$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: GJ/UWbCXrWpUEbOEm3rZRHzIxztRSkCG5eilgwdZ23g= Subject key identifier: 4A:A9:5C:E4:58:05:D4:B4:19:A3:4D:22:07:F7:E1:9E:28:D3:BD:21 Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 08 Signing time: Tue 13 May 2025 07:24:00 +0000 Manifest this update: Tue 13 May 2025 07:24:00 +0000 Manifest next update: Tue 20 May 2025 07:24:00 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: K2RALazI4p2hGXi09FhQAQ/6klSK4IzbEhrZ3vn2NFo=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 9DCYF62RrlJKaHq2Fa56Ekta+qQ8x2TCp6y7wohIGUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: May 13 07:24:00 2025 GMT Not After : May 20 07:24:00 2025 GMT Subject: CN=6822f390-2ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:f7:12:3f:48:af:f3:aa:df:37:97:9e:ff: c4:c9:31:f9:58:8c:e2:45:6f:de:00:69:0d:d1:ac: a8:fb:5e:b5:ea:09:8c:13:67:ad:87:cc:fd:70:30: b4:8e:5d:45:be:08:fa:19:e5:f7:a8:5c:de:57:3a: 84:06:ac:ce:cb:23:9e:a7:40:0f:68:24:30:8e:4d: 8e:ff:85:2e:87:fc:58:fb:47:7e:8e:01:ef:a0:dd: 93:7c:7a:3a:be:7e:5b:82:c9:70:7a:48:69:cd:3d: a2:b8:05:e3:5c:6c:f7:1c:1a:bc:6c:ec:69:c1:23: d6:ec:1a:c5:1b:18:db:aa:30:2a:e0:a1:0c:e7:ff: 07:93:30:e6:83:6e:13:e8:ba:54:dd:4b:1c:7b:de: 43:bd:22:dd:74:3b:9a:a4:b2:0b:a6:08:c7:2e:63: c1:f2:12:62:9f:25:89:66:73:76:a6:d9:41:cf:97: c3:56:79:0b:c8:1e:5e:a4:9f:cb:88:b9:65:1e:19: 2b:ff:d6:cf:89:0f:af:b7:86:fa:aa:85:1f:80:c5: d8:35:c5:2e:8a:61:bf:29:5a:37:c1:22:ea:e2:dd: 4b:9c:34:d4:d7:ff:d9:14:ea:8d:de:08:8e:cb:ab: 43:04:51:b3:47:29:46:ed:32:63:92:bd:9a:07:0a: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:5C:E4:58:05:D4:B4:19:A3:4D:22:07:F7:E1:9E:28:D3:BD:21 X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:88:f1:ee:82:1a:e7:ce:a1:87:86:91:bc:c9:b6:7f:c5:cb: 68:56:9d:c9:41:cd:f1:5f:6c:56:b3:67:e8:9e:be:01:e6:12: bb:4c:17:ff:14:6d:d4:8c:50:00:58:62:9a:31:a4:4c:d1:c4: d1:12:8d:05:64:30:2c:e9:21:43:6a:de:db:8b:76:60:38:e7: a6:e0:35:71:87:40:7e:2f:06:7a:8b:0c:38:d5:36:08:3b:33: 6f:12:ef:86:4d:a5:97:a7:80:00:fe:d2:da:36:52:40:64:54: 7b:91:a6:49:ea:3a:0f:3d:42:a3:e1:d2:e9:44:5d:59:e9:6c: 59:cd:c5:4e:79:b2:8d:57:89:56:07:0b:27:73:ea:19:4d:78: 6b:15:52:b8:1f:33:94:b4:a5:98:f5:d6:70:28:a2:d5:e7:b7: de:f0:0b:22:a7:65:92:96:b2:9c:7d:76:e7:bd:fa:1f:b8:8c: 7f:3f:64:fd:82:fc:27:30:16:e3:82:7b:c2:d1:2c:9f:c0:0a: 87:74:3f:05:37:85:97:16:9d:21:a2:f5:31:c3:1b:85:46:5d: 8b:30:8a:46:4f:51:7e:b2:9e:a4:f4:d0:16:06:5f:68:67:dd: c1:62:96:b3:4b:4a:87:2f:ad:7f:fd:0e:93:0d:44:10:5a:70: 0a:96:92:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTA1MTMwNzI0MDBaFw0yNTA1MjAwNzI0MDBaMBgxFjAUBgNV BAMTDTY4MjJmMzkwLTJlZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb1PcSP0iv86rfN5ee/8TJMflYjOJFb94AaQ3RrKj7XrXqCYwTZ62HzP1wMLSO XUW+CPoZ5feoXN5XOoQGrM7LI56nQA9oJDCOTY7/hS6H/Fj7R36OAe+g3ZN8ejq+ fluCyXB6SGnNPaK4BeNcbPccGrxs7GnBI9bsGsUbGNuqMCrgoQzn/weTMOaDbhPo ulTdSxx73kO9It10O5qksgumCMcuY8HyEmKfJYlmc3am2UHPl8NWeQvIHl6kn8uI uWUeGSv/1s+JD6+3hvqqhR+Axdg1xS6KYb8pWjfBIuri3UucNNTX/9kU6o3eCI7L q0MEUbNHKUbtMmOSvZoHCtzbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSqlc5FgF 1LQZo00iB/fhnijTvSEwHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKqI8e6CGufOoYeGkbzJtn/Fy2hWnclBzfFfbFazZ+ievgHmErtMF/8U bdSMUABYYpoxpEzRxNESjQVkMCzpIUNq3tuLdmA456bgNXGHQH4vBnqLDDjVNgg7 M28S74ZNpZengAD+0to2UkBkVHuRpknqOg89QqPh0ulEXVnpbFnNxU55so1XiVYH Cydz6hlNeGsVUrgfM5S0pZj11nAootXnt97wCyKnZZKWspx9due9+h+4jH8/ZP2C /CcwFuOCe8LRLJ/ACod0PwU3hZcWnSGi9THDG4VGXYswikZPUX6ynqT00BYGX2hn 3cFilrNLSocvrX/9DpMNRBBacAqWkls= -----END CERTIFICATE-----Generated at Wed May 14 06:25:12 2025 by rpki-client