$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: KefP2fH0+7EVvovz+Sv4o+b8zgVCMEkhIclC9ZDbIyA= Subject key identifier: DC:E2:79:5C:B6:BD:2C:1C:36:47:43:8D:28:7D:13:20:60:29:80:12 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 1A Signing time: Sat 31 May 2025 07:30:59 +0000 Manifest this update: Sat 31 May 2025 07:30:59 +0000 Manifest next update: Sat 07 Jun 2025 07:30:59 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: Fqcm7YBjpfbCfmkcPzGoULEMth+AO6mPT7rEtzuClIw=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: May 31 07:30:59 2025 GMT Not After : Jun 7 07:30:59 2025 GMT Subject: CN=683ab033-3fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:48:f1:db:76:3f:9f:c0:0d:50:7f:e0:d0: bb:10:e2:be:7b:cf:e2:e5:00:69:83:51:34:36:ed: b6:6b:b9:28:23:3f:e7:d5:f7:59:7f:91:4a:4c:f9: ac:fa:67:21:11:9b:6c:ff:15:89:1a:dd:31:96:da: ed:0b:4f:c2:49:24:2d:b5:37:7a:29:3d:34:36:a5: ee:36:23:cd:be:98:49:b7:cb:21:eb:73:c6:84:3a: a7:2c:39:aa:9b:bf:01:30:b3:6a:b3:c9:80:91:b1: a5:cf:6a:22:78:5e:08:42:31:92:58:c4:1c:e1:5c: 0f:be:32:d9:43:f5:da:2b:dc:c2:9f:b3:96:86:06: c3:0b:7f:66:90:d1:ad:2c:7c:9a:5d:a6:d0:05:02: eb:18:5c:84:a4:a2:6f:9b:66:08:04:c7:1c:3a:bf: 2f:f8:fa:ef:16:98:53:b5:5b:53:0b:e9:22:03:0d: f1:0d:34:95:51:f1:63:ad:6e:55:3b:c0:d2:35:d7: e2:43:53:90:5e:3d:bc:9b:29:a2:e2:0d:65:b6:7d: 5f:52:f4:82:00:9a:8e:1a:56:22:cc:ea:09:0c:fb: 75:b1:d2:0f:4b:4f:d3:e2:8a:eb:ee:d7:78:db:d8: d0:e0:17:d4:25:d1:6f:93:a0:e1:68:83:16:a6:42: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:79:5C:B6:BD:2C:1C:36:47:43:8D:28:7D:13:20:60:29:80:12 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ab:6e:1d:6a:fd:6e:8c:99:5b:65:fb:e0:3b:76:db:ba:ce: f3:67:95:bb:a7:6b:95:1b:7f:24:80:67:4f:78:8c:77:dc:91: f4:6e:ec:06:e6:de:94:b7:63:76:b8:d4:37:a5:95:ed:bd:30: f5:01:1e:ed:6c:74:3e:c8:38:fa:6a:25:b6:31:3e:58:92:19: 9d:cc:d5:06:4c:32:ee:76:02:87:32:75:ff:a5:58:87:74:95: 40:78:d8:5a:eb:f8:51:bb:08:92:25:fc:90:8c:2f:c6:b0:07: 76:6b:26:98:30:fa:f2:b3:bd:6e:61:18:3d:c6:86:ee:ae:55: 17:71:44:13:ec:65:d3:32:36:ae:a9:76:6f:f4:e0:3d:66:0c: 68:8a:3d:cf:62:5a:19:1b:64:e6:84:d3:ee:69:6c:fa:0b:81: e7:a5:1b:a7:32:97:7b:f8:5a:7c:5b:57:59:c3:a5:de:44:de: 6a:d4:0f:be:92:ee:d6:1c:9a:0c:a5:eb:7d:9d:a3:0e:11:46: 27:50:25:0e:c4:df:c8:d3:4a:b2:00:70:ca:30:72:34:21:fd: cb:26:95:8e:63:26:29:12:91:42:8a:36:99:9c:04:0a:18:83: 0c:5a:b3:b8:b7:44:22:5a:06:70:69:4a:64:54:f5:58:65:2b: ef:b4:e7:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA1MzEwNzMwNTlaFw0yNTA2MDcwNzMwNTlaMBgxFjAUBgNV BAMTDTY4M2FiMDMzLTNmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4eUjx23Y/n8ANUH/g0LsQ4r57z+LlAGmDUTQ27bZruSgjP+fV91l/kUpM+az6 ZyERm2z/FYka3TGW2u0LT8JJJC21N3opPTQ2pe42I82+mEm3yyHrc8aEOqcsOaqb vwEws2qzyYCRsaXPaiJ4XghCMZJYxBzhXA++MtlD9dor3MKfs5aGBsMLf2aQ0a0s fJpdptAFAusYXISkom+bZggExxw6vy/4+u8WmFO1W1ML6SIDDfENNJVR8WOtblU7 wNI11+JDU5BePbybKaLiDWW2fV9S9IIAmo4aViLM6gkM+3Wx0g9LT9Piiuvu13jb 2NDgF9Ql0W+ToOFogxamQt1rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3OJ5XLa9 LBw2R0ONKH0TIGApgBIwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGrbh1q/W6MmVtl++A7dtu6zvNnlbuna5UbfySAZ094jHfckfRu7Abm 3pS3Y3a41Delle29MPUBHu1sdD7IOPpqJbYxPliSGZ3M1QZMMu52Aocydf+lWId0 lUB42Frr+FG7CJIl/JCML8awB3ZrJpgw+vKzvW5hGD3Ghu6uVRdxRBPsZdMyNq6p dm/04D1mDGiKPc9iWhkbZOaE0+5pbPoLgeelG6cyl3v4WnxbV1nDpd5E3mrUD76S 7tYcmgyl632dow4RRidQJQ7E38jTSrIAcMowcjQh/csmlY5jJikSkUKKNpmcBAoY gwxas7i3RCJaBnBpSmRU9VhlK++05+Q= -----END CERTIFICATE-----Generated at Sat May 31 17:57:43 2025 by rpki-client