$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json) Hash identifier: zunLyLVqHUS82QaJ0Ei16edV9kc8RSoix4EW1pgbDUc= Subject key identifier: D9:93:C1:CA:2A:AC:38:91:98:14:92:04:E8:96:FE:BF:72:8C:6E:05 Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Certificate serial: 14E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft Manifest number: 14DA Signing time: Mon 12 May 2025 16:45:56 +0000 Manifest this update: Mon 12 May 2025 16:45:55 +0000 Manifest next update: Mon 19 May 2025 16:45:55 +0000 Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: 4EIsxRdrdB83Qj34zvnHnSCDhEYFUU/E+34QoanYFpg=) 2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5348 (0x14e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Validity Not Before: May 12 16:45:55 2025 GMT Not After : May 19 16:45:55 2025 GMT Subject: CN=682225c4-68bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:a0:9f:23:c4:a7:53:39:89:50:34:fd:3e: 6a:c3:ae:ef:1a:d2:9f:8e:a8:f5:28:fb:30:30:14: af:3a:ea:2d:e0:96:35:fe:cd:bb:51:63:c3:1b:0f: cf:c8:38:74:61:2c:d0:a1:b5:53:ee:53:e5:6d:63: e4:fd:b5:e8:5c:c9:5b:94:d3:16:a6:1e:48:3f:7a: 91:e6:5d:5a:d3:30:aa:3a:82:b4:f4:13:83:06:32: a7:23:0c:ef:52:64:42:b2:ee:f1:94:e8:9e:ed:95: 4c:1c:6e:5e:b3:e3:32:4b:9e:df:bd:b8:21:d6:f9: 13:11:e5:47:8a:2f:8a:ff:e5:ca:4e:18:3a:e9:f4: 1d:77:67:4c:84:23:92:b8:15:50:ec:9c:96:0a:74: 1b:70:75:12:9d:ec:a8:f1:d4:3a:de:0c:84:a4:1c: da:d3:8e:cd:4b:22:94:ba:36:fd:a6:b3:28:c0:ea: 70:8e:0f:d7:c8:cc:3f:2f:59:a7:89:74:6e:bc:2c: 28:b9:9b:a8:1c:5c:4b:fb:11:eb:20:e2:96:2e:fd: 6a:67:da:b2:f4:4d:49:44:3b:64:ec:e8:f2:c3:06: 8d:53:ef:c5:7d:56:b5:57:66:34:e3:cc:e9:53:65: a1:b1:d7:8c:d2:f6:81:c6:a4:a2:73:44:db:bc:87: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:C1:CA:2A:AC:38:91:98:14:92:04:E8:96:FE:BF:72:8C:6E:05 X509v3 Authority Key Identifier: keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6e:ed:31:fa:ef:d3:dd:00:57:ec:6a:6a:dc:ed:ee:27:e9: a1:73:6c:45:90:56:f5:25:29:e6:6c:b0:34:a6:4d:ea:27:2a: 85:da:9e:55:53:c3:8d:79:71:96:a7:ba:1e:ce:09:26:71:23: 3f:ea:ff:af:70:7d:79:d8:1b:18:ba:83:ce:19:db:27:72:61: 05:cc:1a:f1:20:55:3e:b2:5a:cf:14:f9:93:a9:fe:32:4c:e9: 22:9e:7b:a0:58:d8:77:75:be:ab:cc:00:16:88:4c:c8:1f:a9: cb:0a:77:c5:45:79:07:01:a4:4c:41:fa:46:f0:f9:94:64:d3: 22:84:27:57:7c:90:59:87:0c:84:d1:ee:23:45:d1:26:02:0c: 82:c9:9d:75:d9:82:93:0b:59:68:8d:0b:d1:df:b6:9d:07:dd: 24:21:68:d9:a8:c7:c6:1c:36:e0:c3:97:eb:2a:57:cd:a4:bf: d6:15:96:1a:cd:14:bd:c8:f3:ef:93:3c:cb:79:15:a3:63:cf: eb:7c:57:6b:61:d5:b0:6c:3f:0f:40:31:6a:d8:7c:c6:53:5c: 28:ad:a9:f3:95:c3:68:37:65:e9:e4:90:21:70:e9:60:ca:45: 76:0e:79:8a:ed:76:cb:52:14:24:0b:0d:4c:0f:78:e7:21:b6: 32:40:2a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3 M0U0OUU1NEEwHhcNMjUwNTEyMTY0NTU1WhcNMjUwNTE5MTY0NTU1WjAYMRYwFAYD VQQDEw02ODIyMjVjNC02OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwSgnyPEp1M5iVA0/T5qw67vGtKfjqj1KPswMBSvOuot4JY1/s27UWPDGw/P yDh0YSzQobVT7lPlbWPk/bXoXMlblNMWph5IP3qR5l1a0zCqOoK09BODBjKnIwzv UmRCsu7xlOie7ZVMHG5es+MyS57fvbgh1vkTEeVHii+K/+XKThg66fQdd2dMhCOS uBVQ7JyWCnQbcHUSneyo8dQ63gyEpBza047NSyKUujb9prMowOpwjg/XyMw/L1mn iXRuvCwouZuoHFxL+xHrIOKWLv1qZ9qy9E1JRDtk7OjywwaNU+/FfVa1V2Y048zp U2WhsdeM0vaBxqSic0TbvIfWrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmTwcoq rDiRmBSSBOiW/r9yjG4FMB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgwMy81NDZFRDczQTUzMzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VG RDE2RlpzUmgyYXR6NUo1VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDbu0x+u/T3QBX7Gpq3O3uJ+mhc2xFkFb1JSnmbLA0pk3qJyqF2p5V U8ONeXGWp7oezgkmcSM/6v+vcH152BsYuoPOGdsncmEFzBrxIFU+slrPFPmTqf4y TOkinnugWNh3db6rzAAWiEzIH6nLCnfFRXkHAaRMQfpG8PmUZNMihCdXfJBZhwyE 0e4jRdEmAgyCyZ112YKTC1lojQvR37adB90kIWjZqMfGHDbgw5frKlfNpL/WFZYa zRS9yPPvkzzLeRWjY8/rfFdrYdWwbD8PQDFq2HzGU1woranzlcNoN2Xp5JAhcOlg ykV2DnmK7XbLUhQkCw1MD3jnIbYyQCrX -----END CERTIFICATE-----Generated at Tue May 13 18:38:23 2025 by rpki-client