$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: ri8tnnRhJp97DhMMJYBiIwOQIb1Z45X/D/OeF8DDpLw= Subject key identifier: B1:25:94:E0:80:94:82:5F:02:19:6E:B4:52:61:43:1D:C6:B6:69:28 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0643 Signing time: Mon 12 May 2025 16:49:27 +0000 Manifest this update: Mon 12 May 2025 16:49:26 +0000 Manifest next update: Mon 19 May 2025 16:49:26 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: +U49hfCyJL/YU/H4gJV+/21P0t5+2FIMA/MyeYdsrqM=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: May 12 16:49:26 2025 GMT Not After : May 19 16:49:26 2025 GMT Subject: CN=68222697-fd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:c4:2a:ed:2a:4c:27:21:8e:5a:6e:2b:6c: 7c:72:22:29:bd:70:58:c4:01:ec:dc:b2:18:91:3b: 35:bf:c9:ec:40:e3:3b:60:4a:3b:30:5c:44:3b:2c: 36:49:b2:e4:72:2a:fe:39:30:e8:07:94:0a:ad:b6: 56:96:cb:4d:86:43:1e:f9:87:7a:38:c4:a3:00:6a: 85:71:47:67:04:8a:16:eb:1f:07:45:63:d3:4e:a5: 82:bb:9d:00:80:76:7e:46:7a:a3:b4:87:6e:26:65: 2f:17:74:1a:5f:b3:f6:d0:b1:1b:ca:4b:e7:08:98: c8:ea:d6:ec:fc:c1:df:68:75:bc:52:4c:92:83:ec: c4:f3:79:79:ef:a1:3f:c6:68:f4:66:0b:ed:ff:e8: 71:10:7c:88:c3:35:37:f8:d3:eb:35:fb:b0:d5:f1: 33:8a:7e:75:26:51:7a:44:6f:48:61:e2:9e:9c:4d: 49:af:4c:3c:47:52:a9:aa:00:82:d9:f9:e9:06:62: 8e:0a:a0:bf:f7:46:22:35:40:9a:fe:3c:71:47:5c: 6b:2e:71:38:fa:dc:52:4e:11:74:98:42:a7:c6:c0: b1:dc:4f:d9:69:1b:cc:7f:5e:25:a8:50:ae:32:78: ef:ec:60:d5:5d:44:3f:db:48:9c:b8:7a:81:19:b9: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:94:E0:80:94:82:5F:02:19:6E:B4:52:61:43:1D:C6:B6:69:28 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:f7:c1:49:8f:6a:a7:2f:01:a0:c6:13:70:14:e2:b2:13: 6a:f5:88:18:cd:79:97:c3:61:15:62:22:b6:4c:7c:ba:9c:29: 32:c3:71:eb:22:77:ad:da:2f:8d:7f:74:ee:9b:ba:7b:fb:6e: 42:a7:f5:bb:a4:08:68:21:3b:8f:00:63:1c:aa:bd:c3:7a:91: 39:88:3f:e3:fd:14:3c:b8:28:a3:91:7f:7f:fc:b2:e3:b9:ca: 2d:d5:f3:01:e6:b9:1c:8b:ab:ae:8c:33:8f:fa:7c:48:2f:bc: 86:0c:55:25:03:64:b1:1f:fd:90:c8:68:f3:cc:5e:00:56:83: 92:85:d7:f2:74:1e:34:c8:82:fc:f7:89:70:7d:37:ba:20:d2: 8a:98:fd:6c:15:9d:78:f9:49:f4:44:a9:f1:73:de:b3:a6:ab: 3e:e7:ff:87:ab:9d:bd:12:85:46:b6:49:98:43:8c:99:04:ca: 21:08:7a:0c:6f:ff:be:74:55:b1:33:0a:52:7a:20:8a:33:e8: 4c:a1:09:27:16:71:1e:eb:b1:6d:d3:18:ab:9a:58:05:7a:20: ba:0a:85:6e:94:5f:28:04:13:d2:cc:d8:6c:c7:b0:e6:ac:41: 26:22:2a:e4:b8:c1:f5:82:b8:03:cf:72:87:b1:ec:54:3a:2d: 26:91:28:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwNTEyMTY0OTI2WhcNMjUwNTE5MTY0OTI2WjAYMRYwFAYD VQQDEw02ODIyMjY5Ny1mZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQbEKu0qTCchjlpuK2x8ciIpvXBYxAHs3LIYkTs1v8nsQOM7YEo7MFxEOyw2 SbLkcir+OTDoB5QKrbZWlstNhkMe+Yd6OMSjAGqFcUdnBIoW6x8HRWPTTqWCu50A gHZ+RnqjtIduJmUvF3QaX7P20LEbykvnCJjI6tbs/MHfaHW8UkySg+zE83l576E/ xmj0Zgvt/+hxEHyIwzU3+NPrNfuw1fEzin51JlF6RG9IYeKenE1Jr0w8R1KpqgCC 2fnpBmKOCqC/90YiNUCa/jxxR1xrLnE4+txSThF0mEKnxsCx3E/ZaRvMf14lqFCu Mnjv7GDVXUQ/20icuHqBGblzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEllOCA lIJfAhlutFJhQx3GtmkoMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUn/fBSY9qpy8BoMYTcBTishNq9YgYzXmXw2EVYiK2THy6nCkyw3Hr Inet2i+Nf3Tum7p7+25Cp/W7pAhoITuPAGMcqr3DepE5iD/j/RQ8uCijkX9//LLj ucot1fMB5rkci6uujDOP+nxIL7yGDFUlA2SxH/2QyGjzzF4AVoOShdfydB40yIL8 94lwfTe6INKKmP1sFZ14+Un0RKnxc96zpqs+5/+Hq529EoVGtkmYQ4yZBMohCHoM b/++dFWxMwpSeiCKM+hMoQknFnEe67Ft0xirmlgFeiC6CoVulF8oBBPSzNhsx7Dm rEEmIirkuMH1grgDz3KHsexUOi0mkShi -----END CERTIFICATE-----Generated at Mon May 12 19:53:10 2025 by rpki-client