$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft File: Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json) Hash identifier: DuayNcMI9u7g6UN4c0m6ldR7tzWdRHhtMmEyPYwjCZk= Subject key identifier: 77:5E:81:4B:3D:0F:B5:28:29:A9:0C:A9:D3:6C:21:6B:63:DC:6F:66 Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 Certificate issuer: /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft Manifest number: 031D Signing time: Mon 12 May 2025 21:32:15 +0000 Manifest this update: Mon 12 May 2025 21:32:15 +0000 Manifest next update: Mon 19 May 2025 21:32:15 +0000 Files and hashes: 1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: CrQ7YFFO+Jnl+JwR/G8XF3hl0VnnYlkTJ+cV9h8ZsPM=) 2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507 Validity Not Before: May 12 21:32:15 2025 GMT Not After : May 19 21:32:15 2025 GMT Subject: CN=682268df-de4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:4d:f5:cd:36:bd:53:7d:cb:ba:6c:57:3d: 0c:db:40:b6:fe:3e:63:54:c8:88:b1:8f:15:11:d6: 39:44:f3:6c:76:1b:2d:27:a3:d5:36:e3:41:e0:69: 94:53:a7:34:ad:d6:fd:3f:7d:79:d8:7e:98:ac:c6: 78:63:93:3e:f6:1d:54:38:36:ab:13:2a:cf:c9:44: e3:20:ea:7b:60:15:bf:8a:28:82:79:42:5c:a8:5c: 29:7d:44:28:d3:b9:10:29:79:cd:bc:ab:61:5f:2d: f3:59:58:98:09:f8:fc:39:2a:24:3c:88:2a:46:95: 81:18:ed:3c:d4:50:18:ac:61:78:b8:cd:0e:e4:38: e5:56:0e:b1:de:49:69:b2:84:ee:70:d2:bd:a8:03: 7e:23:36:c0:24:a8:f2:97:d3:fe:a3:be:1a:28:e8: f4:c0:1e:66:d5:4a:e6:f5:83:7f:92:43:9d:08:04: 05:e9:13:0f:91:71:cd:bd:22:2e:31:b4:4d:f7:b3: 13:4f:25:50:da:8a:ea:fb:53:15:f3:db:6c:0b:1e: 05:3f:4a:94:91:46:be:7e:4b:da:7f:1d:59:f7:fa: 26:0a:53:70:b4:25:e8:99:7b:12:59:d1:83:fe:24: 78:ad:66:12:7e:e6:c4:e1:5c:20:5b:15:1e:77:16: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:81:4B:3D:0F:B5:28:29:A9:0C:A9:D3:6C:21:6B:63:DC:6F:66 X509v3 Authority Key Identifier: keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c5:77:f9:a3:90:9c:a1:83:ac:5b:3a:89:26:3f:82:94:2b: 55:3e:b8:2a:e7:d9:9e:a4:31:12:8c:7c:17:e4:4a:b8:6b:3f: 74:67:f0:76:7b:c4:98:80:97:0b:cf:f3:18:79:22:0b:9d:01: 69:bc:63:b3:9c:3e:58:6d:de:c2:a5:7f:c3:89:d0:cd:4d:ef: 71:f1:ed:3a:a6:04:ae:68:d8:90:c9:01:37:eb:4d:df:7e:33: 5b:88:4f:ce:0a:a4:22:c9:a5:95:f0:5b:c6:77:2b:3c:4e:8b: 74:82:ff:be:0a:c1:89:4b:35:2a:48:bb:e6:5e:5d:24:41:4e: d5:de:92:f9:d6:48:c1:39:e2:8e:57:04:46:aa:50:b5:89:a3: ca:98:61:dc:c3:3a:9c:74:bf:94:2c:3f:7d:a9:b5:1b:bc:bf: 07:11:b2:0f:58:e4:b1:2a:a3:9a:3d:6c:11:45:e9:17:5d:1a: 00:4d:6b:1c:4e:18:71:c0:d5:f6:8e:6d:df:b1:23:99:80:a1: 58:09:5c:a2:9c:09:08:07:39:3c:fa:fb:4e:f8:83:50:f2:78: 06:6b:3c:36:90:7c:71:e0:bd:f6:0c:f9:9f:4d:ed:7a:9b:a5: 94:93:8b:1e:07:be:e0:3c:8b:65:99:47:33:59:c1:9f:96:f5: 35:9b:69:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDNERUQzQjQxRTIwM0Y4ODQ3MDAyOTZDODcwMTAwREZD NEU3QjE1MDcwHhcNMjUwNTEyMjEzMjE1WhcNMjUwNTE5MjEzMjE1WjAYMRYwFAYD VQQDEw02ODIyNjhkZi1kZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty5N9c02vVN9y7psVz0M20C2/j5jVMiIsY8VEdY5RPNsdhstJ6PVNuNB4GmU U6c0rdb9P3152H6YrMZ4Y5M+9h1UODarEyrPyUTjIOp7YBW/iiiCeUJcqFwpfUQo 07kQKXnNvKthXy3zWViYCfj8OSokPIgqRpWBGO081FAYrGF4uM0O5DjlVg6x3klp soTucNK9qAN+IzbAJKjyl9P+o74aKOj0wB5m1Urm9YN/kkOdCAQF6RMPkXHNvSIu MbRN97MTTyVQ2orq+1MV89tsCx4FP0qUkUa+fkvafx1Z9/omClNwtCXomXsSWdGD /iR4rWYSfubE4VwgWxUedxb1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdegUs9 D7UoKakMqdNsIWtj3G9mMB8GA1UdIwQYMBaAFD3tO0HiA/iEcAKWyHAQDfxOexUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC82NjU2QTJBNENC NDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1JUndBcGJJY0JBTl9FNTdG UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlMDdRZUlELUlSd0FwYkljQkFOX0U1N0ZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC82NjU2QTJBNENCNDIxMUVDQkI2REU1NTRDNEY5QUUwMi9QZTA3UWVJRC1J UndBcGJJY0JBTl9FNTdGUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxXf5o5CcoYOsWzqJJj+ClCtVPrgq59mepDESjHwX5Eq4az90Z/B2 e8SYgJcLz/MYeSILnQFpvGOznD5Ybd7CpX/DidDNTe9x8e06pgSuaNiQyQE3603f fjNbiE/OCqQiyaWV8FvGdys8Tot0gv++CsGJSzUqSLvmXl0kQU7V3pL51kjBOeKO VwRGqlC1iaPKmGHcwzqcdL+ULD99qbUbvL8HEbIPWOSxKqOaPWwRRekXXRoATWsc ThhxwNX2jm3fsSOZgKFYCVyinAkIBzk8+vtO+INQ8ngGazw2kHxx4L32DPmfTe16 m6WUk4seB77gPItlmUczWcGflvU1m2lW -----END CERTIFICATE-----Generated at Wed May 14 17:36:33 2025 by rpki-client