$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft File: b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json) Hash identifier: rT4B9a0QlXhZj3IVAqKDG27eyNk7qYZJceUtl8QDqBA= Subject key identifier: 0A:9E:FD:72:77:5E:0F:9B:62:AB:9D:F7:C6:03:84:DA:73:1E:AC:59 Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft Manifest number: 084C Signing time: Wed 14 May 2025 20:55:26 +0000 Manifest this update: Wed 14 May 2025 20:55:26 +0000 Manifest next update: Wed 21 May 2025 20:55:26 +0000 Files and hashes: 1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: UgujALLIuxprZ5oqO7TvXGZIeM6cALaZucnti+J4B3s=) 2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF Validity Not Before: May 14 20:55:26 2025 GMT Not After : May 21 20:55:26 2025 GMT Subject: CN=6825033e-42be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:8f:94:46:bb:42:f8:e7:5d:e2:f1:fb:da: 3d:b5:16:03:b0:4f:a5:68:15:dd:26:e1:0c:24:c3: e7:9d:5c:8d:ef:41:2f:35:3f:5d:17:52:bf:74:cf: fb:68:0f:af:b5:91:17:09:98:49:bf:95:66:c7:c8: ce:27:e6:23:97:55:17:97:45:a6:bb:bc:dd:ef:41: e8:8b:c4:d9:ec:8c:25:69:4f:66:63:66:cd:cc:62: 3b:e6:f0:11:de:c2:fe:0c:b1:a2:8d:16:f2:34:d4: 39:64:89:81:d8:86:4d:fc:ff:a2:e2:30:0a:a4:56: 98:5e:9f:3c:99:ce:22:49:25:99:ab:95:6d:1f:08: cc:d1:17:5f:2d:da:61:53:99:ec:45:dc:58:33:ea: aa:f8:38:18:87:ff:57:12:d9:08:bf:25:52:be:da: 9e:07:15:56:4c:93:3f:50:94:ed:60:6b:b5:ca:11: b8:3d:f4:58:4a:23:72:8c:8d:6d:e8:25:05:e7:6a: 13:e5:04:ff:c8:a4:20:62:b6:48:d4:f7:44:d2:2b: 2a:c8:f1:a7:31:52:d8:ca:6f:42:ee:cc:01:7d:76: 65:50:ea:bb:0d:ec:54:86:79:ce:c5:e4:35:d7:ad: f2:09:8c:ed:a9:9a:b8:10:ff:95:35:73:34:cc:f0: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:FD:72:77:5E:0F:9B:62:AB:9D:F7:C6:03:84:DA:73:1E:AC:59 X509v3 Authority Key Identifier: keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ff:68:73:a8:81:e1:aa:31:d9:99:e5:ec:a6:1f:20:c0:ff: 35:77:ad:95:16:ab:d3:8f:36:1c:de:28:c1:91:b7:48:86:dc: ef:73:93:a1:d8:67:66:6f:5b:53:1c:04:e3:4e:55:5d:12:7c: c1:cb:93:64:58:22:a5:1a:3b:80:9e:8e:00:c1:7d:fd:fc:1e: cf:74:0a:08:49:11:0f:39:bf:36:90:af:11:af:aa:a7:50:d1: 33:c7:50:47:f6:aa:d1:dc:10:53:08:ad:f0:c6:fa:82:cf:b0: 0f:8a:c8:33:3c:a7:98:ff:bb:f3:7e:6a:c8:56:62:61:03:f9: 00:b0:c1:23:b5:da:f2:86:87:ca:a2:f4:60:47:57:1b:a7:8f: 21:9a:a2:73:ba:44:af:e5:b2:6a:34:d6:94:7b:8f:00:7a:4f: e2:17:98:eb:d2:aa:e2:01:d3:ba:51:8c:b4:e8:7d:01:fb:d4: 9e:d7:20:f6:8c:a3:30:79:c2:47:e2:7d:93:ae:7f:2a:e7:84: 1f:84:e3:22:92:17:f6:e4:a2:a2:d1:90:7c:c3:d3:60:1b:b1: 6a:72:b5:08:da:8d:0a:e2:e6:c4:75:bf:e8:89:97:63:48:67: 4a:cb:06:5b:4c:a5:b9:17:81:e2:52:60:a4:96:53:5d:55:aa: 84:fa:57:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1 NTE3OTc5QUYwHhcNMjUwNTE0MjA1NTI2WhcNMjUwNTIxMjA1NTI2WjAYMRYwFAYD VQQDEw02ODI1MDMzZS00MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYSPlEa7QvjnXeLx+9o9tRYDsE+laBXdJuEMJMPnnVyN70EvNT9dF1K/dM/7 aA+vtZEXCZhJv5Vmx8jOJ+Yjl1UXl0Wmu7zd70Hoi8TZ7IwlaU9mY2bNzGI75vAR 3sL+DLGijRbyNNQ5ZImB2IZN/P+i4jAKpFaYXp88mc4iSSWZq5VtHwjM0RdfLdph U5nsRdxYM+qq+DgYh/9XEtkIvyVSvtqeBxVWTJM/UJTtYGu1yhG4PfRYSiNyjI1t 6CUF52oT5QT/yKQgYrZI1PdE0isqyPGnMVLYym9C7swBfXZlUOq7DexUhnnOxeQ1 163yCYztqZq4EP+VNXM0zPAGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqe/XJ3 Xg+bYqud98YDhNpzHqxZMB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzYyNy9DMjY1QzFBNEQwN0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNq b1hMYngwOWNNclZWRjVlYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt/2hzqIHhqjHZmeXsph8gwP81d62VFqvTjzYc3ijBkbdIhtzvc5Oh 2Gdmb1tTHATjTlVdEnzBy5NkWCKlGjuAno4AwX39/B7PdAoISREPOb82kK8Rr6qn UNEzx1BH9qrR3BBTCK3wxvqCz7APisgzPKeY/7vzfmrIVmJhA/kAsMEjtdryhofK ovRgR1cbp48hmqJzukSv5bJqNNaUe48Aek/iF5jr0qriAdO6UYy06H0B+9Se1yD2 jKMwecJH4n2Trn8q54QfhOMikhf25KKi0ZB8w9NgG7FqcrUI2o0K4ubEdb/oiZdj SGdKywZbTKW5F4HiUmCkllNdVaqE+lcq -----END CERTIFICATE-----Generated at Thu May 15 19:12:20 2025 by rpki-client