$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: 7QwxcibmH6J3rV8gn1bRe62qv4InOCKhpk6GqRqTkz4= Subject key identifier: F4:1B:F7:54:9B:3E:DD:C7:03:70:CA:5B:09:F6:FE:34:CA:56:18:12 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 026F Signing time: Thu 15 May 2025 01:41:46 +0000 Manifest this update: Thu 15 May 2025 01:41:46 +0000 Manifest next update: Thu 22 May 2025 01:41:46 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: u+d9odswK0hI8xWdzOp1wVvG41kgI0E0oOBh1DcU+oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: May 15 01:41:46 2025 GMT Not After : May 22 01:41:46 2025 GMT Subject: CN=6825465a-a2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:1a:66:26:c4:ea:e6:3b:bd:cd:7f:a6:60: 42:db:e6:40:d7:e8:3c:f3:62:e9:09:7f:48:0d:d9: cc:dc:23:10:5b:77:a9:c1:50:25:b0:b2:e7:50:27: 8b:ed:29:78:76:f0:20:7e:0b:1f:bb:9c:e1:cc:da: 38:74:cb:57:4a:1c:1b:29:ef:05:e1:cf:ad:e6:5c: 8e:95:35:62:65:d7:ef:ca:59:03:91:f0:f9:85:40: 39:b4:be:c9:7a:64:23:fa:34:a4:b3:c7:74:bb:1a: 69:e0:27:f3:e3:2a:18:35:80:13:eb:a4:f6:dd:94: 9e:26:c7:e4:8d:3d:ef:c7:a7:dc:57:71:3a:f6:1d: 67:d2:0a:05:42:f5:19:2d:8c:6c:45:a3:06:51:2f: 90:1d:f2:d7:8b:6d:f4:b6:ff:64:8e:52:be:cf:43: 15:59:d5:b3:50:5f:da:0b:72:81:8d:d3:85:42:ae: 38:76:55:e5:4a:d8:1e:05:cc:c7:2e:9b:1b:c2:6a: 7d:1f:f3:af:18:bc:7b:53:88:4a:b7:02:f6:06:5d: e8:e1:9d:2c:b9:d1:c6:31:a8:02:bf:e8:c0:15:91: cb:0b:61:cc:d1:9d:67:93:d4:68:b7:3b:59:d1:2f: d2:4e:7c:b7:93:6f:79:a5:d9:50:07:38:7c:ac:9a: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1B:F7:54:9B:3E:DD:C7:03:70:CA:5B:09:F6:FE:34:CA:56:18:12 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5b:bb:ff:0c:a6:e5:c1:f9:8c:7f:93:4a:1c:98:57:08:60: 83:ec:e0:d5:9b:b1:fe:04:f7:f1:fd:f1:6c:c8:2b:f6:10:9d: da:ee:0b:04:4a:75:89:b3:a5:e2:87:8b:66:57:b5:9b:ca:21: c5:65:ed:9f:06:0f:fa:da:7c:db:21:91:8e:65:e4:5b:2e:f8: bb:a9:b5:da:e8:4c:57:2f:c5:c8:d3:90:c9:01:22:5a:b2:f3: 14:ef:c6:f5:72:5f:b3:4d:21:3c:5d:c1:0d:92:8b:5d:77:26: 37:37:29:8a:5e:98:f6:47:a6:40:b8:3a:c4:a5:f7:67:eb:55: 15:c8:75:45:69:fd:91:8f:e8:6d:81:09:20:88:86:7e:1b:36: bd:d9:20:71:2a:f6:ea:68:af:cc:f6:8c:5b:0d:1d:ed:33:d7: 6d:47:0d:3b:56:64:32:9d:55:7f:21:98:06:0b:20:80:97:b7: cf:f5:8a:0f:8a:3f:cc:e0:87:da:60:67:6b:28:45:63:64:06: 36:04:14:1d:22:ff:29:0e:1e:30:55:33:69:02:f9:97:85:46: 5a:c3:0e:10:79:71:41:52:3c:97:c7:b3:e9:51:e4:f8:97:cf: dd:51:12:05:24:fb:ce:00:bd:39:56:fb:de:4e:f8:d8:9d:2e: b7:bc:94:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwNTE1MDE0MTQ2WhcNMjUwNTIyMDE0MTQ2WjAYMRYwFAYD VQQDEw02ODI1NDY1YS1hMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoYaZibE6uY7vc1/pmBC2+ZA1+g882LpCX9IDdnM3CMQW3epwVAlsLLnUCeL 7Sl4dvAgfgsfu5zhzNo4dMtXShwbKe8F4c+t5lyOlTViZdfvylkDkfD5hUA5tL7J emQj+jSks8d0uxpp4Cfz4yoYNYAT66T23ZSeJsfkjT3vx6fcV3E69h1n0goFQvUZ LYxsRaMGUS+QHfLXi230tv9kjlK+z0MVWdWzUF/aC3KBjdOFQq44dlXlStgeBczH Lpsbwmp9H/OvGLx7U4hKtwL2Bl3o4Z0sudHGMagCv+jAFZHLC2HM0Z1nk9RotztZ 0S/STny3k295pdlQBzh8rJpftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQb91Sb Pt3HA3DKWwn2/jTKVhgSMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2W7v/DKblwfmMf5NKHJhXCGCD7ODVm7H+BPfx/fFsyCv2EJ3a7gsE SnWJs6Xih4tmV7WbyiHFZe2fBg/62nzbIZGOZeRbLvi7qbXa6ExXL8XI05DJASJa svMU78b1cl+zTSE8XcENkotddyY3NymKXpj2R6ZAuDrEpfdn61UVyHVFaf2Rj+ht gQkgiIZ+Gza92SBxKvbqaK/M9oxbDR3tM9dtRw07VmQynVV/IZgGCyCAl7fP9YoP ij/M4IfaYGdrKEVjZAY2BBQdIv8pDh4wVTNpAvmXhUZaww4QeXFBUjyXx7PpUeT4 l8/dURIFJPvOAL05VvveTvjYnS63vJQ+ -----END CERTIFICATE-----Generated at Fri May 16 21:40:05 2025 by rpki-client