$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: gyY8ezcqDSOALHgMARRrxSU+MncAH237qgsGEgbkaTA= Subject key identifier: C7:FA:8E:C8:0F:74:65:05:53:0E:10:43:A6:0A:C2:1B:22:02:DE:09 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 0881 Signing time: Wed 14 May 2025 20:44:09 +0000 Manifest this update: Wed 14 May 2025 20:44:08 +0000 Manifest next update: Wed 21 May 2025 20:44:08 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: OG/Qb6RpTvFhvtWxO0k6tq6PrCK2qZwTz20eovMGEKY=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: hcolG+bA9kqJJPc6IsihTDFxcpdloDt804WFQ6sb6CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: May 14 20:44:08 2025 GMT Not After : May 21 20:44:08 2025 GMT Subject: CN=68250099-5ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:86:99:36:71:4c:03:9f:61:f7:4f:2a:ad: f5:86:eb:06:50:33:44:33:95:54:69:40:8b:6a:47: 9d:8c:69:9d:74:5c:b0:e9:53:88:22:aa:fe:86:b5: ae:fd:01:0d:23:9f:a3:4a:b8:fb:e3:24:83:67:44: 75:06:8a:ce:92:d3:30:45:c9:ab:60:67:ac:76:ca: 8a:67:52:ea:19:1f:cc:b5:27:95:a3:e3:10:1d:6d: 9c:1c:37:73:ed:c2:e0:56:05:ed:00:8b:76:7a:95: 33:17:3d:9f:ff:c9:83:b4:d4:dd:da:4a:20:e2:49: 39:02:57:f2:4d:9b:ce:f2:c2:14:31:99:39:d5:39: 56:55:aa:e0:69:3d:8b:3d:1b:98:f3:87:af:e0:97: 7c:e6:5a:bb:2d:5b:25:d9:8d:b5:92:5d:f4:3c:76: 96:04:ac:d6:23:df:db:fe:34:fe:d1:fc:97:43:a4: 30:3d:a2:bc:0e:68:57:34:a0:35:47:af:ee:f1:7d: 02:9b:75:3c:da:33:5b:84:2c:10:4b:be:60:a9:60: 94:2a:0f:c4:44:6a:0d:a2:90:78:ce:8b:1c:06:91: 04:53:3c:4b:3a:b2:86:c6:f4:68:39:8c:66:2f:66: 5f:58:2d:d1:37:85:ca:34:2f:e9:21:83:30:69:c9: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:8E:C8:0F:74:65:05:53:0E:10:43:A6:0A:C2:1B:22:02:DE:09 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a4:60:81:4f:61:17:4c:c8:cc:89:00:3a:31:b9:f8:e8:bc: dc:44:9b:f7:1a:ef:32:f1:c6:dc:26:d7:e3:7f:a3:7e:0a:18: 23:19:30:a2:45:2d:3c:e2:01:af:bc:ee:e5:3f:48:40:fd:12: d9:22:29:7c:5a:e7:bc:10:3f:9d:e3:c3:39:dd:44:b1:9f:38: b3:46:30:a5:bf:ef:a3:6b:07:e5:f4:56:f5:1a:e0:2c:ec:8f: e5:b5:a0:82:4a:b8:76:61:b5:b8:44:3b:e9:28:2c:0f:d9:b7: 13:76:d5:f9:f9:56:01:3e:02:54:28:52:51:d5:59:92:60:46: 32:78:17:17:1b:03:11:f5:4b:0a:99:10:76:d2:a7:52:82:5f: 82:5e:3a:53:75:c9:f5:8c:8b:5b:02:ca:a0:00:6b:d8:88:e9: cd:0a:fc:54:4f:96:8a:88:f1:59:17:bd:88:04:8f:9e:2c:74: ed:19:8f:15:de:de:8a:b7:9e:1e:a8:a3:76:d7:97:5e:f5:07: a6:ef:99:18:a2:63:97:a3:b5:b4:45:1c:36:a5:dc:63:08:a8: 7d:76:89:3e:87:5d:96:af:ad:94:e7:42:a3:95:f9:53:7e:50: 3e:ab:c6:23:a3:e3:e3:89:61:59:71:c5:8c:73:0a:dd:5c:55: 9e:8b:18:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwNTE0MjA0NDA4WhcNMjUwNTIxMjA0NDA4WjAYMRYwFAYD VQQDEw02ODI1MDA5OS01ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy+GmTZxTAOfYfdPKq31husGUDNEM5VUaUCLakedjGmddFyw6VOIIqr+hrWu /QENI5+jSrj74ySDZ0R1BorOktMwRcmrYGesdsqKZ1LqGR/MtSeVo+MQHW2cHDdz 7cLgVgXtAIt2epUzFz2f/8mDtNTd2kog4kk5AlfyTZvO8sIUMZk51TlWVargaT2L PRuY84ev4Jd85lq7LVsl2Y21kl30PHaWBKzWI9/b/jT+0fyXQ6QwPaK8DmhXNKA1 R6/u8X0Cm3U82jNbhCwQS75gqWCUKg/ERGoNopB4zoscBpEEUzxLOrKGxvRoOYxm L2ZfWC3RN4XKNC/pIYMwaclWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf6jsgP dGUFUw4QQ6YKwhsiAt4JMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKpGCBT2EXTMjMiQA6Mbn46LzcRJv3Gu8y8cbcJtfjf6N+ChgjGTCi RS084gGvvO7lP0hA/RLZIil8Wue8ED+d48M53USxnzizRjClv++jawfl9Fb1GuAs 7I/ltaCCSrh2YbW4RDvpKCwP2bcTdtX5+VYBPgJUKFJR1VmSYEYyeBcXGwMR9UsK mRB20qdSgl+CXjpTdcn1jItbAsqgAGvYiOnNCvxUT5aKiPFZF72IBI+eLHTtGY8V 3t6Kt54eqKN215de9Qem75kYomOXo7W0RRw2pdxjCKh9dok+h12Wr62U50KjlflT flA+q8Yjo+PjiWFZccWMcwrdXFWeixjU -----END CERTIFICATE-----Generated at Thu May 15 23:21:39 2025 by rpki-client