$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: yaBRZslKv9zQ1OdouuOkNFASVJ9O0/EWEF3MKILg+U4= Subject key identifier: 39:59:86:79:06:8A:BD:0E:B2:BA:27:56:7E:93:B9:E1:0D:F9:CA:B0 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 347B Signing time: Wed 14 May 2025 14:41:00 +0000 Manifest this update: Wed 14 May 2025 14:41:00 +0000 Manifest next update: Wed 21 May 2025 14:41:00 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: j4ZbFwzLciKAsue5xQ3paNdHtMfvFz53xMhNGfr/JkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: May 14 14:41:00 2025 GMT Not After : May 21 14:41:00 2025 GMT Subject: CN=6824ab7c-223e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:63:61:c4:fb:31:23:60:96:6e:99:1b:47: 73:dd:72:fc:80:df:96:e0:7f:f9:0e:10:df:0f:a2: 76:db:5c:28:e9:48:be:e5:9e:dc:12:bc:75:1c:49: e3:80:8b:51:d2:fe:91:fd:84:61:f3:6d:6b:cd:5f: e0:8c:53:1a:4f:96:5d:bc:74:25:28:fe:91:3d:07: ff:cb:42:34:dd:39:df:04:26:fd:a7:f8:24:31:c7: 26:1e:28:1b:1c:04:c2:cf:53:00:5f:5c:5b:bb:2b: 86:b0:6c:ce:72:0e:cc:73:24:be:98:3b:00:37:b2: dc:47:08:b3:ab:52:35:7e:a7:f0:fb:32:ee:ce:a5: 42:94:d9:82:f3:ca:50:42:d7:d3:f4:50:49:9f:0d: 39:c7:99:59:af:ba:be:e9:51:6a:78:d4:46:17:00: a7:71:a5:85:24:5d:a9:56:09:85:55:f3:b7:79:d4: d6:28:70:2e:87:ab:bc:82:0a:3f:3b:20:a4:ca:86: 59:8c:26:74:c6:98:35:ac:35:9a:5f:e7:14:59:ec: e1:e7:ce:25:2d:78:61:58:95:c2:42:31:f2:18:00: 1b:03:b5:79:99:b4:74:84:e7:26:c0:26:9d:72:a1: 60:d7:70:c6:0f:dd:e4:8d:71:55:62:97:af:e5:27: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:59:86:79:06:8A:BD:0E:B2:BA:27:56:7E:93:B9:E1:0D:F9:CA:B0 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:57:60:f1:b2:00:1a:55:8c:1b:b0:c6:28:1f:35:08:60: a6:0c:83:9e:4d:79:d8:07:33:4f:64:e5:3f:67:e7:bb:6a:a0: 53:a0:0a:1c:7e:88:a8:4f:4c:7b:07:3a:70:57:3a:30:4f:6b: c1:e2:20:a3:fe:d6:3d:ea:df:86:9d:2f:42:2b:12:37:bd:e6: 8e:1d:4e:04:10:46:46:7c:a5:96:be:36:aa:79:11:11:1d:dc: 6d:d1:03:f0:6b:a2:20:94:0f:cc:e9:a7:1d:7e:37:4f:5f:e2: 4b:ca:da:5b:63:e8:e5:5d:3a:34:20:1a:8a:23:90:db:a8:fa: 56:59:8e:5a:8a:7b:5d:71:8d:84:4b:d5:57:cb:7a:b4:d0:e6: 64:62:43:24:a9:8f:8d:a1:23:26:72:4f:04:d1:0c:9c:79:67: 75:43:fb:fd:ab:de:47:38:bf:7a:af:b3:6f:9b:51:24:11:6c: e1:19:e9:26:72:a6:ae:0d:8a:87:31:23:75:4a:c3:d6:71:3b: f7:a0:b7:12:98:6f:47:4c:4e:83:9d:ca:92:c2:b6:66:57:23: 0d:40:a6:b8:ae:94:09:d5:2a:f2:df:c3:2b:17:92:97:39:bb: 4c:a6:15:53:a0:cc:5b:5d:1b:47:bd:dd:c0:db:70:d1:1d:e4: 6b:32:ed:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUwNTE0MTQ0MTAwWhcNMjUwNTIxMTQ0MTAwWjAYMRYwFAYD VQQDEw02ODI0YWI3Yy0yMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+BjYcT7MSNglm6ZG0dz3XL8gN+W4H/5DhDfD6J221wo6Ui+5Z7cErx1HEnj gItR0v6R/YRh821rzV/gjFMaT5ZdvHQlKP6RPQf/y0I03TnfBCb9p/gkMccmHigb HATCz1MAX1xbuyuGsGzOcg7McyS+mDsAN7LcRwizq1I1fqfw+zLuzqVClNmC88pQ QtfT9FBJnw05x5lZr7q+6VFqeNRGFwCncaWFJF2pVgmFVfO3edTWKHAuh6u8ggo/ OyCkyoZZjCZ0xpg1rDWaX+cUWezh584lLXhhWJXCQjHyGAAbA7V5mbR0hOcmwCad cqFg13DGD93kjXFVYpev5Sfi7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlZhnkG ir0OsronVn6TueEN+cqwMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSnldg8bIAGlWMG7DGKB81CGCmDIOeTXnYBzNPZOU/Z+e7aqBToAoc foioT0x7BzpwVzowT2vB4iCj/tY96t+GnS9CKxI3veaOHU4EEEZGfKWWvjaqeRER Hdxt0QPwa6IglA/M6acdfjdPX+JLytpbY+jlXTo0IBqKI5DbqPpWWY5aintdcY2E S9VXy3q00OZkYkMkqY+NoSMmck8E0QyceWd1Q/v9q95HOL96r7Nvm1EkEWzhGekm cqauDYqHMSN1SsPWcTv3oLcSmG9HTE6DncqSwrZmVyMNQKa4rpQJ1Sry38MrF5KX ObtMphVToMxbXRtHvd3A23DRHeRrMu2W -----END CERTIFICATE-----Generated at Thu May 15 12:40:20 2025 by rpki-client