$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft File: pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json) Hash identifier: MB6zHUnvDji7tU2xjzj/8f9prMVkYsgDDk5eiHcyfqo= Subject key identifier: BC:CE:89:1F:AB:0E:A4:5C:77:31:1A:E7:5B:D1:E7:D3:A0:7D:9B:3A Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft Manifest number: 0243 Signing time: Sat 31 May 2025 02:04:51 +0000 Manifest this update: Sat 31 May 2025 02:04:51 +0000 Manifest next update: Sat 07 Jun 2025 02:04:51 +0000 Files and hashes: 1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: 6iwaUKJhtn7l6FUHzbt305bd95rw6tBb3gMjh3fay7E=) 2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Validity Not Before: May 31 02:04:51 2025 GMT Not After : Jun 7 02:04:51 2025 GMT Subject: CN=683a63c3-b35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:52:64:8f:dc:11:0e:f0:d1:97:fd:68:1b: 80:bb:e7:d8:f0:56:e3:fd:ee:3d:f7:25:56:27:de: e6:9f:4c:2e:48:50:df:d7:7d:bc:69:b0:9e:7b:12: f0:db:fc:07:ce:80:02:00:8d:7f:2f:c1:60:49:c4: a8:78:53:5f:11:50:30:af:06:1b:32:06:31:98:85: a4:74:fb:f9:bd:11:f8:5b:9d:0d:d7:0f:4c:7b:a5: 12:85:2c:00:1b:fd:e2:05:96:2a:4a:2c:f9:fe:90: 82:0e:ae:71:34:ae:9d:f6:c4:f5:c1:f3:8d:ea:14: 0f:f0:9b:ae:91:0a:3f:91:06:44:29:e5:97:a6:6d: 76:18:be:c0:ef:c7:81:3f:4b:c4:aa:0c:ed:5a:7b: c3:2d:56:97:97:74:43:86:a2:04:4d:61:64:3b:7a: a4:75:15:66:1c:85:50:39:18:a0:a4:d8:6e:de:5c: 64:ba:22:62:68:95:90:5e:19:e6:b0:4a:9e:55:bb: cf:85:bb:d7:a1:c2:b9:42:ed:d7:40:bb:e3:a1:66: 29:56:c0:ec:60:4c:cf:38:6a:a2:b3:16:0c:33:9d: b0:22:f0:5b:10:e6:c9:70:53:f9:f3:de:10:dd:35: f9:75:a7:64:1d:04:a7:b7:b0:f2:64:14:bd:8d:6d: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:89:1F:AB:0E:A4:5C:77:31:1A:E7:5B:D1:E7:D3:A0:7D:9B:3A X509v3 Authority Key Identifier: keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ed:40:25:62:68:b0:ee:79:41:4e:40:08:57:88:ba:9d:da: ea:b9:49:96:60:5f:5e:1d:02:ea:73:73:87:fb:6b:df:df:e9: 5c:c8:f8:66:2e:e5:ac:b1:cc:3c:2c:90:c5:e5:5e:82:b5:69: 99:d8:2c:5b:3d:e6:49:a3:7a:9a:89:6f:8f:2b:ab:b2:44:bb: 3a:17:cd:18:6d:ee:f0:fe:00:ce:87:3a:8b:9c:1c:7b:9d:60: 1d:84:ed:00:cf:2b:e0:71:53:3b:1c:89:08:4a:f4:57:b8:4a: 34:bf:fb:27:ee:36:c4:c8:34:2b:b0:1f:5a:89:70:39:ab:b2: c8:be:66:9b:cf:60:a8:fb:5f:a4:3e:bb:85:08:ef:30:db:8f: 43:b3:2f:cf:0a:10:7d:96:38:d8:44:b1:fc:db:6e:5d:2a:4b: bf:c4:d4:60:60:92:46:f6:62:76:cb:84:db:f6:68:23:93:fd: 0c:a9:67:4c:ad:08:36:c9:31:13:c9:c0:51:59:93:41:68:eb: b2:7c:6c:40:d9:35:c6:31:41:07:1b:6d:da:59:f9:7b:fb:ff: d9:74:1e:c7:84:14:bc:96:1d:79:67:9e:12:ee:bf:47:f7:47: 3e:d9:ea:68:ea:1e:a6:f4:10:60:9a:27:ce:87:bf:29:53:d6: 0f:0f:e4:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw QjU3MkVFN0EwHhcNMjUwNTMxMDIwNDUxWhcNMjUwNjA3MDIwNDUxWjAYMRYwFAYD VQQDEw02ODNhNjNjMy1iMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GtSZI/cEQ7w0Zf9aBuAu+fY8Fbj/e499yVWJ97mn0wuSFDf1328abCeexLw 2/wHzoACAI1/L8FgScSoeFNfEVAwrwYbMgYxmIWkdPv5vRH4W50N1w9Me6UShSwA G/3iBZYqSiz5/pCCDq5xNK6d9sT1wfON6hQP8JuukQo/kQZEKeWXpm12GL7A78eB P0vEqgztWnvDLVaXl3RDhqIETWFkO3qkdRVmHIVQORigpNhu3lxkuiJiaJWQXhnm sEqeVbvPhbvXocK5Qu3XQLvjoWYpVsDsYEzPOGqisxYMM52wIvBbEObJcFP5894Q 3TX5dadkHQSnt7DyZBS9jW3CTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzOiR+r DqRcdzEa51vR59OgfZs6MB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3 NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDUyMi9ERTIwRkM5NjI3NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpk aU44dWJVOUQzaW9MVnk3bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo7UAlYmiw7nlBTkAIV4i6ndrquUmWYF9eHQLqc3OH+2vf3+lcyPhm LuWsscw8LJDF5V6CtWmZ2CxbPeZJo3qaiW+PK6uyRLs6F80Ybe7w/gDOhzqLnBx7 nWAdhO0AzyvgcVM7HIkISvRXuEo0v/sn7jbEyDQrsB9aiXA5q7LIvmabz2Co+1+k PruFCO8w249Dsy/PChB9ljjYRLH8225dKku/xNRgYJJG9mJ2y4Tb9mgjk/0MqWdM rQg2yTETycBRWZNBaOuyfGxA2TXGMUEHG23aWfl7+//ZdB7HhBS8lh15Z54S7r9H 90c+2epo6h6m9BBgmifOh78pU9YPD+Tz -----END CERTIFICATE-----Generated at Sat May 31 17:57:48 2025 by rpki-client