:e8:c8:94:94:a3: 15:5b:9e:5d:70:a8:20:e5:c1:c0:74:eb:1d:a7:f2:79:58:49: fe:55:53:5a:03:18:40:b3:37:61:f9:7c:b7:d1:54:27:6c:27: 3c:57:0c:1a:1d:49:ce:df:83:9f:04:79:19:e3:74:c6:36:85: 83:8c:d6:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwNTMxMDEyODM4WhcNMjUwNjA3MDEyODM4WjAYMRYwFAYD VQQDEw02ODNhNWI0Ny1mZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJqur03uw9Sd/3OjZer/ICbMpYVV6PbTjwM5ZlZEMT5tH1W6c+ZaEjoGTuAt xn4zN2kp4ma80XFuXTWwmJfiQS+E8okkZWLShsaD7OvV/iD2nzUQ656Ld1uMPH5c gEvob4WQiKiMxQGDMRyNxUIY8m50dribKpmG4ghbvSZ1bWZbKc6ZWDMVPAmEwod0 CeuvXdQlaejs7xMnUUXVEMOcfbwZo+VrN72oQQXa7WI+HD/4UrTfStPqiuX4fxX/ ZZQ17OH8IyeThm87tAq3HwhjJxHSjhWFaCoHXK+wAOmJpbIEBqdXYrB1iJJPPejN iaSGBYHmyufVwH7ptljfFmFUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjcKXGC tynM8YZKGQKyXd08ubmVMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7d/nAj4+satttZkTOH2ramJBtcP4W5l42cjrieL3WVj/7KP0O0233 nYtLb07vkup+wbxAzP0b3gSgYN2Rm6DjPwLnf+dQ0bP+/B4InUZFihIwmFklS9ni 1lafj8GXwODsi9+XvseY63w88aV2FkvBjFEq60wSxDcQVcyip7equCXYhIWPbvll eQKgfl4tp0qm5AeppmS1ZA5Sw8HryMK/AIv3a2eeeWscxBOC3ZMwUcXQGqJ3y74A FSKED58iUSe/6MiUlKMVW55dcKgg5cHAdOsdp/J5WEn+VVNaAxhAszdh+Xy30VQn bCc8VwwaHUnO34OfBHkZ43TGNoWDjNbU -----END CERTIFICATE-----Generated at Sat May 31 16:52:19 2025 by rpki-client