$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: U5LVJtsz6AnzO2JV/yHvnZSPFlcXg4RZVoVVvixZp9s= Subject key identifier: 0C:AF:7E:1A:F6:29:6F:99:05:95:5D:D5:74:71:C1:5F:12:4C:43:A4 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E2D Signing time: Fri 16 May 2025 18:02:15 +0000 Manifest this update: Fri 16 May 2025 18:02:15 +0000 Manifest next update: Fri 23 May 2025 18:02:15 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: 1c7CwCd5j/U7gYfParLxmPbx9idG/85I2dRDHW6lcJ4=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: May 16 18:02:15 2025 GMT Not After : May 23 18:02:15 2025 GMT Subject: CN=68277da7-1bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:30:05:48:7d:dc:61:74:50:b7:4e:5a:07: 9a:f1:ea:3b:f9:27:7c:1d:3f:4b:a5:90:9b:e0:c1: ef:43:cf:95:f3:f2:32:5a:a4:45:02:d1:dc:56:70: 25:c9:09:1e:34:ae:80:75:9d:bc:90:8b:0d:90:36: a4:62:8d:d4:e4:61:e9:de:14:18:c4:a1:7a:49:f3: 5e:b1:5c:12:7f:f5:85:3d:79:8c:70:79:61:6e:bc: 74:4b:aa:ac:34:7c:20:95:54:b4:fb:60:85:6e:83: 5e:89:02:90:6a:f9:35:49:83:04:db:7a:ba:a2:f2: be:24:8e:48:5a:fc:33:5a:f8:ef:fc:f9:be:c2:38: cc:fa:b1:f3:85:ec:af:a7:58:49:04:b6:64:ce:87: c0:5a:75:54:25:56:57:bc:3a:36:4b:a7:c9:0d:fe: 84:10:4c:0d:10:07:30:6c:72:68:a6:d0:1e:0c:9c: 1c:55:3d:4a:0e:51:e1:4a:9f:1a:27:cc:23:b4:08: f3:0b:50:9c:8d:a4:d4:68:84:cc:a6:62:08:7f:63: 7c:4d:6c:a2:18:73:c7:2e:92:c3:3a:a1:7b:be:ff: 31:b5:47:63:d6:dd:ee:59:93:eb:c0:fd:5b:54:c3: 8b:71:d7:97:2d:5c:b9:40:66:91:ff:de:48:e1:51: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AF:7E:1A:F6:29:6F:99:05:95:5D:D5:74:71:C1:5F:12:4C:43:A4 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:62:d7:b0:3b:18:9a:ba:80:07:60:43:2a:01:6a:d7:ac:63: 14:90:46:56:9f:2f:cb:5a:e5:45:4c:8a:ca:04:8b:0b:d8:bc: e4:be:87:8a:f5:ec:bb:55:19:2e:19:c2:46:91:20:dd:10:ca: 32:79:e6:e4:cd:1d:80:ed:a0:f4:8f:82:62:14:a2:e7:17:4f: 88:6e:8d:a9:cc:07:7f:7a:15:38:25:90:89:b7:7c:af:01:d8: 0c:84:67:13:d2:e3:43:14:83:c5:99:4b:20:a6:40:76:cc:85: 18:da:3d:1a:ec:db:23:4e:0a:0e:01:b0:c5:74:81:0c:7a:eb: b2:a3:23:6f:d5:97:b2:4a:6c:3f:08:79:cd:8d:fe:68:4e:93: 45:e3:62:9b:fa:46:82:6c:ef:70:b9:03:3a:7b:4c:d9:c4:70: 4b:20:9c:56:36:76:b6:d2:c6:ae:f3:21:96:10:95:20:04:d0: 56:20:09:69:88:54:d5:30:ee:7f:4b:6c:36:90:5d:08:af:f9: ba:7b:e3:4a:0a:65:e3:1c:2e:0b:2a:8b:80:e7:90:b1:40:61: 65:8f:d4:f5:39:ed:c8:aa:5f:ff:17:28:72:83:d4:02:63:42: 87:38:26:a6:b1:b0:e2:a2:9f:c5:f6:44:0b:0f:44:8f:58:fa: a0:ef:da:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwNTE2MTgwMjE1WhcNMjUwNTIzMTgwMjE1WjAYMRYwFAYD VQQDEw02ODI3N2RhNy0xYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWswBUh93GF0ULdOWgea8eo7+Sd8HT9LpZCb4MHvQ8+V8/IyWqRFAtHcVnAl yQkeNK6AdZ28kIsNkDakYo3U5GHp3hQYxKF6SfNesVwSf/WFPXmMcHlhbrx0S6qs NHwglVS0+2CFboNeiQKQavk1SYME23q6ovK+JI5IWvwzWvjv/Pm+wjjM+rHzheyv p1hJBLZkzofAWnVUJVZXvDo2S6fJDf6EEEwNEAcwbHJoptAeDJwcVT1KDlHhSp8a J8wjtAjzC1CcjaTUaITMpmIIf2N8TWyiGHPHLpLDOqF7vv8xtUdj1t3uWZPrwP1b VMOLcdeXLVy5QGaR/95I4VEC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyvfhr2 KW+ZBZVd1XRxwV8STEOkMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUYtewOxiauoAHYEMqAWrXrGMUkEZWny/LWuVFTIrKBIsL2LzkvoeK 9ey7VRkuGcJGkSDdEMoyeebkzR2A7aD0j4JiFKLnF0+Ibo2pzAd/ehU4JZCJt3yv AdgMhGcT0uNDFIPFmUsgpkB2zIUY2j0a7NsjTgoOAbDFdIEMeuuyoyNv1ZeySmw/ CHnNjf5oTpNF42Kb+kaCbO9wuQM6e0zZxHBLIJxWNna20sau8yGWEJUgBNBWIAlp iFTVMO5/S2w2kF0Ir/m6e+NKCmXjHC4LKouA55CxQGFlj9T1Oe3Iql//Fyhyg9QC Y0KHOCamsbDiop/F9kQLD0SPWPqg79qa -----END CERTIFICATE-----Generated at Fri May 16 21:24:59 2025 by rpki-client