$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: FbpZQgDDHhjbDoSZhRApkR5SBEWvNeXQifdW+XjdVG4= Subject key identifier: C9:DC:0B:6B:F8:A5:4E:86:DA:D1:A9:F6:82:9E:AA:E9:84:7D:76:80 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 04B6 Signing time: Sat 31 May 2025 00:09:25 +0000 Manifest this update: Sat 31 May 2025 00:09:24 +0000 Manifest next update: Sat 07 Jun 2025 00:09:24 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: +fxLgtGRZh4j1R+555YnuKKjluFb+vht0ZqP9WSyfD4=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: May 31 00:09:24 2025 GMT Not After : Jun 7 00:09:24 2025 GMT Subject: CN=683a48b4-ed2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:8e:19:46:b7:d5:47:e7:d6:bc:f1:c1:6f: 64:e4:b4:af:ee:04:78:af:ca:da:73:3f:d7:15:4b: 23:7c:c2:c7:a0:21:89:f5:b5:4b:ff:e7:d3:d0:bf: 72:0d:df:ef:ce:c0:4e:d5:f0:08:0c:df:4e:76:ce: 01:6e:10:31:f4:0d:67:3e:e6:40:35:c4:41:02:af: da:ee:16:12:db:4d:fa:cf:61:5b:d2:41:f8:83:eb: 0d:4c:86:87:09:37:4c:94:f2:b5:2b:60:87:28:d1: 8d:ff:4e:85:af:47:b2:21:8f:d3:77:e3:4b:60:99: 4b:c4:0f:ea:27:5d:61:f0:1e:ae:ab:93:c1:8d:d1: 2c:e7:df:7c:a9:12:be:f6:34:51:80:fc:41:82:66: d3:f4:8d:59:0d:df:d3:9f:05:d5:ba:64:dd:40:25: ac:f0:f7:79:47:75:24:14:ef:5c:bf:48:fc:d9:33: e4:ed:66:19:74:2a:e1:ad:f4:ed:8b:95:9c:a6:33: fc:cd:61:b0:21:90:17:2c:6e:47:b2:14:ef:05:a1: f0:57:aa:31:bb:8c:4f:ee:e4:19:e7:ba:50:35:17: ec:2b:60:07:23:b2:3c:17:5b:27:df:58:1d:85:db: 50:2a:fa:0e:92:92:fc:42:63:4d:f2:b8:02:8a:54: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:0B:6B:F8:A5:4E:86:DA:D1:A9:F6:82:9E:AA:E9:84:7D:76:80 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:54:66:bd:94:73:59:53:f3:c7:5e:eb:1f:60:9e:be:ce:2c: fa:4a:de:e0:12:30:54:7a:66:1f:73:9c:55:9a:c9:b8:4e:a1: 45:43:c9:b0:9b:7e:a1:6d:5a:ab:3e:56:3b:c8:43:54:5f:b6: 0d:b3:66:dd:17:54:15:a2:b0:97:f8:bc:8e:7f:ea:3c:33:58: db:32:55:84:f3:35:64:c0:de:21:47:1a:f3:ab:84:a3:ad:f2: 0c:7e:f8:63:78:83:25:57:26:84:88:6d:47:90:66:2e:53:22: 00:de:ba:cc:b4:9c:c6:b5:37:21:e8:4f:0e:05:28:25:1b:68: f2:39:35:e0:c3:14:0c:d1:bf:d3:4d:30:e0:0c:74:8b:70:d0: 24:46:e2:77:d8:3f:86:75:23:85:5b:aa:f6:e6:b1:7d:46:43: 64:d2:a9:81:81:d0:a3:8d:cf:ac:34:5d:8a:50:c0:47:33:b9: cd:15:e8:f9:54:94:be:56:33:f9:ad:5a:01:bf:54:3c:1e:a3: 8b:eb:b8:db:85:77:6b:12:72:b3:0c:b2:96:4e:a5:0c:62:73: 0c:07:5f:c9:b4:8d:6d:ac:ba:a6:42:74:a9:b6:b1:e0:b1:d5: 5f:d5:8f:13:17:af:ab:1a:53:38:6a:3a:2d:5d:90:8f:79:c6: 64:e5:3d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUwNTMxMDAwOTI0WhcNMjUwNjA3MDAwOTI0WjAYMRYwFAYD VQQDEw02ODNhNDhiNC1lZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9uOGUa31Ufn1rzxwW9k5LSv7gR4r8racz/XFUsjfMLHoCGJ9bVL/+fT0L9y Dd/vzsBO1fAIDN9Ods4BbhAx9A1nPuZANcRBAq/a7hYS2036z2Fb0kH4g+sNTIaH CTdMlPK1K2CHKNGN/06Fr0eyIY/Td+NLYJlLxA/qJ11h8B6uq5PBjdEs5998qRK+ 9jRRgPxBgmbT9I1ZDd/TnwXVumTdQCWs8Pd5R3UkFO9cv0j82TPk7WYZdCrhrfTt i5WcpjP8zWGwIZAXLG5HshTvBaHwV6oxu4xP7uQZ57pQNRfsK2AHI7I8F1sn31gd hdtQKvoOkpL8QmNN8rgCilQtbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMncC2v4 pU6G2tGp9oKequmEfXaAMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADVGa9lHNZU/PHXusfYJ6+ziz6St7gEjBUemYfc5xVmsm4TqFFQ8mw m36hbVqrPlY7yENUX7YNs2bdF1QVorCX+LyOf+o8M1jbMlWE8zVkwN4hRxrzq4Sj rfIMfvhjeIMlVyaEiG1HkGYuUyIA3rrMtJzGtTch6E8OBSglG2jyOTXgwxQM0b/T TTDgDHSLcNAkRuJ32D+GdSOFW6r25rF9RkNk0qmBgdCjjc+sNF2KUMBHM7nNFej5 VJS+VjP5rVoBv1Q8HqOL67jbhXdrEnKzDLKWTqUMYnMMB1/JtI1trLqmQnSptrHg sdVf1Y8TF6+rGlM4ajotXZCPecZk5T19 -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client