$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: bBNrhXQ546TJAf8ZUUJvfQQBOqSJ4+bWsEUSGLFqw+0= Subject key identifier: B8:6C:C5:59:83:EC:16:D7:AD:73:84:23:D6:29:C3:9D:A9:25:5D:47 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 1053 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 104B Signing time: Mon 12 May 2025 17:19:41 +0000 Manifest this update: Mon 12 May 2025 17:19:41 +0000 Manifest next update: Mon 19 May 2025 17:19:41 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: wDp00QBWSfN9byf/cWhsRW9FUqtI5QtgwT9czw3vgI8=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: hG1fGJzQ3JbtXbpeIbWQ7QaLlc8Fngz5Q1TdRya0bg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4179 (0x1053) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: May 12 17:19:41 2025 GMT Not After : May 19 17:19:41 2025 GMT Subject: CN=68222dad-2055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:b5:19:40:81:f5:df:3a:65:51:62:97:b1: 95:e6:ff:d3:ae:cf:24:d9:99:0c:6e:d0:27:18:17: 71:52:e9:ab:76:b9:e6:30:e5:56:64:f6:78:2d:9c: 8b:00:79:b3:3a:f8:13:f1:11:d3:94:92:df:db:89: 75:26:55:71:c2:aa:44:3f:3e:bf:a5:bf:4b:4f:9f: 81:71:c5:b4:04:c1:04:f3:bd:34:dc:6f:2e:4a:a6: a8:e9:19:6e:de:68:79:d5:c1:88:55:f3:a4:04:f9: 27:f6:03:f4:98:1a:4c:f7:d6:88:54:13:4a:4a:b8: 78:b9:50:c7:81:59:2b:7b:54:cc:c4:d2:d2:ef:0e: 82:fb:7a:24:eb:98:dd:fa:75:e0:74:ea:b2:c2:84: b7:eb:44:67:66:75:f0:4a:c6:ac:dd:de:c0:76:a2: 00:d1:34:71:59:47:3b:a9:fc:15:6d:a3:f2:41:0c: 63:f9:d7:50:ca:cc:ed:72:8b:bf:77:b4:3f:36:eb: 9d:cb:df:02:40:49:ed:47:a6:db:14:a2:17:c9:11: 61:b9:48:72:b6:15:ae:40:9a:70:8e:0f:42:e7:11: d3:5e:e4:22:a5:af:61:aa:b1:ff:9c:01:74:85:dc: 55:15:4a:fa:36:59:93:0b:bb:f3:56:74:0e:0f:ec: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:C5:59:83:EC:16:D7:AD:73:84:23:D6:29:C3:9D:A9:25:5D:47 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e0:5b:9d:f9:3b:af:9b:a7:f9:38:0a:1d:1f:a7:c0:27:07: 64:df:09:39:65:7d:db:f6:78:35:42:73:72:4e:0a:ff:36:83: b0:cd:c2:42:44:fc:88:fa:2c:4e:44:11:a9:59:ad:1c:e4:30: c9:b4:f3:d3:27:59:3f:8d:42:cb:13:77:25:33:ba:09:0a:f1: f8:93:e2:2c:e1:3d:e8:28:e9:e1:12:65:86:69:0d:06:19:31: c0:71:24:32:16:ca:19:29:f2:62:5e:5f:02:f6:bb:c5:db:5e: bc:35:cc:2d:1c:40:d4:6d:b5:bd:66:56:b7:c9:f4:69:11:4b: 00:1c:e5:65:13:6c:2f:e2:0b:e1:f3:4d:83:e7:13:15:46:8b: 6a:70:e1:a6:f2:76:6c:c5:43:e8:95:04:fa:21:76:98:c7:7b: 6a:6f:3f:a8:de:30:0d:50:81:b2:0f:24:e9:8e:d7:e3:6b:f5: 00:8b:82:78:4c:f3:ff:0e:63:4e:a0:36:de:a7:fe:55:23:e2: c7:bb:6b:4c:52:d2:d6:86:73:a5:e0:a6:e9:34:c8:34:73:c6: bc:63:cd:be:f5:48:4c:5a:d2:a1:76:8d:42:5d:ca:df:fd:e6: ca:92:a5:8f:75:46:cb:b8:a5:25:c7:87:92:c6:75:d9:a4:0f: 1f:cb:23:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwNTEyMTcxOTQxWhcNMjUwNTE5MTcxOTQxWjAYMRYwFAYD VQQDEw02ODIyMmRhZC0yMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgm1GUCB9d86ZVFil7GV5v/Trs8k2ZkMbtAnGBdxUumrdrnmMOVWZPZ4LZyL AHmzOvgT8RHTlJLf24l1JlVxwqpEPz6/pb9LT5+BccW0BMEE87003G8uSqao6Rlu 3mh51cGIVfOkBPkn9gP0mBpM99aIVBNKSrh4uVDHgVkre1TMxNLS7w6C+3ok65jd +nXgdOqywoS360RnZnXwSsas3d7AdqIA0TRxWUc7qfwVbaPyQQxj+ddQysztcou/ d7Q/Nuudy98CQEntR6bbFKIXyRFhuUhythWuQJpwjg9C5xHTXuQipa9hqrH/nAF0 hdxVFUr6NlmTC7vzVnQOD+xggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhsxVmD 7BbXrXOEI9Ypw52pJV1HMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj4Fud+Tuvm6f5OAodH6fAJwdk3wk5ZX3b9ng1QnNyTgr/NoOwzcJC RPyI+ixORBGpWa0c5DDJtPPTJ1k/jULLE3clM7oJCvH4k+Is4T3oKOnhEmWGaQ0G GTHAcSQyFsoZKfJiXl8C9rvF2168NcwtHEDUbbW9Zla3yfRpEUsAHOVlE2wv4gvh 802D5xMVRotqcOGm8nZsxUPolQT6IXaYx3tqbz+o3jANUIGyDyTpjtfja/UAi4J4 TPP/DmNOoDbep/5VI+LHu2tMUtLWhnOl4KbpNMg0c8a8Y82+9UhMWtKhdo1CXcrf /ebKkqWPdUbLuKUlx4eSxnXZpA8fyyNf -----END CERTIFICATE-----Generated at Tue May 13 18:50:13 2025 by rpki-client