$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: TbFeLvZpKAUpwGYq7m6+MNHhqepOWCuyoMHXpoUZf6U= Subject key identifier: 9C:9C:AF:97:A1:A8:5B:32:DA:F3:F2:05:DC:CE:CA:D8:75:63:87:42 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 01E1 Signing time: Sun 11 May 2025 01:39:31 +0000 Manifest this update: Sun 11 May 2025 01:39:30 +0000 Manifest next update: Sun 18 May 2025 01:39:30 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: +C5lbxMcRZe4h/ZlgDTrnfoi8Lsd8BzCaUkv205ihFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: May 11 01:39:30 2025 GMT Not After : May 18 01:39:30 2025 GMT Subject: CN=681fffd3-d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:e7:c5:45:c4:f9:e4:2c:80:aa:67:c0:6e: 5e:74:0b:48:cc:74:79:50:ee:1b:3a:7d:5a:99:a1: 81:25:ae:9e:3e:5d:d6:6b:86:26:3d:b6:8c:e0:f2: 6a:50:03:af:8e:55:73:26:22:7f:a3:1c:ce:75:65: 2a:02:14:b9:f1:c3:7c:08:59:26:82:27:aa:d3:a7: dd:6d:6c:fb:f2:c5:75:1b:4e:87:4f:52:ed:0b:4f: be:63:36:df:68:70:1f:de:a9:63:27:01:15:e1:c6: 1d:ca:98:fa:32:c3:94:4b:f4:7b:77:72:8e:a0:d7: c9:4c:78:67:5e:05:93:ce:3f:59:ba:89:1b:f2:f7: b6:bf:92:c9:e6:8b:c9:68:a9:b9:75:c4:51:d9:08: 2e:05:7b:1c:6b:68:75:23:9d:66:5f:c5:ec:0b:65: bb:de:6b:e6:e6:88:22:8d:52:e4:54:fb:ce:ea:0a: 1d:34:81:81:35:d5:5a:d0:c7:8a:06:75:e5:ec:74: 3d:9b:55:b4:f0:65:02:d7:73:43:e1:12:99:26:05: 33:f8:22:be:a6:3c:12:70:1b:35:17:5d:61:36:fd: f8:cd:32:31:9d:d9:2f:f7:07:63:38:05:07:0e:7d: 67:df:ce:08:14:35:06:c9:3b:82:91:0e:d9:60:d4: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9C:AF:97:A1:A8:5B:32:DA:F3:F2:05:DC:CE:CA:D8:75:63:87:42 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:23:be:f3:a5:fe:4d:8e:e4:27:21:f0:87:88:a4:47:18:06: ca:9d:0e:bb:3a:cd:7d:32:e3:77:b2:fb:a4:21:56:95:33:2d: b5:4b:e1:e4:59:00:c3:fe:f4:89:a3:a3:a8:e4:d4:21:bb:7f: 8f:9c:c3:b8:90:b3:c0:55:9e:11:70:14:d4:13:b6:4c:08:6a: 4b:ed:4e:4b:02:44:31:cd:1b:06:76:06:dc:7c:e8:b2:84:f1: bd:02:e7:19:c3:b1:ea:80:2a:09:27:3c:3b:07:ea:9f:f0:6a: 46:ed:94:3e:a0:fd:2b:8a:0a:cf:42:60:bf:bb:07:3a:63:b1: 2b:e9:e3:06:a3:58:c4:3e:a7:43:c1:cf:83:a2:14:66:b7:a6: 28:f1:d3:6b:6c:c8:a5:f1:72:b4:26:ee:7e:ed:f4:2a:63:d7: 08:3d:11:b5:62:3f:bb:c9:16:0d:9e:27:14:d7:84:da:a8:13: f1:cd:13:29:bf:f3:ff:b6:47:f1:25:1a:6a:49:e7:ce:e9:ea: 46:fb:68:d6:3b:28:5b:e6:33:7d:93:f0:a0:b0:5a:45:20:32: 80:e0:15:c5:a7:c5:77:83:82:02:cf:69:b6:01:a1:58:c7:8c: 11:18:a9:0d:77:91:c7:4e:36:60:6d:e3:46:06:9b:db:d3:d9: d3:51:7c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUwNTExMDEzOTMwWhcNMjUwNTE4MDEzOTMwWjAYMRYwFAYD VQQDEw02ODFmZmZkMy1kMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7rnxUXE+eQsgKpnwG5edAtIzHR5UO4bOn1amaGBJa6ePl3Wa4YmPbaM4PJq UAOvjlVzJiJ/oxzOdWUqAhS58cN8CFkmgieq06fdbWz78sV1G06HT1LtC0++Yzbf aHAf3qljJwEV4cYdypj6MsOUS/R7d3KOoNfJTHhnXgWTzj9Zuokb8ve2v5LJ5ovJ aKm5dcRR2QguBXsca2h1I51mX8XsC2W73mvm5ogijVLkVPvO6godNIGBNdVa0MeK BnXl7HQ9m1W08GUC13ND4RKZJgUz+CK+pjwScBs1F11hNv34zTIxndkv9wdjOAUH Dn1n384IFDUGyTuCkQ7ZYNSDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJycr5eh qFsy2vPyBdzOyth1Y4dCMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7I77zpf5NjuQnIfCHiKRHGAbKnQ67Os19MuN3svukIVaVMy21S+Hk WQDD/vSJo6Oo5NQhu3+PnMO4kLPAVZ4RcBTUE7ZMCGpL7U5LAkQxzRsGdgbcfOiy hPG9AucZw7HqgCoJJzw7B+qf8GpG7ZQ+oP0rigrPQmC/uwc6Y7Er6eMGo1jEPqdD wc+DohRmt6Yo8dNrbMil8XK0Ju5+7fQqY9cIPRG1Yj+7yRYNnicU14TaqBPxzRMp v/P/tkfxJRpqSefO6epG+2jWOyhb5jN9k/CgsFpFIDKA4BXFp8V3g4ICz2m2AaFY x4wRGKkNd5HHTjZgbeNGBpvb09nTUXw3 -----END CERTIFICATE-----Generated at Mon May 12 07:20:23 2025 by rpki-client