$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: hzE8eG/Zas7Z7u+WTsbvwmo1ISdL0WtBiLFE8PsJtMg= Subject key identifier: 92:17:74:8D:A3:82:ED:8E:5E:05:C7:B9:8F:07:C2:FF:81:B3:B6:E1 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 348C Signing time: Fri 30 May 2025 15:13:49 +0000 Manifest this update: Fri 30 May 2025 15:13:48 +0000 Manifest next update: Fri 06 Jun 2025 15:13:48 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: 4ZkPTi5yOP1tiF0ctH4SfgS9hrxtGsnZ/IeMmeppS98=) 2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=) 3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: May 30 15:13:48 2025 GMT Not After : Jun 6 15:13:48 2025 GMT Subject: CN=6839cb2d-d6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:41:54:93:fb:17:54:af:f2:ed:ef:89:37: 8f:f0:f8:1e:f5:b9:52:0f:e4:33:ad:dc:0d:b7:45: 4f:04:55:25:80:df:d6:74:9b:43:d0:d7:b0:b7:90: 4b:e4:3e:2d:65:5e:b5:d8:b7:45:cc:55:a4:f1:51: a4:6f:cd:4f:03:ac:ac:0d:10:12:d8:a6:52:5a:0b: 26:1a:ab:93:df:3c:9e:dc:9d:2d:1b:92:a5:9f:8d: 59:e6:cc:8d:a4:66:1d:9b:1f:41:31:a3:c4:18:62: d9:c9:1d:0b:98:83:7e:6c:bd:19:77:84:2c:e7:49: 0f:51:10:01:36:3f:2c:6f:cc:b0:34:1a:f6:56:6e: 49:65:3d:cb:74:43:05:3c:af:06:5f:bf:9e:dc:90: 25:f7:c3:12:c6:df:5d:29:b2:6f:42:c4:c0:e2:f0: 28:fd:c4:8b:5e:86:ab:2e:d5:d7:22:81:b5:f3:0f: 04:c9:68:3b:a9:b5:eb:6c:e3:a8:74:5d:68:0d:65: 12:2b:90:77:47:48:95:7d:cc:d0:f5:8b:8e:c9:5b: 71:01:2f:1e:1c:86:c4:6b:06:7e:2e:da:ac:15:51: 77:d0:72:23:96:29:02:63:9f:1c:5e:c5:93:95:39: e5:21:59:1d:6e:8f:7c:fd:d9:7a:7c:22:5a:29:c3: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:17:74:8D:A3:82:ED:8E:5E:05:C7:B9:8F:07:C2:FF:81:B3:B6:E1 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:79:a0:9f:54:ab:00:82:18:87:71:68:dd:67:bc:cc:4e:01: 83:32:e7:ec:cc:87:ed:b2:bf:5e:b6:8c:eb:f4:bd:a1:6c:d8: 8f:ad:80:0d:69:a4:9a:be:b8:2a:6a:54:f1:99:3d:e8:01:4c: 89:4e:17:6e:d3:11:fa:0b:08:06:87:ef:db:92:54:b0:d7:c6: 50:24:af:29:b3:d8:a0:98:c0:c8:76:78:b3:96:d9:c3:6a:f2: dc:03:02:81:25:cc:2c:77:39:44:41:cf:c7:dd:d4:3e:a7:45: 5c:b4:2c:e1:62:95:fe:70:48:8c:26:d5:7d:7f:ad:d0:44:d0: 5d:48:86:9f:21:35:c2:66:11:b7:66:1c:8c:34:1a:90:a9:c5: fb:fb:0d:7a:39:4a:fd:e0:2e:4c:95:37:41:b2:61:89:08:8a: da:93:e4:52:80:af:f7:7d:cc:c2:2e:69:53:3b:f8:a5:88:98: af:7a:61:e6:0f:17:69:cc:b2:4c:0a:8a:7d:e5:cc:f4:d1:b5: 43:17:65:44:a1:59:9c:bb:fa:69:55:4a:49:2e:1d:88:f4:46: c6:36:f4:de:b6:19:0f:61:36:6f:71:33:b5:f0:bd:4d:2a:80: c9:24:55:be:b5:38:92:83:4e:b8:4b:ca:3d:91:6c:9a:9e:51: ba:a8:85:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjUwNTMwMTUxMzQ4WhcNMjUwNjA2MTUxMzQ4WjAYMRYwFAYD VQQDEw02ODM5Y2IyZC1kNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnxBVJP7F1Sv8u3viTeP8Pge9blSD+QzrdwNt0VPBFUlgN/WdJtD0Newt5BL 5D4tZV612LdFzFWk8VGkb81PA6ysDRAS2KZSWgsmGquT3zye3J0tG5Kln41Z5syN pGYdmx9BMaPEGGLZyR0LmIN+bL0Zd4Qs50kPURABNj8sb8ywNBr2Vm5JZT3LdEMF PK8GX7+e3JAl98MSxt9dKbJvQsTA4vAo/cSLXoarLtXXIoG18w8EyWg7qbXrbOOo dF1oDWUSK5B3R0iVfczQ9YuOyVtxAS8eHIbEawZ+LtqsFVF30HIjlikCY58cXsWT lTnlIVkdbo98/dl6fCJaKcPRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIXdI2j gu2OXgXHuY8Hwv+Bs7bhMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQeaCfVKsAghiHcWjdZ7zMTgGDMufszIftsr9etozr9L2hbNiPrYAN aaSavrgqalTxmT3oAUyJThdu0xH6CwgGh+/bklSw18ZQJK8ps9igmMDIdnizltnD avLcAwKBJcwsdzlEQc/H3dQ+p0VctCzhYpX+cEiMJtV9f63QRNBdSIafITXCZhG3 ZhyMNBqQqcX7+w16OUr94C5MlTdBsmGJCIrak+RSgK/3fczCLmlTO/iliJivemHm DxdpzLJMCop95cz00bVDF2VEoVmcu/ppVUpJLh2I9EbGNvTethkPYTZvcTO18L1N KoDJJFW+tTiSg064S8o9kWyanlG6qIWH -----END CERTIFICATE-----Generated at Sat May 31 14:58:06 2025 by rpki-client