$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json) Hash identifier: xVAMpge6xvQpeeIbtMfsSIxWwBNqCVQfBzuNjKv6XUs= Subject key identifier: 68:99:B1:41:DD:E8:3D:35:86:49:D4:D4:4C:71:10:F4:FA:CF:0E:B4 Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft Manifest number: 0529 Signing time: Sat 10 May 2025 23:07:14 +0000 Manifest this update: Sat 10 May 2025 23:07:13 +0000 Manifest next update: Sat 17 May 2025 23:07:13 +0000 Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: 0RxllR+hq7ttCx61WELgzLO10cfN5HEfvD1hhP31IoY=) 2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: Xe7orzQUYbTeZbeATWUGaYq/rRlqzWXLpAilQy3hdVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Validity Not Before: May 10 23:07:13 2025 GMT Not After : May 17 23:07:13 2025 GMT Subject: CN=681fdc21-960f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:78:8e:c8:b5:61:b1:98:96:94:6f:eb:e4: ef:c4:3f:99:9f:10:fa:d5:59:4f:ee:e1:98:e1:b6: f8:96:80:e9:aa:73:10:e4:9b:ee:b5:7f:cf:c4:48: d7:93:41:67:fe:5f:a3:ff:f8:a1:a8:36:84:51:59: 7f:57:87:9b:d8:01:c7:cd:06:b5:b7:46:89:1f:1a: 8f:f1:c9:a4:52:ce:be:f8:a3:ed:c9:b5:21:2f:99: 45:40:16:de:e2:dc:d5:ef:dc:24:b7:ee:d2:4e:68: cb:fb:36:d7:41:a7:b7:c0:71:53:0b:36:9b:0c:27: 76:60:82:86:3d:8b:db:1a:c3:54:3e:38:67:cd:42: 40:b7:28:57:fb:96:89:ba:07:0e:e1:1f:7d:27:de: 02:b5:8d:3b:7a:f2:58:c3:a1:d9:a2:2d:27:f5:68: 29:b0:48:00:52:05:d4:91:60:03:56:57:e8:6e:2c: ef:ec:ae:46:59:28:cf:8f:16:78:ee:02:9e:42:3f: b7:fe:9a:56:02:59:97:f1:17:6c:f6:07:0f:5a:31: cf:55:5f:1a:32:0d:0b:c9:80:3d:25:e7:34:6c:e6: 86:f6:03:96:99:47:e6:95:02:4f:9e:ca:40:ea:6d: d7:00:b3:60:f1:eb:f6:5a:fe:3b:01:4e:3e:ab:d9: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:B1:41:DD:E8:3D:35:86:49:D4:D4:4C:71:10:F4:FA:CF:0E:B4 X509v3 Authority Key Identifier: keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9e:6e:bc:a7:ec:9a:a9:7d:59:36:09:6d:1b:17:d9:4c:ca: 28:ef:b0:8d:6d:27:66:8d:df:bf:d5:52:43:c5:a5:67:5b:94: e7:f6:4a:fd:16:5f:3f:25:09:54:7a:27:81:fe:be:7d:d6:90: 93:7b:6e:e9:6d:e2:b0:ae:31:41:44:14:f7:44:a2:ef:10:bf: ae:48:9c:0a:07:18:10:bf:7c:c2:66:fb:91:6d:80:de:0c:d3: 72:43:c1:9a:b8:05:12:1e:ab:d2:37:5d:55:7c:5a:a4:f7:98: a7:2e:ff:9a:97:d9:ba:7c:0d:f6:fb:c5:13:bc:4b:26:67:a8: 77:ac:1e:7d:8f:bb:3a:01:38:da:c7:e4:4b:6f:99:72:d5:87: d3:79:c8:c9:24:2e:cb:27:23:7d:ee:fa:c1:22:0e:0d:e7:27: 27:bd:f2:92:44:9a:56:cf:c2:ec:fc:db:fc:a9:83:bc:4d:00: a4:4f:03:a0:5b:17:45:69:98:cf:57:9c:e5:ff:4a:96:35:d9: 88:f9:f8:32:48:cc:c8:a3:85:31:3b:4a:26:95:24:d2:b4:08: 23:10:a8:a3:e8:ae:68:ad:0a:12:f8:36:6e:59:4f:03:b2:77: 28:92:05:39:e8:24:33:48:a6:b6:9d:42:21:e9:b9:b9:96:12: 44:c3:98:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC RTBFN0YyQkMwHhcNMjUwNTEwMjMwNzEzWhcNMjUwNTE3MjMwNzEzWjAYMRYwFAYD VQQDEw02ODFmZGMyMS05NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g54jsi1YbGYlpRv6+TvxD+ZnxD61VlP7uGY4bb4loDpqnMQ5JvutX/PxEjX k0Fn/l+j//ihqDaEUVl/V4eb2AHHzQa1t0aJHxqP8cmkUs6++KPtybUhL5lFQBbe 4tzV79wkt+7STmjL+zbXQae3wHFTCzabDCd2YIKGPYvbGsNUPjhnzUJAtyhX+5aJ ugcO4R99J94CtY07evJYw6HZoi0n9WgpsEgAUgXUkWADVlfobizv7K5GWSjPjxZ4 7gKeQj+3/ppWAlmX8Rds9gcPWjHPVV8aMg0LyYA9Jec0bOaG9gOWmUfmlQJPnspA 6m3XALNg8ev2Wv47AU4+q9kUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiZsUHd 6D01hknU1ExxEPT6zw60MB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5 QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RENGQi9BQUVBMERDMEY5QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1 QkFKbmFnT2hfYTYtRG44cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADnm68p+yaqX1ZNgltGxfZTMoo77CNbSdmjd+/1VJDxaVnW5Tn9kr9 Fl8/JQlUeieB/r591pCTe27pbeKwrjFBRBT3RKLvEL+uSJwKBxgQv3zCZvuRbYDe DNNyQ8GauAUSHqvSN11VfFqk95inLv+al9m6fA32+8UTvEsmZ6h3rB59j7s6ATja x+RLb5ly1YfTecjJJC7LJyN97vrBIg4N5ycnvfKSRJpWz8Ls/Nv8qYO8TQCkTwOg WxdFaZjPV5zl/0qWNdmI+fgySMzIo4UxO0omlSTStAgjEKij6K5orQoS+DZuWU8D sncokgU56CQzSKa2nUIh6bm5lhJEw5jw -----END CERTIFICATE-----Generated at Mon May 12 14:48:24 2025 by rpki-client