$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: F8PKqf4eyy8gOgPRHxQH8DzDETdDsvuDAoZV0VCoRGc= Subject key identifier: 15:F2:AF:52:BC:45:69:1D:5F:9D:E0:F3:F1:F0:25:D3:5E:E0:20:C1 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 2825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 2820 Signing time: Sun 08 Jun 2025 15:33:38 +0000 Manifest this update: Sun 08 Jun 2025 15:33:37 +0000 Manifest next update: Sun 15 Jun 2025 15:33:37 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: gosmjFQq/zKVpClvRYA8H8EKA3DHWbWnfCO72swqyYk=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10277 (0x2825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Jun 8 15:33:37 2025 GMT Not After : Jun 15 15:33:37 2025 GMT Subject: CN=6845ad51-41c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:ae:79:d2:0e:91:11:20:10:dc:be:0d:d4: 89:5c:bc:f9:2f:da:bf:7e:df:3e:ad:ab:f7:f5:22: 82:96:a1:e2:80:9f:cc:f2:43:3d:db:96:ab:08:1a: 35:ce:4f:2a:1c:1a:4c:eb:8f:2b:7d:a4:3f:a0:75: 36:f1:19:42:d2:85:87:29:28:8e:e5:07:08:48:81: 71:31:47:4c:b2:37:e4:03:4f:29:ac:97:98:c4:50: f6:7b:0f:07:ab:55:dc:3c:cb:1f:00:3d:d1:53:7d: 27:aa:f7:bb:8a:33:92:97:01:c1:5e:54:05:9e:f1: 06:64:6e:85:08:93:af:ee:c6:8f:65:5d:fc:e6:40: ce:e9:6d:92:3e:06:ed:45:51:f4:d6:48:ba:c5:f3: 9a:13:d5:85:b5:a8:2b:4a:b8:3c:1d:eb:ca:d7:e2: 7c:4c:74:81:6c:ff:5a:b5:25:1d:05:f6:3d:d3:94: 7f:38:1c:59:92:89:c4:7c:55:a0:35:5c:a3:82:f8: b1:d5:46:28:24:df:c6:e9:0f:c1:f8:f8:3e:9c:7f: 5f:b3:e2:1b:0d:e6:07:a9:38:13:6d:b0:7f:de:f7: 07:db:7c:a3:36:89:cc:96:e1:53:a1:02:e8:bf:ef: 65:f0:de:bf:96:66:26:de:56:80:ea:52:8f:9d:8d: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:AF:52:BC:45:69:1D:5F:9D:E0:F3:F1:F0:25:D3:5E:E0:20:C1 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:f6:4b:09:59:e5:96:f6:9d:b4:bb:7f:89:16:f1:55:e5: fd:fd:16:c3:b5:02:c1:2b:4c:f5:b1:8c:93:2d:5c:92:52:9a: 62:2f:23:df:f0:61:64:7e:a5:15:29:0b:9b:f5:c0:13:c6:eb: 69:82:33:fc:dc:9a:59:03:cb:85:fb:7d:d5:8a:d9:e5:9e:9f: 06:9b:11:9e:ba:d6:c8:49:4e:8b:48:75:2a:29:d0:52:36:54: 54:49:8e:ef:f2:7c:42:65:ba:ea:66:5f:b7:79:8e:fc:a9:1b: 68:25:70:07:36:09:1c:3d:4c:70:97:91:52:12:25:8d:10:e8: db:48:8e:c5:e5:45:ed:3b:9b:a2:a9:1b:d1:b7:bb:aa:6e:2a: 7f:70:b4:6b:48:71:ab:b4:e5:a8:2c:f7:d1:11:e6:8a:98:41: ea:02:52:ed:96:64:70:99:c2:01:78:69:21:ad:6f:2c:9b:a3: 31:c0:76:af:50:b1:49:3c:5a:6a:24:89:07:a3:87:31:7a:45: d3:12:24:f8:9c:4f:d7:46:0d:b8:ad:61:45:b3:3f:27:b3:be: 32:46:6d:1a:82:4c:13:bb:99:af:15:30:41:04:87:77:1a:e0: 2a:46:6a:70:ac:c3:a1:4a:f1:0d:87:cd:cd:6b:f4:e7:c5:09: a5:9a:d6:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUwNjA4MTUzMzM3WhcNMjUwNjE1MTUzMzM3WjAYMRYwFAYD VQQDEw02ODQ1YWQ1MS00MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6OuedIOkREgENy+DdSJXLz5L9q/ft8+rav39SKClqHigJ/M8kM925arCBo1 zk8qHBpM648rfaQ/oHU28RlC0oWHKSiO5QcISIFxMUdMsjfkA08prJeYxFD2ew8H q1XcPMsfAD3RU30nqve7ijOSlwHBXlQFnvEGZG6FCJOv7saPZV385kDO6W2SPgbt RVH01ki6xfOaE9WFtagrSrg8HevK1+J8THSBbP9atSUdBfY905R/OBxZkonEfFWg NVyjgvix1UYoJN/G6Q/B+Pg+nH9fs+IbDeYHqTgTbbB/3vcH23yjNonMluFToQLo v+9l8N6/lmYm3laA6lKPnY2AEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXyr1K8 RWkdX53g8/HwJdNe4CDBMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmnvZLCVnllvadtLt/iRbxVeX9/RbDtQLBK0z1sYyTLVySUppiLyPf 8GFkfqUVKQub9cATxutpgjP83JpZA8uF+33Vitnlnp8GmxGeutbISU6LSHUqKdBS NlRUSY7v8nxCZbrqZl+3eY78qRtoJXAHNgkcPUxwl5FSEiWNEOjbSI7F5UXtO5ui qRvRt7uqbip/cLRrSHGrtOWoLPfREeaKmEHqAlLtlmRwmcIBeGkhrW8sm6MxwHav ULFJPFpqJIkHo4cxekXTEiT4nE/XRg24rWFFsz8ns74yRm0agkwTu5mvFTBBBId3 GuAqRmpwrMOhSvENh83Na/TnxQmlmtYq -----END CERTIFICATE-----Generated at Sun Jun 8 21:35:28 2025 by rpki-client