$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft File: PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json) Hash identifier: bCvI5wSGV7LXcqHGNrqochOYvgpK5zpcygU2ZqL+Cfs= Subject key identifier: DA:66:2F:89:0E:47:F7:5B:C3:3E:B9:7E:C8:B7:16:99:21:4A:E1:81 Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 Certificate issuer: /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft Manifest number: 67 Signing time: Sat 31 May 2025 06:34:10 +0000 Manifest this update: Sat 31 May 2025 06:34:09 +0000 Manifest next update: Sat 07 Jun 2025 06:34:09 +0000 Files and hashes: 1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: ewplj2arDgiiM9AiO3KUQibzGt0nd6Y5od14643AUgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Validity Not Before: May 31 06:34:09 2025 GMT Not After : Jun 7 06:34:09 2025 GMT Subject: CN=683aa2e1-fff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:81:93:04:bd:a8:e1:4d:f3:e0:c3:d9:c6: 8e:0f:2c:d1:e4:82:08:69:3a:18:e1:05:a9:5a:b5: 18:21:c1:96:ce:81:ba:9c:26:80:a0:b7:ca:bd:a5: 94:1f:14:a1:23:6c:17:36:c8:32:84:f5:d3:3f:b8: 6c:37:9e:22:e6:0d:8c:68:04:41:00:c6:a5:8c:2b: 9a:9e:c0:a5:a9:f4:ac:d5:cc:ea:27:e4:49:19:5c: 2d:b9:54:a0:25:5f:aa:2f:fe:e9:5d:37:ca:27:b5: 5b:66:b3:79:74:13:c9:92:b0:ad:94:17:99:7a:80: eb:2c:95:41:0d:3f:9b:10:9a:3d:32:22:2d:43:a2: 17:c3:21:83:1c:45:1e:67:a0:84:1f:e7:fe:24:4f: c4:cf:8b:f9:13:4f:ae:a2:71:f2:bf:b9:cb:18:d2: 7d:d1:29:ed:5e:c3:04:01:f1:c1:a8:a4:30:01:cc: 37:54:b6:01:1f:3e:89:79:32:41:87:52:3d:13:3d: 38:0b:96:e7:54:06:fe:04:80:c1:b3:2d:19:19:fe: f5:3c:a2:ad:6d:07:17:61:51:a6:b4:cd:9d:b0:14: b9:a5:cb:0f:9a:1e:f8:9c:6a:6b:ba:64:77:d9:cb: 2e:c8:11:c8:0e:ad:ab:91:73:28:52:6e:0c:b6:01: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:66:2F:89:0E:47:F7:5B:C3:3E:B9:7E:C8:B7:16:99:21:4A:E1:81 X509v3 Authority Key Identifier: keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ee:df:f3:69:d1:8d:b4:fc:f2:e1:d1:5d:89:16:b2:06:14: d5:34:1f:ca:e4:93:5c:d6:91:c0:68:a7:59:c2:ac:ea:18:ec: 1e:fe:0b:31:1c:0d:36:1c:38:e1:3a:1f:43:d3:50:6c:54:17: 58:ed:a2:28:86:50:b1:5f:f0:b8:f0:60:7c:ed:c5:33:78:f8: 25:4b:d5:bb:e9:c7:aa:b1:bc:f2:e5:00:a2:c0:e6:67:a3:6a: e6:36:b5:26:0f:73:e3:f0:d1:5e:60:b0:5c:0e:5f:11:2e:99: f4:2b:01:14:f6:9c:9b:69:ad:03:97:81:b1:4d:d1:6a:07:d8: c7:9f:91:fb:1e:55:dd:92:34:65:ae:30:a4:fd:cc:fc:9d:8b: f8:ec:c7:61:d6:f5:df:f3:52:2e:e4:f4:81:77:e4:b4:98:e4: 86:d9:33:8d:e9:84:06:c8:b0:65:50:52:48:bc:98:b4:33:6d: ae:75:af:f1:ad:c0:ea:74:f1:9c:32:24:21:68:39:10:a8:ee: 6a:27:ce:b5:96:5b:f3:82:76:96:a8:5e:79:24:e4:2a:82:93: fd:db:2f:29:f3:05:4e:d3:76:63:e8:5b:20:29:cf:77:39:6c: 76:a5:fd:24:bc:ca:c9:69:89:92:bf:6d:8f:93:d9:e0:da:09: 81:3c:fc:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoM0RFQThCMUJCODcyREQxMjZDQTY0N0NDMzc1QzIwNzYw MjQwQzM4NTAeFw0yNTA1MzEwNjM0MDlaFw0yNTA2MDcwNjM0MDlaMBgxFjAUBgNV BAMTDTY4M2FhMmUxLWZmZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCruIGTBL2o4U3z4MPZxo4PLNHkgghpOhjhBalatRghwZbOgbqcJoCgt8q9pZQf FKEjbBc2yDKE9dM/uGw3niLmDYxoBEEAxqWMK5qewKWp9KzVzOon5EkZXC25VKAl X6ov/uldN8ontVtms3l0E8mSsK2UF5l6gOsslUENP5sQmj0yIi1DohfDIYMcRR5n oIQf5/4kT8TPi/kTT66icfK/ucsY0n3RKe1ewwQB8cGopDABzDdUtgEfPol5MkGH Uj0TPTgLludUBv4EgMGzLRkZ/vU8oq1tBxdhUaa0zZ2wFLmlyw+aHvicamu6ZHfZ yy7IEcgOrauRcyhSbgy2AeV3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2mYviQ5H 91vDPrl+yLcWmSFK4YEwHwYDVR0jBBgwFoAUPeqLG7hy3RJspkfMN1wgdgJAw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzM0OERFMUNFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JKc3BrZk1OMXdnZGdKQXc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGVxTEc3aHkzUkpzcGtmTU4xd2dkZ0pBdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JK c3BrZk1OMXdnZGdKQXc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAju3/Np0Y20/PLh0V2JFrIGFNU0H8rkk1zWkcBop1nCrOoY7B7+CzEc DTYcOOE6H0PTUGxUF1jtoiiGULFf8LjwYHztxTN4+CVL1bvpx6qxvPLlAKLA5mej auY2tSYPc+Pw0V5gsFwOXxEumfQrART2nJtprQOXgbFN0WoH2MefkfseVd2SNGWu MKT9zPydi/jsx2HW9d/zUi7k9IF35LSY5IbZM43phAbIsGVQUki8mLQzba51r/Gt wOp08ZwyJCFoORCo7monzrWWW/OCdpaoXnkk5CqCk/3bLynzBU7TdmPoWyApz3c5 bHal/SS8yslpiZK/bY+T2eDaCYE8/Os= -----END CERTIFICATE-----Generated at Sat May 31 16:39:52 2025 by rpki-client