$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: 78m4lchHQ4c278/Q54isKKKHskUCIV7sfzRXMwIrEgA= Subject key identifier: 21:89:3B:29:A0:84:09:1B:FC:E5:5A:E8:E6:50:E7:6A:82:30:39:F4 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: 9A Signing time: Sun 11 May 2025 05:06:29 +0000 Manifest this update: Sun 11 May 2025 05:06:29 +0000 Manifest next update: Sun 18 May 2025 05:06:29 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: S434iRxKX4Rwr4VKItgGp6r7j6OaXcSPXeCGgyGr/kE=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: May 11 05:06:29 2025 GMT Not After : May 18 05:06:29 2025 GMT Subject: CN=68203055-e009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:a0:6f:67:b3:52:a6:75:e9:18:02:0e:09: b1:97:f8:7c:e5:fe:00:27:cb:e8:e4:d1:e7:87:03: 76:de:44:88:47:dc:02:c9:02:0b:80:82:6d:11:0c: e4:5b:e1:c5:80:8f:fd:54:ef:2b:fe:04:f3:0e:9d: d0:01:9a:8d:38:d1:3b:af:59:95:3e:26:61:59:1e: 8c:4d:ed:0b:71:b3:8b:0d:23:4b:81:90:49:69:12: 8d:ec:9c:60:60:04:99:8d:27:17:4b:50:53:d2:2d: 63:96:83:d2:c5:c9:d1:4b:2b:13:81:fe:8d:47:70: 0a:0a:d7:9e:d8:58:19:cb:34:40:5a:6f:0b:c8:e9: fd:5a:ce:71:47:ca:3b:d2:a8:37:49:62:0f:51:74: fd:0d:ec:24:aa:df:54:ad:0a:c8:31:14:e4:9a:9e: 72:67:24:4d:96:a6:2c:c0:ac:fb:92:b2:d2:50:b3: fa:b7:04:21:6a:03:8e:45:da:3e:4c:83:be:bd:54: 67:2b:02:29:96:68:2a:6f:5f:ee:3a:4d:ea:83:6a: 06:de:51:7e:64:db:f4:3c:77:e1:2e:dd:bd:3b:e1: 58:07:55:0e:73:cf:98:2c:2a:c3:eb:6f:73:02:45: f5:92:73:ff:ee:c3:f4:eb:bb:7d:42:47:a4:02:1c: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:3B:29:A0:84:09:1B:FC:E5:5A:E8:E6:50:E7:6A:82:30:39:F4 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:95:8a:41:3f:01:ee:7a:83:69:09:0d:ec:17:51:97:80:b5: 94:40:53:9e:7a:4f:c4:84:ef:33:92:57:63:35:b1:5b:0f:88: 35:c4:41:af:02:fa:6d:5d:ad:e3:c0:1d:73:7f:b9:85:21:3f: 31:c8:1e:8f:29:c9:65:d8:0a:ae:d8:7a:4d:40:0a:4a:7e:8e: 1e:9b:64:33:28:a4:92:f8:08:d4:ba:61:79:13:70:0f:fa:c1: 9c:aa:ce:6d:af:da:a5:61:16:df:84:5f:ec:4c:66:e4:ed:0b: 83:77:e4:5a:fe:a4:f2:51:5f:91:4d:1d:fc:c0:cc:22:cf:70: ee:83:aa:da:7e:2b:98:6c:3b:93:7c:82:ab:fc:df:d9:c9:c4: 00:33:40:c7:60:57:96:4e:97:fb:55:5c:3f:2f:13:d4:14:e8: 0e:01:44:10:fb:49:fb:eb:00:c7:fd:04:8c:a5:25:16:49:fc: a9:72:64:97:38:1e:5c:20:40:04:45:80:41:ac:8e:27:a4:12: 37:f5:87:53:2f:ed:99:d8:bc:ce:11:9c:85:72:fe:ee:09:b0: 63:07:33:64:a9:41:93:d9:10:ac:5d:7b:6e:35:49:4c:39:8d: 6f:50:8b:1a:61:31:e3:e5:06:8c:03:fe:4d:cd:ce:fa:18:e3: 10:56:c9:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwNTExMDUwNjI5WhcNMjUwNTE4MDUwNjI5WjAYMRYwFAYD VQQDEw02ODIwMzA1NS1lMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulSgb2ezUqZ16RgCDgmxl/h85f4AJ8vo5NHnhwN23kSIR9wCyQILgIJtEQzk W+HFgI/9VO8r/gTzDp3QAZqNONE7r1mVPiZhWR6MTe0LcbOLDSNLgZBJaRKN7Jxg YASZjScXS1BT0i1jloPSxcnRSysTgf6NR3AKCtee2FgZyzRAWm8LyOn9Ws5xR8o7 0qg3SWIPUXT9Dewkqt9UrQrIMRTkmp5yZyRNlqYswKz7krLSULP6twQhagOORdo+ TIO+vVRnKwIplmgqb1/uOk3qg2oG3lF+ZNv0PHfhLt29O+FYB1UOc8+YLCrD629z AkX1knP/7sP067t9QkekAhyikwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGJOymg hAkb/OVa6OZQ52qCMDn0MB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWlYpBPwHueoNpCQ3sF1GXgLWUQFOeek/EhO8zkldjNbFbD4g1xEGv AvptXa3jwB1zf7mFIT8xyB6PKcll2Aqu2HpNQApKfo4em2QzKKSS+AjUumF5E3AP +sGcqs5tr9qlYRbfhF/sTGbk7QuDd+Ra/qTyUV+RTR38wMwiz3Dug6rafiuYbDuT fIKr/N/ZycQAM0DHYFeWTpf7VVw/LxPUFOgOAUQQ+0n76wDH/QSMpSUWSfypcmSX OB5cIEAERYBBrI4npBI39YdTL+2Z2LzOEZyFcv7uCbBjBzNkqUGT2RCsXXtuNUlM OY1vUIsaYTHj5QaMA/5Nzc76GOMQVsnn -----END CERTIFICATE-----Generated at Mon May 12 21:40:54 2025 by rpki-client