$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: +7D+dQYwqyHVOxCoJ3puFASn0Yc2gi2TSd7D+mUdkoA= Subject key identifier: 2B:1C:C9:A1:7A:19:30:56:3E:26:1E:13:D0:04:03:57:C5:63:A3:73 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 26D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 26B7 Signing time: Fri 16 May 2025 15:53:28 +0000 Manifest this update: Fri 16 May 2025 15:53:28 +0000 Manifest next update: Fri 23 May 2025 15:53:28 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: BVBNbnkwdXxS902jFbrospwRSGLxGCvZrbZuB0Z1+H0=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: szs84NZp6PRkDbAazU5Vux6gnoQk27OVrBFKSwWNnmU=) 3: 7E75C196B10C11E5BB6B2A16C4F9AE02.roa (hash: 84MBUnVnF5YSfCtGOyL/Mf1o361blRMq4zWtu5Lhyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9945 (0x26d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: May 16 15:53:28 2025 GMT Not After : May 23 15:53:28 2025 GMT Subject: CN=68275f78-02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:9c:6c:99:01:2d:b8:f8:13:98:71:16:79: 18:fe:45:e0:e2:f2:37:c3:d8:2d:27:fd:65:e1:ce: bd:83:49:dd:e3:b6:56:6f:49:6b:a3:b8:4f:d5:bb: bc:ad:9a:51:f8:db:10:53:82:4e:c1:56:72:61:62: e8:87:80:65:d5:6c:2a:a7:d8:32:a5:e5:33:e7:c7: 85:db:6a:de:9a:0f:66:d0:45:ac:34:e3:41:ef:7e: 5f:3c:e5:0f:9b:b4:02:ef:19:39:7d:89:9b:67:4d: cb:d6:d5:9a:d4:1b:a7:73:d8:06:5c:8a:e5:22:d1: 2b:b4:08:94:b7:58:64:54:15:b2:fa:99:93:7d:d1: 5d:b8:d7:bf:b1:4a:11:ee:7f:2a:49:b4:16:52:18: 80:2f:4e:97:79:73:f5:ca:c0:a3:4d:b2:75:64:28: 58:34:7f:3d:da:62:0b:ca:2f:26:6c:67:cd:9a:d2: d9:b9:61:6d:62:7c:22:13:dc:a5:fc:30:86:1e:be: d9:c7:86:81:43:4d:12:c1:2d:8a:76:0b:77:30:e4: a8:22:2f:fa:af:d7:b8:66:bd:b3:55:80:1e:63:75: 7c:6d:d8:69:c6:a8:31:37:a4:f1:6c:c1:f3:ea:2e: 46:03:94:e3:0f:67:83:66:f4:44:29:7e:64:ec:b6: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1C:C9:A1:7A:19:30:56:3E:26:1E:13:D0:04:03:57:C5:63:A3:73 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5c:c9:b1:27:ce:56:ab:b5:4f:56:6e:83:b8:61:31:c7:b0: 97:83:f0:c7:f0:0f:04:01:ee:42:b2:5f:29:4e:53:44:00:bb: 3b:bb:10:f4:4e:a3:2f:5d:59:dc:aa:03:b2:d9:07:08:b7:fa: c9:ba:fa:4f:a4:f5:20:71:27:ae:62:22:64:0e:8f:5c:a2:9d: 90:c1:bc:44:49:88:5f:6d:2a:39:06:f5:f2:26:e3:09:dc:d9: d3:55:a2:1b:56:82:25:d2:2a:a2:0c:49:b8:2a:ab:f9:79:42: 22:1c:57:35:03:f3:f8:ce:40:4a:26:39:00:22:94:29:3b:12: ba:4e:9e:5d:c8:e4:8d:32:92:7d:77:c0:5a:a3:83:0c:0f:7a: b3:0d:78:c1:66:e7:91:3f:a7:08:06:85:9e:89:ae:0f:8f:37: b1:c8:ea:6f:c0:58:00:f3:ee:52:4f:48:34:ae:3a:c8:3e:4c: c2:5d:b3:8c:84:1c:57:e0:ff:bd:19:13:d2:cf:f9:d4:fd:d9: 2e:54:a5:3c:fd:6f:c2:a5:ff:86:da:fa:56:6a:5f:4d:da:79: 8b:a1:b8:01:d1:bf:6a:5d:8a:e5:09:fd:9c:65:6a:ad:29:b7: 3d:a8:b6:8c:66:e6:9e:bc:87:16:a1:51:8d:2c:0b:ac:82:fb: 78:99:49:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjUwNTE2MTU1MzI4WhcNMjUwNTIzMTU1MzI4WjAYMRYwFAYD VQQDEw02ODI3NWY3OC0wMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dmcbJkBLbj4E5hxFnkY/kXg4vI3w9gtJ/1l4c69g0nd47ZWb0lro7hP1bu8 rZpR+NsQU4JOwVZyYWLoh4Bl1Wwqp9gypeUz58eF22remg9m0EWsNONB735fPOUP m7QC7xk5fYmbZ03L1tWa1Bunc9gGXIrlItErtAiUt1hkVBWy+pmTfdFduNe/sUoR 7n8qSbQWUhiAL06XeXP1ysCjTbJ1ZChYNH892mILyi8mbGfNmtLZuWFtYnwiE9yl /DCGHr7Zx4aBQ00SwS2Kdgt3MOSoIi/6r9e4Zr2zVYAeY3V8bdhpxqgxN6TxbMHz 6i5GA5TjD2eDZvREKX5k7LbqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCscyaF6 GTBWPiYeE9AEA1fFY6NzMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChXMmxJ85Wq7VPVm6DuGExx7CXg/DH8A8EAe5Csl8pTlNEALs7uxD0 TqMvXVncqgOy2QcIt/rJuvpPpPUgcSeuYiJkDo9cop2QwbxESYhfbSo5BvXyJuMJ 3NnTVaIbVoIl0iqiDEm4Kqv5eUIiHFc1A/P4zkBKJjkAIpQpOxK6Tp5dyOSNMpJ9 d8Bao4MMD3qzDXjBZueRP6cIBoWeia4PjzexyOpvwFgA8+5ST0g0rjrIPkzCXbOM hBxX4P+9GRPSz/nU/dkuVKU8/W/Cpf+G2vpWal9N2nmLobgB0b9qXYrlCf2cZWqt Kbc9qLaMZuaevIcWoVGNLAusgvt4mUkG -----END CERTIFICATE-----Generated at Sat May 17 15:46:51 2025 by rpki-client