$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: Wd8S7uOxeZbSyCGBrqYWYVD9uBVNz+kBqjuuxsVAItY= Subject key identifier: BE:6E:3A:57:0B:92:02:0A:E7:F3:37:DA:AD:63:26:30:68:65:AD:72 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 0122 Signing time: Sat 31 May 2025 04:20:29 +0000 Manifest this update: Sat 31 May 2025 04:20:29 +0000 Manifest next update: Sat 07 Jun 2025 04:20:29 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: pWIV2DfGuC+81rhp+EnA1UK9i9ioBeVcMp8eAAmKNUY=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: VY07hPoAnZ6HhFnmDGOrse/S2/32FKp0YWgAY+x8IqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: May 31 04:20:29 2025 GMT Not After : Jun 7 04:20:29 2025 GMT Subject: CN=683a838d-dc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:21:de:e1:c8:97:62:90:1a:db:e6:f9:a9:81: 02:4f:f4:41:d3:08:fe:5f:5a:db:46:b7:62:ce:6d: 12:a0:1c:39:43:22:89:6e:46:4c:fc:20:d7:99:3f: 6a:c6:95:67:f2:b1:e1:58:88:3e:05:a5:0d:9d:87: 9b:aa:30:c9:17:eb:10:f4:15:e5:af:f5:dc:39:60: 9a:00:dd:63:8c:b3:a4:f1:74:5f:9c:e7:96:25:53: 82:a0:00:2b:30:35:58:b3:38:10:04:39:71:a7:f9: 68:f7:11:97:b8:06:f7:ec:7f:56:59:6e:e0:86:88: 32:48:1d:93:4a:f5:0b:67:a2:12:be:99:10:33:6c: c2:31:1b:e7:a6:fb:89:81:0a:a9:bb:d5:93:00:d0: 78:13:1b:5e:99:70:ea:bd:f2:a3:c0:fd:51:98:9f: 73:74:7e:b5:50:3b:bd:cd:e4:26:d2:93:62:dc:1d: 16:53:ae:f4:be:5c:d5:da:2e:08:62:31:65:ea:71: a3:dd:45:67:bf:ed:42:11:6b:21:40:8e:ea:9f:aa: 4b:60:ad:04:27:8e:04:20:4e:af:41:ee:79:77:b2: 6a:86:92:7c:88:46:59:63:fa:cd:3e:7b:ea:e1:d6: 12:08:c7:c6:b6:a8:5d:27:28:8e:1a:b0:de:28:37: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6E:3A:57:0B:92:02:0A:E7:F3:37:DA:AD:63:26:30:68:65:AD:72 X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:cd:6e:e5:f3:d5:f5:07:ef:c7:ae:94:59:fc:ff:98:aa:b9: 5f:01:22:42:9c:15:6d:13:83:b8:54:26:f5:18:39:b3:5f:d9: 58:6b:e1:ba:89:fc:a8:0a:3b:fc:c6:53:e1:48:10:79:9b:f9: 91:67:3f:03:b6:8f:b8:fe:73:0a:bb:bb:6d:f6:ff:e1:cb:90: 09:8c:95:65:48:b4:1f:30:63:90:be:57:c8:0d:9e:94:db:3d: 86:d4:7d:b2:af:5f:a4:73:ae:e7:91:8a:43:b9:14:64:bc:88: 54:46:76:98:41:6c:a3:f0:b0:16:9b:9c:c3:57:15:f1:64:1b: 5b:5a:a9:24:ed:51:ff:17:c6:6c:ff:1a:e8:1c:c4:20:39:ec: 12:ff:9a:25:2b:b3:4e:62:6a:0d:7d:55:38:ac:8c:12:c3:0b: 28:6a:af:33:6b:04:c2:45:17:10:4d:a4:c8:34:f7:c0:40:1c: b1:fb:27:90:c5:dc:4d:e1:d0:87:e2:e4:26:bc:96:25:29:e3: 6d:a9:43:c4:0e:6a:48:27:64:84:fc:3b:b7:ad:e2:e1:2a:30: e9:20:0f:4e:14:43:07:36:19:be:29:9c:cd:7c:8d:10:69:c6: e9:28:ae:2d:3d:d6:51:73:e4:8f:8e:66:45:4d:a8:37:48:84: 4c:e7:5f:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUwNTMxMDQyMDI5WhcNMjUwNjA3MDQyMDI5WjAYMRYwFAYD VQQDEw02ODNhODM4ZC1kYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yHe4ciXYpAa2+b5qYECT/RB0wj+X1rbRrdizm0SoBw5QyKJbkZM/CDXmT9q xpVn8rHhWIg+BaUNnYebqjDJF+sQ9BXlr/XcOWCaAN1jjLOk8XRfnOeWJVOCoAAr MDVYszgQBDlxp/lo9xGXuAb37H9WWW7ghogySB2TSvULZ6ISvpkQM2zCMRvnpvuJ gQqpu9WTANB4ExtemXDqvfKjwP1RmJ9zdH61UDu9zeQm0pNi3B0WU670vlzV2i4I YjFl6nGj3UVnv+1CEWshQI7qn6pLYK0EJ44EIE6vQe55d7JqhpJ8iEZZY/rNPnvq 4dYSCMfGtqhdJyiOGrDeKDdrgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5uOlcL kgIK5/M32q1jJjBoZa1yMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU ajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFzW7l89X1B+/HrpRZ/P+YqrlfASJCnBVtE4O4VCb1GDmzX9lYa+G6 ifyoCjv8xlPhSBB5m/mRZz8Dto+4/nMKu7tt9v/hy5AJjJVlSLQfMGOQvlfIDZ6U 2z2G1H2yr1+kc67nkYpDuRRkvIhURnaYQWyj8LAWm5zDVxXxZBtbWqkk7VH/F8Zs /xroHMQgOewS/5olK7NOYmoNfVU4rIwSwwsoaq8zawTCRRcQTaTINPfAQByx+yeQ xdxN4dCH4uQmvJYlKeNtqUPEDmpIJ2SE/Du3reLhKjDpIA9OFEMHNhm+KZzNfI0Q acbpKK4tPdZRc+SPjmZFTag3SIRM5196 -----END CERTIFICATE-----Generated at Sat May 31 17:16:18 2025 by rpki-client