$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: 30apVsfqra49LOwTf4RfJoIKv0RIkH4Zdmf/VnwbJPg= Subject key identifier: 0E:68:18:67:43:F7:E5:C5:CE:CD:25:5E:BF:15:BA:98:35:85:72:D1 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 3485 Signing time: Sat 10 May 2025 14:39:51 +0000 Manifest this update: Sat 10 May 2025 14:39:51 +0000 Manifest next update: Sat 17 May 2025 14:39:51 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: V6VDfoee5CFuMYoksIpxFcgXj3XnnD4mHdpDAig2ukU=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: May 10 14:39:51 2025 GMT Not After : May 17 14:39:51 2025 GMT Subject: CN=681f6537-9b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:68:2c:34:89:71:16:13:8d:93:33:5c:5e: 46:45:fd:97:08:7a:d1:93:9c:92:f4:89:cb:9e:45: 3d:c5:80:3a:67:3a:cf:2c:5b:4e:5b:86:68:e6:e2: 76:a0:54:d8:d4:dc:6c:74:88:3e:f0:85:55:c3:7b: 85:58:6d:ee:38:6c:27:1c:20:95:6f:a4:4d:ad:53: 90:b8:af:06:dd:66:32:05:c9:cb:ad:88:71:80:98: 77:e2:ba:09:a8:3c:a7:e6:16:ab:69:19:b1:84:d7: 38:08:f0:d1:84:eb:74:5f:80:5a:c7:13:75:b9:45: cd:1c:3d:44:dc:85:b5:79:0d:4e:05:18:e1:6e:87: fa:ba:47:6e:55:a7:3a:22:b1:7f:5b:0d:74:3c:fa: 62:08:de:0c:24:bc:23:a8:08:fa:ea:18:a2:0a:8f: 52:1d:08:99:91:e0:f6:e4:93:46:a5:b2:05:bd:a9: ea:f8:ff:cf:17:22:5c:ee:0b:41:48:7a:3d:af:20: 61:41:d1:74:e1:57:43:a3:6a:6b:ac:02:51:6d:50: 5e:95:a5:ca:be:02:33:eb:32:c5:70:16:9e:3d:27: e2:73:c3:70:79:39:95:0d:04:fd:39:61:1b:86:d2: 73:b1:75:34:bf:82:d3:d4:9f:49:08:10:7e:72:c5: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:18:67:43:F7:E5:C5:CE:CD:25:5E:BF:15:BA:98:35:85:72:D1 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ac:f2:89:ad:c8:92:4d:da:9a:da:69:37:67:36:44:16:9b: d9:e2:66:e9:a7:80:8b:95:3a:0e:1a:f3:6c:bb:94:fd:d4:87: 9f:c8:d5:d0:5d:5c:a5:f6:69:31:f2:e1:5f:b0:45:34:f4:1d: d7:bf:96:eb:10:3a:58:1b:67:9f:69:e2:1f:75:3e:50:c5:48: 5a:3f:1d:09:26:02:88:5a:29:86:d5:fd:d1:b1:09:61:c6:16: ee:dc:bd:f4:b8:c1:2b:8d:9e:e2:7e:99:0f:b3:44:55:d6:85: 52:a2:94:32:6e:66:7e:d5:89:5d:04:3d:e1:26:c6:b4:d9:74: 57:0c:4d:9c:27:c7:6c:ef:1a:ec:d0:d3:1f:c9:61:62:d8:65: 74:55:84:07:8f:9a:47:39:0a:fe:b1:55:16:2e:2b:2f:54:48: cf:bc:d9:65:61:ea:79:cf:8d:1e:03:53:d3:ba:bf:9d:e4:a0: ab:bc:9f:e0:72:71:b8:31:bd:ef:9a:53:00:8f:1c:22:dc:11: f7:21:69:aa:ad:45:be:c2:e3:e4:dd:2c:a7:3f:40:1b:da:dc: a5:44:db:98:a2:1a:ea:9c:3a:5e:cf:01:d4:5d:bf:77:96:f7: ee:8d:c3:41:db:ba:cc:e5:a0:19:4b:ab:5f:1e:f0:5d:8c:16: 9d:fe:8f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwNTEwMTQzOTUxWhcNMjUwNTE3MTQzOTUxWjAYMRYwFAYD VQQDEw02ODFmNjUzNy05YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG5oLDSJcRYTjZMzXF5GRf2XCHrRk5yS9InLnkU9xYA6ZzrPLFtOW4Zo5uJ2 oFTY1NxsdIg+8IVVw3uFWG3uOGwnHCCVb6RNrVOQuK8G3WYyBcnLrYhxgJh34roJ qDyn5haraRmxhNc4CPDRhOt0X4BaxxN1uUXNHD1E3IW1eQ1OBRjhbof6ukduVac6 IrF/Ww10PPpiCN4MJLwjqAj66hiiCo9SHQiZkeD25JNGpbIFvanq+P/PFyJc7gtB SHo9ryBhQdF04VdDo2prrAJRbVBelaXKvgIz6zLFcBaePSfic8NweTmVDQT9OWEb htJzsXU0v4LT1J9JCBB+csVIXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5oGGdD 9+XFzs0lXr8Vupg1hXLRMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCprPKJrciSTdqa2mk3ZzZEFpvZ4mbpp4CLlToOGvNsu5T91IefyNXQ XVyl9mkx8uFfsEU09B3Xv5brEDpYG2efaeIfdT5QxUhaPx0JJgKIWimG1f3RsQlh xhbu3L30uMErjZ7ifpkPs0RV1oVSopQybmZ+1YldBD3hJsa02XRXDE2cJ8ds7xrs 0NMfyWFi2GV0VYQHj5pHOQr+sVUWLisvVEjPvNllYep5z40eA1PTur+d5KCrvJ/g cnG4Mb3vmlMAjxwi3BH3IWmqrUW+wuPk3SynP0Ab2tylRNuYohrqnDpezwHUXb93 lvfujcNB27rM5aAZS6tfHvBdjBad/o+A -----END CERTIFICATE-----Generated at Sun May 11 16:28:06 2025 by rpki-client