$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: sWDnOiRp4lehzucDu8aGh8V+ZM4rxWW9oJ4+keZOKuA= Subject key identifier: C7:FE:00:95:31:C6:9A:32:FB:2B:D1:52:E9:A1:01:EC:F5:84:0A:75 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 0391 Signing time: Sat 31 May 2025 01:00:03 +0000 Manifest this update: Sat 31 May 2025 01:00:03 +0000 Manifest next update: Sat 07 Jun 2025 01:00:03 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: aC0YTviO7O2D3IDfW+nRvADcO5i8HVVtZ96TB4TqklU=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: May 31 01:00:03 2025 GMT Not After : Jun 7 01:00:03 2025 GMT Subject: CN=683a5493-e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:ef:fb:9d:2b:0f:f1:36:32:e9:f4:d6:ea: 18:87:1a:94:a9:44:36:19:8a:c5:d8:e1:f9:09:43: a4:42:d3:b1:45:9b:f4:3d:d6:07:85:e9:19:f0:db: 8a:a0:c8:83:c4:a2:e1:fa:4e:3e:de:89:c9:1e:0c: 68:da:93:c8:e2:43:84:29:20:fe:f1:28:e2:f8:91: a4:5d:d1:3c:06:d6:08:c8:fe:f8:52:fd:9b:e0:87: b5:f2:9b:18:50:bd:a2:e0:44:b9:ac:87:77:08:60: b6:a6:e9:95:9d:80:ac:ea:b8:49:29:ea:10:9b:4f: 71:28:b8:e5:84:71:47:48:2f:49:8c:88:0c:6b:2c: 97:2a:f9:82:fe:93:87:28:cb:5b:cf:a3:74:41:05: 27:5b:f4:88:ff:0f:2c:a8:96:74:03:c4:54:6d:61: 8f:8a:f1:d7:06:6a:0a:54:fe:33:ac:b1:4f:8d:36: 1d:ed:c2:0f:2f:89:d8:0c:75:a3:61:51:37:55:84: e3:98:88:69:45:b6:82:31:c8:e9:ad:44:95:f4:90: 35:12:de:e8:20:3f:b8:5d:31:d0:5f:6b:9e:8b:94: 24:f8:5a:84:c6:8f:59:26:43:6c:6b:6d:34:b5:50: eb:00:8c:62:6f:48:3e:94:a4:08:09:bd:a2:08:ce: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FE:00:95:31:C6:9A:32:FB:2B:D1:52:E9:A1:01:EC:F5:84:0A:75 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:ae:34:c8:44:57:7e:b0:66:19:42:b8:bb:6c:89:b9:5b: f5:d6:3e:ff:40:b2:27:29:12:c0:8e:82:d3:7c:32:b0:ac:9d: 98:f8:22:23:dd:57:81:52:9d:0d:fb:b0:b5:a0:d2:eb:09:e7: 63:ee:3e:ff:cf:03:bf:fa:b5:6d:92:14:eb:3b:91:ab:b2:43: 3c:2d:2e:94:e2:e1:7f:29:8d:48:80:b1:87:55:3b:3a:5f:64: 0a:fa:b0:0b:2f:33:ed:c0:c8:69:e5:31:45:7a:12:59:99:7f: 6f:7f:25:2b:44:ea:11:75:1b:d7:79:c5:8e:29:c1:46:22:bf: bc:04:26:90:31:0e:90:51:bc:64:90:27:42:6a:b9:bb:86:05: d4:44:de:d5:0a:d7:7a:c7:9d:98:3d:b3:8f:11:ec:b6:d4:ce: 30:3b:66:59:9c:08:3f:6e:9b:66:d9:e4:66:af:e5:ae:df:ea: 64:d5:24:27:20:1c:f0:fe:03:ad:eb:4b:bf:33:9c:ea:c4:66: 07:09:08:67:ad:16:45:ca:6c:f7:83:73:dd:fa:17:8b:1d:aa: bc:3d:96:c7:68:c5:b6:37:70:fd:49:f7:06:96:dd:a3:b5:21: dc:39:6b:07:50:0b:51:34:5e:a5:d0:2c:fc:b7:a3:9f:c9:cc: ff:b8:75:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwNTMxMDEwMDAzWhcNMjUwNjA3MDEwMDAzWjAYMRYwFAYD VQQDEw02ODNhNTQ5My1lMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm3v+50rD/E2Mun01uoYhxqUqUQ2GYrF2OH5CUOkQtOxRZv0PdYHhekZ8NuK oMiDxKLh+k4+3onJHgxo2pPI4kOEKSD+8Sji+JGkXdE8BtYIyP74Uv2b4Ie18psY UL2i4ES5rId3CGC2pumVnYCs6rhJKeoQm09xKLjlhHFHSC9JjIgMayyXKvmC/pOH KMtbz6N0QQUnW/SI/w8sqJZ0A8RUbWGPivHXBmoKVP4zrLFPjTYd7cIPL4nYDHWj YVE3VYTjmIhpRbaCMcjprUSV9JA1Et7oID+4XTHQX2uei5Qk+FqExo9ZJkNsa200 tVDrAIxib0g+lKQICb2iCM4OWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf+AJUx xpoy+yvRUumhAez1hAp1MB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiwa40yERXfrBmGUK4u2yJuVv11j7/QLInKRLAjoLTfDKwrJ2Y+CIj 3VeBUp0N+7C1oNLrCedj7j7/zwO/+rVtkhTrO5GrskM8LS6U4uF/KY1IgLGHVTs6 X2QK+rALLzPtwMhp5TFFehJZmX9vfyUrROoRdRvXecWOKcFGIr+8BCaQMQ6QUbxk kCdCarm7hgXURN7VCtd6x52YPbOPEey21M4wO2ZZnAg/bptm2eRmr+Wu3+pk1SQn IBzw/gOt60u/M5zqxGYHCQhnrRZFymz3g3Pd+heLHaq8PZbHaMW2N3D9SfcGlt2j tSHcOWsHUAtRNF6l0Cz8t6Ofycz/uHUx -----END CERTIFICATE-----Generated at Sat May 31 16:28:41 2025 by rpki-client