$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: gVQuswewVcKbWb9Ww91bPGBn/ybVVY1f2DVQO5uewgg= Subject key identifier: D9:7A:D1:24:E1:3E:D8:BE:D2:E1:86:F3:0C:93:28:B8:01:41:88:5E Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 033F Signing time: Sun 11 May 2025 00:36:52 +0000 Manifest this update: Sun 11 May 2025 00:36:52 +0000 Manifest next update: Sun 18 May 2025 00:36:52 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: t8U7W3rkLE4V/HiOZBcEUzE8K8WhNci4tqUu4Luk6q8=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: BTLl2ZQykfG+tipQAUgtzvqp3DpDHeGIHhFJsSIVOWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: May 11 00:36:52 2025 GMT Not After : May 18 00:36:52 2025 GMT Subject: CN=681ff124-fdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:2c:8f:e6:c3:f0:35:95:f6:18:97:72:c6: d5:57:f0:4b:40:27:f8:28:14:4a:c5:5f:5a:16:ab: 34:f3:58:6b:d1:88:cf:44:7d:0f:23:d4:98:f8:63: 4f:a2:09:7d:6d:f1:b7:2c:71:c6:bd:4e:cf:d0:3d: 16:ed:a8:c8:77:28:70:74:07:cd:36:46:15:7f:da: bf:1b:03:4b:24:5c:64:c0:5c:a5:75:33:d9:11:aa: 00:00:80:90:60:d1:52:39:30:75:25:68:ec:81:8b: b4:15:ab:5b:76:d8:8d:db:3a:59:ae:24:ae:b7:0f: 7c:8c:cd:58:e7:2c:fc:b3:21:7d:d4:7c:9b:a8:a5: 05:af:a8:ab:39:f3:59:a1:ec:33:49:a7:9a:3a:36: cd:a1:f8:eb:5f:dd:cd:68:f0:1c:a1:45:bc:75:a3: 59:3f:85:95:b0:7d:57:24:d0:39:41:3e:91:3f:e5: 61:d0:bf:f0:e4:8d:1f:f2:4e:00:12:db:82:45:00: be:57:03:e6:2e:54:34:f3:e2:3a:d6:c3:bf:f8:d6: d5:69:db:ff:45:30:c8:d8:2b:1a:96:c3:66:bc:86: 38:e6:44:59:70:5a:0c:d1:9b:48:58:4b:f9:c6:22: 54:06:cd:73:14:8e:af:4b:47:3b:04:4a:2e:e1:13: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:D1:24:E1:3E:D8:BE:D2:E1:86:F3:0C:93:28:B8:01:41:88:5E X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:00:b1:e3:2d:b6:eb:13:47:c8:9d:74:86:05:6f:46:35:8d: d3:99:35:0c:14:ef:36:47:1f:dd:2a:86:9c:cf:4d:1e:09:56: 16:0a:e2:52:5c:53:1b:e2:56:90:69:32:cc:dd:52:3a:fa:98: 03:50:b0:35:8d:d7:52:fc:ce:02:a9:7e:4c:ca:cf:47:99:33: ff:fb:68:e8:fb:0d:af:38:33:48:fd:2d:f2:a4:41:de:14:3c: 52:3f:31:0d:3d:d7:eb:b6:81:5e:f2:9d:53:3b:29:07:8e:9e: 96:17:05:0a:a6:9f:12:24:34:57:3d:ae:45:44:8d:59:82:ad: 7b:95:89:08:38:ec:d1:a7:9c:51:6b:da:d6:0f:bc:57:43:37: b8:84:48:45:a3:b0:79:0a:7d:a3:b8:ca:6c:14:f5:56:5c:db: 2a:cf:d7:7b:68:ea:8e:2b:6c:ca:0a:b8:b0:cb:4b:f5:ce:6f: 50:b2:97:27:8b:a2:8a:27:cb:bd:61:31:e0:e1:72:72:5c:55: 47:0a:6f:30:9d:35:ae:0f:b5:33:a7:35:f2:81:76:f2:74:60: cf:fc:4d:2a:12:4e:1c:f9:e6:58:3a:2f:ae:0a:3f:db:71:ff: df:de:72:1c:54:fb:52:83:b0:21:e1:9b:3f:b6:a9:38:22:d1: 4c:d6:03:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjUwNTExMDAzNjUyWhcNMjUwNTE4MDAzNjUyWjAYMRYwFAYD VQQDEw02ODFmZjEyNC1mZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qwsj+bD8DWV9hiXcsbVV/BLQCf4KBRKxV9aFqs081hr0YjPRH0PI9SY+GNP ogl9bfG3LHHGvU7P0D0W7ajIdyhwdAfNNkYVf9q/GwNLJFxkwFyldTPZEaoAAICQ YNFSOTB1JWjsgYu0FatbdtiN2zpZriSutw98jM1Y5yz8syF91HybqKUFr6irOfNZ oewzSaeaOjbNofjrX93NaPAcoUW8daNZP4WVsH1XJNA5QT6RP+Vh0L/w5I0f8k4A EtuCRQC+VwPmLlQ08+I61sO/+NbVadv/RTDI2CsalsNmvIY45kRZcFoM0ZtIWEv5 xiJUBs1zFI6vS0c7BEou4RPHsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl60STh Pti+0uGG8wyTKLgBQYheMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFALHjLbbrE0fInXSGBW9GNY3TmTUMFO82Rx/dKoacz00eCVYWCuJS XFMb4laQaTLM3VI6+pgDULA1jddS/M4CqX5Mys9HmTP/+2jo+w2vODNI/S3ypEHe FDxSPzENPdfrtoFe8p1TOykHjp6WFwUKpp8SJDRXPa5FRI1Zgq17lYkIOOzRp5xR a9rWD7xXQze4hEhFo7B5Cn2juMpsFPVWXNsqz9d7aOqOK2zKCriwy0v1zm9Qspcn i6KKJ8u9YTHg4XJyXFVHCm8wnTWuD7UzpzXygXbydGDP/E0qEk4c+eZYOi+uCj/b cf/f3nIcVPtSg7Ah4Zs/tqk4ItFM1gPc -----END CERTIFICATE-----Generated at Sun May 11 22:40:36 2025 by rpki-client