$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: wpNLVVl0GpoE+Zpt+QjdF+jIelmHrf64K7UbYtJWtc0= Subject key identifier: 24:F4:54:63:0D:A7:2C:C8:BA:2B:24:CC:83:10:E1:4E:5A:CA:03:46 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 03D0 Signing time: Sun 11 May 2025 00:12:05 +0000 Manifest this update: Sun 11 May 2025 00:12:05 +0000 Manifest next update: Sun 18 May 2025 00:12:05 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: AOghu5z0lSW6Bocz+klTSJrAJofd7mEZmDT8HWTSj6o=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: ABrIq2phc9urb6rkViq/Ir7haK/5vojTJpbzqSfLFQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: May 11 00:12:05 2025 GMT Not After : May 18 00:12:05 2025 GMT Subject: CN=681feb55-4305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:aa:9d:44:32:79:3b:c0:83:76:01:06:88: e3:37:5b:cf:58:36:b0:c4:55:4b:c2:c9:03:6f:56: 9f:2e:f6:7f:37:4b:6c:69:c1:3c:da:4c:e1:ed:a0: 1a:97:dc:5e:45:6f:c1:31:ad:28:46:2a:ae:ec:2f: 48:83:4c:86:4b:d2:68:1d:9f:04:16:52:f9:d4:e6: de:17:97:8f:53:d6:e5:c1:9d:68:ab:1c:7c:77:59: 5d:b8:18:94:ee:a0:47:8a:e2:ae:e5:08:e0:4a:95: 43:66:02:0f:23:50:d2:26:07:8b:83:da:b3:d0:e0: 19:56:e6:57:63:6f:17:70:c3:89:4f:35:fe:da:12: d3:e3:5b:9d:cb:3a:9f:a7:4a:8d:b5:e6:d3:7e:1a: 19:69:47:a3:47:43:f6:84:36:ad:b0:d3:bf:8c:31: ae:07:e0:ef:9b:6b:f2:17:d9:eb:11:03:c4:b9:9f: 38:10:c1:94:ae:a3:83:e0:10:9c:ae:52:ba:ba:ea: 49:1e:be:c8:18:0b:7f:a4:01:57:87:d9:f5:81:77: b4:32:d5:fd:15:a6:02:0d:a9:dc:ca:fd:15:59:9f: b6:a8:8d:6f:89:6f:fe:30:e9:f6:89:df:90:08:7a: 8f:17:44:be:df:75:30:fc:58:26:02:11:08:08:53: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F4:54:63:0D:A7:2C:C8:BA:2B:24:CC:83:10:E1:4E:5A:CA:03:46 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:95:92:5c:03:24:b7:52:39:b3:97:ab:86:6f:4f:f9:fc:94: a6:22:2b:41:0f:8f:e6:97:99:d1:1d:db:38:7e:8c:28:9b:56: 51:81:70:a3:60:07:4b:29:f9:05:6e:04:a7:56:93:96:b2:2d: ff:54:8c:c6:60:d2:83:39:9c:3a:1b:67:30:01:5f:e9:ae:42: 34:19:91:38:40:88:38:23:41:15:79:e6:fe:fb:71:82:cd:59: 20:fb:52:a1:44:b6:86:35:56:9c:db:b4:6a:20:24:30:65:a8: b9:d2:eb:56:96:e3:a9:e3:06:97:f4:03:9f:5d:74:1f:fb:8c: 16:3a:bd:87:5a:39:42:33:c3:72:96:a6:da:78:4d:6e:b2:10: 1f:d8:53:ba:24:fe:a0:15:05:7d:3f:c3:0a:d6:7e:aa:dd:52: d0:4a:b2:62:b2:b3:0a:1d:24:bd:f1:fd:5a:51:7d:ed:c0:f7: e9:f2:88:4b:a8:04:af:a7:01:36:50:3b:1d:f4:f6:58:25:18: 9b:c9:69:72:19:22:30:9d:4f:a4:fb:17:5b:cd:1b:ac:f5:46: 35:0b:8a:69:74:f5:1f:c1:3b:62:07:e8:70:18:7f:aa:c6:23: ca:f3:ff:24:ec:24:0b:ac:38:7d:a1:29:93:60:f4:1c:ea:f8: 44:55:c0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwNTExMDAxMjA1WhcNMjUwNTE4MDAxMjA1WjAYMRYwFAYD VQQDEw02ODFmZWI1NS00MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts+qnUQyeTvAg3YBBojjN1vPWDawxFVLwskDb1afLvZ/N0tsacE82kzh7aAa l9xeRW/BMa0oRiqu7C9Ig0yGS9JoHZ8EFlL51ObeF5ePU9blwZ1oqxx8d1lduBiU 7qBHiuKu5QjgSpVDZgIPI1DSJgeLg9qz0OAZVuZXY28XcMOJTzX+2hLT41udyzqf p0qNtebTfhoZaUejR0P2hDatsNO/jDGuB+Dvm2vyF9nrEQPEuZ84EMGUrqOD4BCc rlK6uupJHr7IGAt/pAFXh9n1gXe0MtX9FaYCDancyv0VWZ+2qI1viW/+MOn2id+Q CHqPF0S+33Uw/FgmAhEICFOesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT0VGMN pyzIuiskzIMQ4U5aygNGMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7lZJcAyS3Ujmzl6uGb0/5/JSmIitBD4/ml5nRHds4fowom1ZRgXCj YAdLKfkFbgSnVpOWsi3/VIzGYNKDOZw6G2cwAV/prkI0GZE4QIg4I0EVeeb++3GC zVkg+1KhRLaGNVac27RqICQwZai50utWluOp4waX9AOfXXQf+4wWOr2HWjlCM8Ny lqbaeE1ushAf2FO6JP6gFQV9P8MK1n6q3VLQSrJisrMKHSS98f1aUX3twPfp8ohL qASvpwE2UDsd9PZYJRibyWlyGSIwnU+k+xdbzRus9UY1C4ppdPUfwTtiB+hwGH+q xiPK8/8k7CQLrDh9oSmTYPQc6vhEVcC3 -----END CERTIFICATE-----Generated at Sun May 11 02:07:56 2025 by rpki-client