$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: ybsfUzFriGIkqyI3uTwHuthUcEZtu7Ng1M71EGUyDZc= Subject key identifier: 87:21:23:93:3C:39:4F:31:F2:ED:EE:F7:E2:1E:41:5D:9C:BF:E0:86 Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 046D Signing time: Sat 10 May 2025 23:42:26 +0000 Manifest this update: Sat 10 May 2025 23:42:25 +0000 Manifest next update: Sat 17 May 2025 23:42:25 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: iL+Ke/v8FyHd6JAccL+c4iAZG8O4+3oPc8disqUnoUM=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: May 10 23:42:25 2025 GMT Not After : May 17 23:42:25 2025 GMT Subject: CN=681fe462-e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:3b:74:e8:2c:2d:1c:fe:6b:62:cf:dd:d1: 66:6e:41:2c:f3:b0:6c:26:e6:e8:d3:58:97:74:cb: 38:19:62:50:d9:17:73:6f:42:a5:80:72:bb:51:6a: 2e:ba:17:4f:c8:ad:c5:85:46:45:39:7d:f1:c8:c6: 39:be:35:a1:e4:31:6e:45:70:db:9e:ac:17:65:97: 3c:cc:17:eb:e4:14:73:ad:ad:e1:c6:c0:71:6b:0b: 1b:e9:1a:22:98:37:98:1e:da:1b:e8:87:f3:68:66: be:4c:0b:55:e1:0f:b5:bb:42:27:bf:5d:ee:77:91: 30:a7:ea:4e:75:e5:13:ab:0e:17:28:5f:d3:b5:47: 8d:56:5b:66:1b:89:32:4c:22:ab:18:65:32:f2:c4: fb:52:77:a7:ee:77:fc:cf:d1:7a:8a:df:9a:74:11: 98:a4:ec:be:66:3a:4c:0e:8d:a2:76:e4:9a:32:56: 30:b9:7f:ad:3c:50:19:47:04:11:41:8a:f1:75:ad: a4:6d:81:24:02:29:f5:e7:41:e5:f7:67:b0:26:91: c8:6b:c5:ec:68:77:83:b8:27:e2:c5:0f:e8:fd:52: 62:90:ae:21:4f:bb:d4:56:92:bd:e5:ff:22:a7:0b: 74:b1:18:38:e5:8c:e2:0f:ea:e7:98:e7:d0:2a:63: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:23:93:3C:39:4F:31:F2:ED:EE:F7:E2:1E:41:5D:9C:BF:E0:86 X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ec:21:47:97:77:da:51:55:dc:03:33:3d:42:d2:10:a2:ef: 1e:22:64:70:59:bc:03:35:09:be:76:67:b0:f5:e6:60:76:4c: 47:18:20:cf:14:88:bb:12:54:e7:33:a0:b5:2f:fa:08:3d:1b: 4b:ec:8c:40:0f:a6:02:5d:15:ea:c8:be:e1:31:f0:aa:5d:29: 5c:b9:51:ea:e6:cb:ce:b2:f3:d4:1e:b4:79:5b:ea:de:a7:ab: 01:bc:2b:be:3b:bd:ec:ad:d0:b9:ae:55:3a:07:5d:e9:d3:67: 6e:d2:6e:78:b0:48:c1:62:ac:30:5b:54:1e:af:62:fb:1d:05: a1:fb:c9:e8:f5:f8:f6:9b:8c:61:6d:ab:84:e6:d0:37:d6:fd: f2:01:4c:6a:f1:0c:09:11:04:b9:3d:07:f2:6c:cf:1e:f6:4f: c5:92:dd:c5:73:ce:7c:46:ed:2f:19:af:a7:ad:08:7b:e6:a8: 17:6a:96:ef:99:4b:a0:25:48:57:81:ff:8c:9a:0e:d0:04:4d: 84:06:cd:5f:bc:c8:4e:25:c9:b6:50:b4:cb:27:48:9b:dc:12: c9:5c:3a:f6:a5:57:34:a4:b0:d2:4f:5a:22:d6:1a:1f:c9:95: 0c:84:1c:04:13:9a:9d:6b:ff:de:59:57:a6:f9:96:c4:44:67: 4d:75:a7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUwNTEwMjM0MjI1WhcNMjUwNTE3MjM0MjI1WjAYMRYwFAYD VQQDEw02ODFmZTQ2Mi1lMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhQ7dOgsLRz+a2LP3dFmbkEs87BsJubo01iXdMs4GWJQ2Rdzb0KlgHK7UWou uhdPyK3FhUZFOX3xyMY5vjWh5DFuRXDbnqwXZZc8zBfr5BRzra3hxsBxawsb6Roi mDeYHtob6IfzaGa+TAtV4Q+1u0Inv13ud5Ewp+pOdeUTqw4XKF/TtUeNVltmG4ky TCKrGGUy8sT7Unen7nf8z9F6it+adBGYpOy+ZjpMDo2iduSaMlYwuX+tPFAZRwQR QYrxda2kbYEkAin150Hl92ewJpHIa8XsaHeDuCfixQ/o/VJikK4hT7vUVpK95f8i pwt0sRg45YziD+rnmOfQKmN9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIchI5M8 OU8x8u3u9+IeQV2cv+CGMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK7CFHl3faUVXcAzM9QtIQou8eImRwWbwDNQm+dmew9eZgdkxHGCDP FIi7ElTnM6C1L/oIPRtL7IxAD6YCXRXqyL7hMfCqXSlcuVHq5svOsvPUHrR5W+re p6sBvCu+O73srdC5rlU6B13p02du0m54sEjBYqwwW1Qer2L7HQWh+8no9fj2m4xh bauE5tA31v3yAUxq8QwJEQS5PQfybM8e9k/Fkt3Fc858Ru0vGa+nrQh75qgXapbv mUugJUhXgf+Mmg7QBE2EBs1fvMhOJcm2ULTLJ0ib3BLJXDr2pVc0pLDST1oi1hof yZUMhBwEE5qda//eWVem+ZbERGdNdaem -----END CERTIFICATE-----Generated at Mon May 12 12:34:57 2025 by rpki-client