$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: 5zt73uL4zzF/L8ZSPCXlPbV3/uGsaAfMlG8saleL/rI= Subject key identifier: 53:3A:0B:29:83:8D:C8:DE:22:88:07:5D:23:79:85:91:7B:28:FC:7D Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 06F1 Signing time: Fri 30 May 2025 22:10:38 +0000 Manifest this update: Fri 30 May 2025 22:10:37 +0000 Manifest next update: Fri 06 Jun 2025 22:10:37 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: Og8nzCiCz1l/WvAQVYAgd1UPUwzltnNy7Unbdli9cWk=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: May 30 22:10:37 2025 GMT Not After : Jun 6 22:10:37 2025 GMT Subject: CN=683a2cdd-1c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:d3:aa:d6:a6:45:ab:c0:73:c0:6e:b8:ed: 91:38:5e:ad:bf:71:d9:36:ea:09:b4:ea:c8:d4:b8: 41:c1:be:00:ab:8d:10:f8:94:ad:39:85:f7:f7:ff: 2a:48:32:28:2e:4e:1f:a1:63:03:92:6d:bc:63:c2: 39:ce:80:2f:61:d3:84:0a:61:91:08:0e:c2:46:82: d0:b9:88:cd:28:d7:fd:6b:0b:97:59:2c:59:38:d9: ed:e4:4f:85:a8:34:c2:97:51:f4:e1:99:3a:87:f2: 00:49:4b:65:45:d5:92:52:4b:de:30:33:c4:f5:a9: ba:04:82:41:9f:db:cd:f0:f1:fd:37:12:22:6b:31: 6f:ce:68:ed:0c:48:18:5b:bc:78:09:5d:b1:44:b7: b5:ac:cf:2b:2f:e0:06:b0:fe:1c:c8:58:54:3a:09: d4:3e:94:f4:d5:9a:60:7c:a7:18:d9:2d:98:68:ce: a1:81:5f:b0:5b:4f:5a:c4:57:34:1a:4c:2e:30:c0: db:93:b9:4c:ed:7e:ad:36:3b:fb:bc:9e:a0:41:c4: 21:4b:d9:bb:86:f4:95:4c:38:46:89:63:af:bc:47: cd:1b:b0:95:3e:ec:18:38:4f:46:dd:29:20:6c:b6: 80:32:06:52:e4:9f:40:72:ee:b7:ec:71:0c:f1:16: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3A:0B:29:83:8D:C8:DE:22:88:07:5D:23:79:85:91:7B:28:FC:7D X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b0:a0:ec:c8:a3:3a:c1:8f:2f:ed:cc:fd:46:f3:a3:c2:b2: 25:5f:c9:fa:48:92:e9:8f:d4:a3:d0:28:51:cf:c8:8f:b0:d7: 64:e1:b2:77:c1:a9:59:e9:da:3b:d6:58:38:8a:65:b2:4c:98: fb:37:23:b2:88:a5:2d:89:1b:0d:04:ef:33:b2:44:66:16:65: e2:62:8b:67:2e:2f:41:c9:c9:39:9d:31:da:bf:58:19:a5:e8: 91:94:99:d9:15:c7:d6:aa:5f:08:21:5c:44:80:52:10:bb:e0: f8:e6:8b:22:c2:3b:bf:0d:17:d5:a6:6a:48:d0:41:5a:a1:b2: 7b:8b:31:7b:4c:97:7d:7e:9a:2d:1c:59:22:4b:13:5b:07:76: 0c:05:c8:c6:e2:e0:be:d9:02:02:4c:dd:ae:f5:f8:ef:a0:11: b0:1f:58:20:87:2e:ae:1d:2a:c9:de:30:ee:e0:36:0e:f6:51: 1d:1e:a9:22:48:93:7e:32:af:06:3b:47:3b:a5:74:43:56:4f: 1f:7e:d4:d6:bb:2b:df:e2:f1:60:4b:c0:88:b5:45:74:7c:08: ba:9e:54:41:fc:9d:f2:10:0a:ee:ba:18:81:c3:41:99:ca:3e: a5:64:65:46:5e:56:25:d9:35:35:72:f3:28:86:55:dc:07:6b: 08:81:75:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjUwNTMwMjIxMDM3WhcNMjUwNjA2MjIxMDM3WjAYMRYwFAYD VQQDEw02ODNhMmNkZC0xYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbDTqtamRavAc8BuuO2ROF6tv3HZNuoJtOrI1LhBwb4Aq40Q+JStOYX39/8q SDIoLk4foWMDkm28Y8I5zoAvYdOECmGRCA7CRoLQuYjNKNf9awuXWSxZONnt5E+F qDTCl1H04Zk6h/IASUtlRdWSUkveMDPE9am6BIJBn9vN8PH9NxIiazFvzmjtDEgY W7x4CV2xRLe1rM8rL+AGsP4cyFhUOgnUPpT01ZpgfKcY2S2YaM6hgV+wW09axFc0 GkwuMMDbk7lM7X6tNjv7vJ6gQcQhS9m7hvSVTDhGiWOvvEfNG7CVPuwYOE9G3Skg bLaAMgZS5J9Acu637HEM8RZcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM6CymD jcjeIogHXSN5hZF7KPx9MB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6sKDsyKM6wY8v7cz9RvOjwrIlX8n6SJLpj9Sj0ChRz8iPsNdk4bJ3 walZ6do71lg4imWyTJj7NyOyiKUtiRsNBO8zskRmFmXiYotnLi9Byck5nTHav1gZ peiRlJnZFcfWql8IIVxEgFIQu+D45osiwju/DRfVpmpI0EFaobJ7izF7TJd9fpot HFkiSxNbB3YMBcjG4uC+2QICTN2u9fjvoBGwH1gghy6uHSrJ3jDu4DYO9lEdHqki SJN+Mq8GO0c7pXRDVk8fftTWuyvf4vFgS8CItUV0fAi6nlRB/J3yEAruuhiBw0GZ yj6lZGVGXlYl2TU1cvMohlXcB2sIgXV7 -----END CERTIFICATE-----Generated at Sat May 31 16:43:46 2025 by rpki-client