$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: j0E8dTJuPIP1w4PyIw7Og0wXqE0j6ptAeHb4pEj6psQ= Subject key identifier: 51:77:D9:71:4E:5D:BC:A4:3C:0B:91:D3:77:25:AF:C2:8B:AA:3C:65 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B63 Signing time: Wed 14 May 2025 19:12:16 +0000 Manifest this update: Wed 14 May 2025 19:12:16 +0000 Manifest next update: Wed 21 May 2025 19:12:16 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: 8vnYdyJxVakv+dxWlDYj7Rk9Ia4vhZxCB6DNFZMPvxM=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: May 14 19:12:16 2025 GMT Not After : May 21 19:12:16 2025 GMT Subject: CN=6824eb10-347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:df:95:ca:c9:9b:36:9f:36:40:47:13:2e: 14:1e:58:0b:b4:f6:a1:a2:3f:20:40:d6:d8:59:88: 98:71:23:0d:9a:33:d3:e4:28:f5:5e:f0:e4:af:bb: df:a6:fa:13:3d:29:9e:cf:e6:0d:48:4e:d0:01:94: fc:7c:78:79:c2:0a:ba:3f:13:dd:7f:12:47:22:c1: 05:e8:22:fa:f2:89:9b:b4:9e:12:b3:fb:92:d3:93: 36:fb:61:8d:3a:fb:76:82:af:76:7c:be:6d:11:a6: 18:65:86:38:89:ad:65:b0:04:a6:92:be:f3:e9:e1: c1:65:da:b2:3d:a7:53:a4:e7:35:64:34:64:6a:21: 6f:68:ef:c9:b7:c5:12:1d:a7:c5:e7:71:46:7c:ac: 81:41:23:f5:db:86:2e:8d:00:fa:81:2f:80:ba:aa: 03:27:61:73:25:d2:ff:24:17:ae:ab:8f:92:c9:82: c3:15:29:80:6b:2f:47:70:12:38:36:bb:5b:db:6c: 20:38:8c:2d:1d:8e:cf:ab:7f:e0:9d:ae:fb:12:e2: 62:27:5d:21:be:c2:bd:4c:b6:a9:55:6c:6f:55:8e: ea:37:72:44:59:18:5d:a7:90:42:17:d5:c9:9c:f2: 70:ed:a3:ad:0a:1e:f3:1a:04:a9:79:7c:7d:7c:70: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:D9:71:4E:5D:BC:A4:3C:0B:91:D3:77:25:AF:C2:8B:AA:3C:65 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:4f:65:22:8c:0d:c1:e5:8b:13:08:ee:a3:ab:90:a3:02:55: 98:af:a6:3b:08:7c:45:c7:82:ad:77:79:40:72:d6:b1:d1:32: db:a9:c7:86:8b:6e:ad:18:4a:60:23:d6:32:a8:5b:70:c9:9e: d4:80:1c:3a:8a:ca:13:74:be:a4:9b:fa:70:d6:1a:65:30:23: af:58:13:52:a6:eb:4b:84:7f:f8:99:f6:e7:42:e1:da:d6:a1: f0:48:6b:5d:bd:89:6c:fb:63:42:94:f8:75:51:2b:24:e0:72: 3c:7d:ce:f9:da:df:9c:65:86:36:43:f5:09:d6:37:3b:36:f5: 5d:24:63:89:23:4e:65:7e:be:e3:5c:ca:6e:71:fa:d7:a5:dc: bd:b6:9f:35:4f:53:dc:21:b4:05:19:47:b1:79:9a:24:a6:3a: 7c:8c:07:ae:a5:0d:99:63:45:72:4f:94:c2:89:a6:e0:97:89: 65:e6:2c:cf:a2:3f:51:27:87:37:67:01:1b:91:4d:e6:4b:05: 6a:d5:ff:77:c7:9e:1a:51:03:cf:80:45:24:06:40:2b:cc:c8: fc:e6:33:ae:77:26:68:61:c0:16:71:81:05:52:19:58:56:f7: 6c:bd:b1:10:6e:71:14:76:65:4c:45:89:47:4b:76:aa:c3:6c: 12:7a:c5:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwNTE0MTkxMjE2WhcNMjUwNTIxMTkxMjE2WjAYMRYwFAYD VQQDEw02ODI0ZWIxMC0zNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn3flcrJmzafNkBHEy4UHlgLtPahoj8gQNbYWYiYcSMNmjPT5Cj1XvDkr7vf pvoTPSmez+YNSE7QAZT8fHh5wgq6PxPdfxJHIsEF6CL68ombtJ4Ss/uS05M2+2GN Ovt2gq92fL5tEaYYZYY4ia1lsASmkr7z6eHBZdqyPadTpOc1ZDRkaiFvaO/Jt8US HafF53FGfKyBQSP124YujQD6gS+AuqoDJ2FzJdL/JBeuq4+SyYLDFSmAay9HcBI4 Nrtb22wgOIwtHY7Pq3/gna77EuJiJ10hvsK9TLapVWxvVY7qN3JEWRhdp5BCF9XJ nPJw7aOtCh7zGgSpeXx9fHALawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF32XFO XbykPAuR03clr8KLqjxlMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGT2UijA3B5YsTCO6jq5CjAlWYr6Y7CHxFx4Ktd3lActax0TLbqceG i26tGEpgI9YyqFtwyZ7UgBw6isoTdL6km/pw1hplMCOvWBNSputLhH/4mfbnQuHa 1qHwSGtdvYls+2NClPh1USsk4HI8fc752t+cZYY2Q/UJ1jc7NvVdJGOJI05lfr7j XMpucfrXpdy9tp81T1PcIbQFGUexeZokpjp8jAeupQ2ZY0VyT5TCiabgl4ll5izP oj9RJ4c3ZwEbkU3mSwVq1f93x54aUQPPgEUkBkArzMj85jOudyZoYcAWcYEFUhlY VvdsvbEQbnEUdmVMRYlHS3aqw2wSesU4 -----END CERTIFICATE-----Generated at Fri May 16 15:36:10 2025 by rpki-client