$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: lk0HE64li821shmssG1Cx2oiGSO/EktBndiQCChiAzY= Subject key identifier: 0E:0A:E5:0D:FB:E2:9D:00:B7:B0:23:FD:FF:75:28:96:46:07:AB:B5 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: FB Signing time: Sun 11 May 2025 03:59:46 +0000 Manifest this update: Sun 11 May 2025 03:59:46 +0000 Manifest next update: Sun 18 May 2025 03:59:46 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: VLMwMF0nvcagNXP9Ws6pwFdJx9U3HY7tlaFLA1Rc9ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: May 11 03:59:46 2025 GMT Not After : May 18 03:59:46 2025 GMT Subject: CN=682020b2-43ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:b4:c5:72:33:7d:1f:ff:b6:22:1c:59:98: 1a:c5:17:25:5e:4f:39:30:ff:b4:0c:df:65:50:89: 8f:83:68:0d:ca:fe:b7:9f:8e:c7:4e:05:81:3e:2a: b4:15:15:7b:5e:e3:57:1c:9d:87:0a:f7:54:9e:4c: 36:61:50:c2:04:be:70:fa:d5:38:fd:43:cc:9c:f6: ff:99:39:95:b4:c9:e5:74:6c:6b:43:eb:58:ec:c1: dd:11:38:4a:5e:d0:11:ec:27:56:16:3e:0b:0b:df: 47:42:49:0c:cf:67:c6:10:a7:2a:68:f5:e5:f3:37: fb:b5:67:f4:38:8e:fb:48:d0:7f:0e:29:5a:84:7d: a8:9a:e0:1f:48:5f:97:eb:fa:ab:71:f8:20:52:ba: 95:3c:05:94:04:52:26:25:4c:3f:f3:71:ca:c7:ed: 35:a6:d3:d0:a0:18:5b:96:5d:70:d3:97:d6:8d:ea: be:b6:57:b2:c2:24:4d:ea:2d:b5:1a:e9:fd:9b:01: b7:07:8a:f1:b3:31:a8:73:ad:32:a9:51:2d:8a:b1: 84:f7:fb:ed:66:d9:3d:d8:37:a6:bb:e3:de:13:71: eb:1e:2a:7a:ec:e6:a9:4d:0b:ed:30:79:c5:5b:ee: 59:ce:09:3c:fb:d3:f3:11:68:ae:95:e4:61:4a:3a: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:E5:0D:FB:E2:9D:00:B7:B0:23:FD:FF:75:28:96:46:07:AB:B5 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:01:36:ab:88:bb:e3:33:33:ab:fb:48:2e:af:7e:9d:67: eb:e9:e9:f7:35:da:27:27:32:c4:c3:bd:dd:fe:70:27:a4:0c: f5:12:b0:12:0d:91:0b:30:cd:4e:81:88:8a:40:ad:a9:33:4c: 3e:1c:c9:be:00:3b:cb:a4:ca:08:cf:bb:10:af:85:e3:41:fb: 21:b0:5d:be:d2:3e:ec:0a:fb:e3:80:b7:93:54:90:62:d6:31: ab:9c:0e:12:8f:a8:a9:2f:4d:f5:be:8c:e4:d5:b2:9f:73:19: 27:06:14:55:b5:af:5f:d7:78:72:dd:42:7d:aa:0f:32:4b:56: b9:8a:da:e7:8a:29:58:ae:d0:81:46:d8:3d:17:c5:cc:64:4e: 67:67:fc:cd:70:1a:4e:0c:fd:7f:2f:6a:50:a2:9c:c9:82:12: 37:67:5b:fb:83:e8:2b:ac:1a:c5:e0:1f:f8:64:5c:1e:94:9b: 0a:af:30:bc:78:d0:d3:55:6f:22:6d:32:88:2d:e2:21:73:1b: 87:ea:50:b3:fe:2b:0b:bc:47:d4:12:ac:13:69:6d:fa:c5:91: 2c:78:27:2c:1a:bd:b7:4d:3f:28:45:ee:a2:d1:66:25:a6:a2: 3f:9f:ef:c7:03:11:d1:13:d9:8d:b2:b8:be:52:6f:9a:76:34: 14:cd:92:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUwNTExMDM1OTQ2WhcNMjUwNTE4MDM1OTQ2WjAYMRYwFAYD VQQDEw02ODIwMjBiMi00M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fa0xXIzfR//tiIcWZgaxRclXk85MP+0DN9lUImPg2gNyv63n47HTgWBPiq0 FRV7XuNXHJ2HCvdUnkw2YVDCBL5w+tU4/UPMnPb/mTmVtMnldGxrQ+tY7MHdEThK XtAR7CdWFj4LC99HQkkMz2fGEKcqaPXl8zf7tWf0OI77SNB/DilahH2omuAfSF+X 6/qrcfggUrqVPAWUBFImJUw/83HKx+01ptPQoBhbll1w05fWjeq+tleywiRN6i21 Gun9mwG3B4rxszGoc60yqVEtirGE9/vtZtk92Demu+PeE3HrHip67OapTQvtMHnF W+5Zzgk8+9PzEWiuleRhSjqcVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4K5Q37 4p0At7Aj/f91KJZGB6u1MB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+xAE2q4i74zMzq/tILq9+nWfr6en3NdonJzLEw73d/nAnpAz1ErAS DZELMM1OgYiKQK2pM0w+HMm+ADvLpMoIz7sQr4XjQfshsF2+0j7sCvvjgLeTVJBi 1jGrnA4Sj6ipL031vozk1bKfcxknBhRVta9f13hy3UJ9qg8yS1a5itrniilYrtCB Rtg9F8XMZE5nZ/zNcBpODP1/L2pQopzJghI3Z1v7g+grrBrF4B/4ZFwelJsKrzC8 eNDTVW8ibTKILeIhcxuH6lCz/isLvEfUEqwTaW36xZEseCcsGr23TT8oRe6i0WYl pqI/n+/HAxHRE9mNsri+Um+adjQUzZI7 -----END CERTIFICATE-----Generated at Sun May 11 15:34:36 2025 by rpki-client