$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: sHu636r8qkY5fgO/EDhQWWVyhBsTQYnpQPKhZZ7Dafw= Subject key identifier: 95:B2:48:19:A6:C4:E1:2D:6C:95:B4:2A:2A:52:0A:03:E5:E9:7A:EB Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 03A9 Signing time: Mon 05 May 2025 00:20:18 +0000 Manifest this update: Mon 05 May 2025 00:20:18 +0000 Manifest next update: Mon 12 May 2025 00:20:18 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: RFhtODPbVxnRUuy7EjLONTn5/rwNVUj/LoIjmidp3hY=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8Epzk8V6Z85r/XJDHr0k0X83+N9uAww9RtIo3M+lRdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: May 5 00:20:18 2025 GMT Not After : May 12 00:20:18 2025 GMT Subject: CN=68180442-eed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:a4:f0:6d:46:86:2b:02:71:c3:02:ec:84: df:36:4d:94:a3:36:b4:0f:6e:e4:72:d7:b3:93:e2: 30:09:65:45:77:40:84:7c:d5:59:a5:3e:28:4c:e5: 84:2c:fa:02:28:99:40:45:c6:dd:29:ba:9e:d4:b3: d3:dc:21:8b:a9:cc:36:7a:58:e3:2c:89:91:7d:89: de:0b:9e:0e:6a:18:93:64:f9:9d:6c:10:ed:a7:8d: 78:fe:99:50:bf:af:cc:c4:fd:72:db:98:4b:ac:9a: fe:a5:c3:bf:92:23:7c:c2:24:22:75:10:2b:2a:4d: e7:fa:c0:f7:46:96:df:75:df:bd:19:0e:fd:e9:dd: bf:82:48:a3:e1:c3:37:81:bf:f1:49:34:59:93:3f: b4:5e:95:c9:08:0e:21:73:3b:18:b8:f6:e5:a5:83: 7f:9c:22:35:f4:2a:3f:e0:79:d0:3c:e5:f6:de:dd: 78:6e:c8:7b:35:f9:48:63:d2:cb:2f:0d:e7:75:16: fa:6b:cb:27:79:a5:75:84:26:1a:1a:0f:f8:2d:1d: 3b:19:a4:19:4e:09:5d:a2:b1:26:0e:da:03:c9:42: 07:92:b6:2c:38:5f:c0:53:1a:03:d6:a5:cb:99:14: 96:b8:ca:bd:06:66:ae:cc:34:2e:92:92:e8:1f:f3: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B2:48:19:A6:C4:E1:2D:6C:95:B4:2A:2A:52:0A:03:E5:E9:7A:EB X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:c2:1f:55:74:18:30:bd:f5:2c:29:b8:29:c1:55:d3:85: d5:e8:3e:7d:69:c5:52:81:e2:da:f0:01:3c:88:27:85:ed:83: d3:cc:72:00:83:31:4f:66:c1:db:fa:3b:50:6a:50:01:68:47: 66:4b:3f:cf:1b:0b:02:94:37:28:59:71:7a:9d:d7:16:76:b0: 79:00:64:f8:70:55:8e:61:d1:40:c4:c0:32:49:5a:e8:0d:bb: ff:57:b6:e5:a1:93:d7:f0:8f:42:e1:6d:d4:37:75:59:31:e9: e4:6a:55:6f:62:2d:f9:56:62:42:af:2a:47:f5:8e:af:38:54: 6f:da:5e:40:b0:21:08:d2:87:fc:64:0b:c7:10:ff:28:8b:78: c9:dc:34:3b:c6:33:9b:10:43:37:4e:2f:9d:81:d8:c8:c4:5c: e6:c8:da:40:48:9b:89:f4:a9:c1:0a:17:c5:34:64:f0:b0:36: d6:98:0b:34:fb:e5:7b:1b:20:e6:d6:64:62:65:12:88:a8:9c: b3:74:b5:81:00:b3:53:b7:74:0f:f9:66:05:eb:ab:73:e9:cc: ba:c7:85:f2:e7:9f:0c:3f:04:c2:d3:f8:36:48:3e:19:e3:f0: 78:ad:4b:f4:f6:5d:ac:06:96:6d:4a:94:01:fd:00:48:96:ee: 38:2e:ca:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjUwNTA1MDAyMDE4WhcNMjUwNTEyMDAyMDE4WjAYMRYwFAYD VQQDEw02ODE4MDQ0Mi1lZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzSk8G1GhisCccMC7ITfNk2Uoza0D27kctezk+IwCWVFd0CEfNVZpT4oTOWE LPoCKJlARcbdKbqe1LPT3CGLqcw2eljjLImRfYneC54OahiTZPmdbBDtp414/plQ v6/MxP1y25hLrJr+pcO/kiN8wiQidRArKk3n+sD3Rpbfdd+9GQ796d2/gkij4cM3 gb/xSTRZkz+0XpXJCA4hczsYuPblpYN/nCI19Co/4HnQPOX23t14bsh7NflIY9LL Lw3ndRb6a8sneaV1hCYaGg/4LR07GaQZTgldorEmDtoDyUIHkrYsOF/AUxoD1qXL mRSWuMq9BmauzDQukpLoH/PLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWySBmm xOEtbJW0KipSCgPl6XrrMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yMIfVXQYML31LCm4KcFV04XV6D59acVSgeLa8AE8iCeF7YPTzHIA gzFPZsHb+jtQalABaEdmSz/PGwsClDcoWXF6ndcWdrB5AGT4cFWOYdFAxMAySVro Dbv/V7bloZPX8I9C4W3UN3VZMenkalVvYi35VmJCrypH9Y6vOFRv2l5AsCEI0of8 ZAvHEP8oi3jJ3DQ7xjObEEM3Ti+dgdjIxFzmyNpASJuJ9KnBChfFNGTwsDbWmAs0 ++V7GyDm1mRiZRKIqJyzdLWBALNTt3QP+WYF66tz6cy6x4Xy558MPwTC0/g2SD4Z 4/B4rUv09l2sBpZtSpQB/QBIlu44Lso1 -----END CERTIFICATE-----Generated at Mon May 5 03:27:42 2025 by rpki-client