$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft File: peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json) Hash identifier: dmlh+jIkYIv11QTGjRkorqEXeoIXUxR7PG3WQH+M8OM= Subject key identifier: CD:DF:59:FE:E3:0A:BF:DE:68:E8:6D:CE:14:3C:C4:47:AA:F2:E1:18 Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 Certificate issuer: /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Certificate serial: 0BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft Manifest number: 1448 Signing time: Mon 12 May 2025 18:41:04 +0000 Manifest this update: Mon 12 May 2025 18:41:04 +0000 Manifest next update: Mon 19 May 2025 18:41:04 +0000 Files and hashes: 1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: BRhPfuzDlpS7suoA6oR4sfo0oghO5s8bn/ER9eTIyHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Validity Not Before: May 12 18:41:04 2025 GMT Not After : May 19 18:41:04 2025 GMT Subject: CN=682240c0-9aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:16:bf:a2:22:d6:31:63:a3:8a:4f:72:9f: d8:d5:77:12:db:9a:09:05:f7:e9:12:c1:fe:86:af: 25:fa:c1:27:9f:12:6b:39:8d:1f:57:f3:6c:ca:61: d1:ec:1e:ff:b2:38:07:6d:a1:ab:74:e1:0c:b5:a6: 49:d7:7b:8c:36:d3:c5:30:d1:97:c8:61:df:47:b8: 6f:a2:ff:d8:e7:b4:f9:43:9a:e4:1d:8f:f3:3f:d1: 41:ce:8d:61:13:2e:13:bf:5a:29:3f:4e:fa:47:c6: 0d:f8:d7:3f:fb:ef:ac:91:89:55:34:ad:0c:90:12: 27:c2:20:08:9a:b8:6c:1f:59:7b:05:51:a0:3e:f3: 3c:b5:09:2a:04:7f:07:43:27:f6:70:3c:96:de:d8: 10:ba:b1:cc:f4:ae:c6:22:ac:3f:10:55:a3:e2:f1: 50:e0:77:0f:f0:e3:6b:bd:c1:28:65:00:b8:f3:8e: 03:9b:70:90:fd:5e:90:ae:55:d2:a6:47:b2:90:36: 88:a4:5a:c5:29:c1:57:41:b4:07:c6:0f:04:ec:55: e8:cd:90:1d:c3:55:18:cd:9e:ba:fd:20:f2:e4:e2: 09:ce:30:a8:86:12:16:95:1f:2a:96:1d:56:99:6f: f6:4b:04:6a:77:48:eb:10:bb:ea:94:47:45:21:a9: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DF:59:FE:E3:0A:BF:DE:68:E8:6D:CE:14:3C:C4:47:AA:F2:E1:18 X509v3 Authority Key Identifier: keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b7:3c:de:6d:1a:8a:56:18:7a:9f:a2:72:e7:7e:b6:36:37: e0:f3:cd:b6:c9:e0:45:98:e1:44:4b:55:b0:54:68:a4:d4:9e: 9e:ce:ac:fe:ec:36:1f:9f:40:eb:e9:fd:20:60:c0:25:62:95: 82:80:81:2c:42:d1:cc:e6:e8:c0:77:36:a6:92:3c:a1:34:e9: 06:cb:f6:87:bc:3d:ad:b1:6f:33:a2:bb:22:8d:f7:70:00:10: 6b:dc:70:9c:07:96:0f:01:f3:73:d1:07:e5:2a:6e:2c:c0:ea: d7:24:c1:9d:6c:2a:71:a2:12:1b:8e:bd:e7:aa:dd:55:ec:86: 30:57:d6:ea:7b:f9:19:24:97:a8:d7:cb:9e:17:9f:e6:67:6d: 2a:49:0e:71:77:24:05:79:bc:7a:e3:57:83:c7:a1:c4:fd:9c: 79:b9:0a:8c:b9:24:13:15:8d:49:77:5f:04:c4:8f:dd:b5:2d: 2d:70:7e:1a:a3:84:4e:64:f3:d3:65:cf:80:a1:f6:3f:cf:ec: a5:88:6c:a2:95:3b:12:4d:35:c8:e0:14:4f:7f:77:fe:42:ee: 35:c0:0c:b0:8a:95:de:44:b5:30:70:fc:13:eb:5f:68:0b:d3: fa:ef:72:65:0b:8a:3e:fb:a0:fa:f2:69:08:a9:d6:8c:b2:fd: 1f:b4:4a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy NDE3OTA5QjEwHhcNMjUwNTEyMTg0MTA0WhcNMjUwNTE5MTg0MTA0WjAYMRYwFAYD VQQDEw02ODIyNDBjMC05YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+sWv6Ii1jFjo4pPcp/Y1XcS25oJBffpEsH+hq8l+sEnnxJrOY0fV/NsymHR 7B7/sjgHbaGrdOEMtaZJ13uMNtPFMNGXyGHfR7hvov/Y57T5Q5rkHY/zP9FBzo1h Ey4Tv1opP076R8YN+Nc/+++skYlVNK0MkBInwiAImrhsH1l7BVGgPvM8tQkqBH8H Qyf2cDyW3tgQurHM9K7GIqw/EFWj4vFQ4HcP8ONrvcEoZQC4844Dm3CQ/V6QrlXS pkeykDaIpFrFKcFXQbQHxg8E7FXozZAdw1UYzZ66/SDy5OIJzjCohhIWlR8qlh1W mW/2SwRqd0jrELvqlEdFIal50QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3fWf7j Cr/eaOhtzhQ8xEeq8uEYMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtzzebRqKVhh6n6Jy5362Njfg8822yeBFmOFES1WwVGik1J6ezqz+ 7DYfn0Dr6f0gYMAlYpWCgIEsQtHM5ujAdzamkjyhNOkGy/aHvD2tsW8zorsijfdw ABBr3HCcB5YPAfNz0QflKm4swOrXJMGdbCpxohIbjr3nqt1V7IYwV9bqe/kZJJeo 18ueF5/mZ20qSQ5xdyQFebx641eDx6HE/Zx5uQqMuSQTFY1Jd18ExI/dtS0tcH4a o4ROZPPTZc+AofY/z+yliGyilTsSTTXI4BRPf3f+Qu41wAywipXeRLUwcPwT619o C9P673JlC4o++6D68mkIqdaMsv0ftEqs -----END CERTIFICATE-----Generated at Tue May 13 14:12:55 2025 by rpki-client