$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: y5TFAnmc0Q7DRuNm7PB8WuPp2Lie+cTAGYFOVKAt+3k= Subject key identifier: 1D:C8:5F:A3:F9:BB:8A:15:11:A6:C2:37:C9:3D:5C:E2:26:E2:B6:B7 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02A1 Signing time: Tue 13 May 2025 01:19:22 +0000 Manifest this update: Tue 13 May 2025 01:19:21 +0000 Manifest next update: Tue 20 May 2025 01:19:21 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: jI3GaSwEu8N4Xv27K148NCBHr3Z/N4k1RyMkohGg1CA=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: May 13 01:19:21 2025 GMT Not After : May 20 01:19:21 2025 GMT Subject: CN=68229e19-d982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:4e:51:24:cd:10:c0:62:4b:89:7c:8d:28: 84:fb:c9:ee:25:ac:89:7d:ef:26:02:d9:3a:0e:4a: 54:d5:9b:2b:0a:af:a7:f8:8f:e0:89:84:c2:91:c4: 38:a1:02:6f:65:9c:d2:b5:a1:57:d4:16:ac:2d:ea: 4e:9c:3b:ad:cc:4b:40:9b:aa:0e:c3:25:8a:26:4b: a8:d6:c5:0f:7d:dc:af:fe:9d:37:3f:94:4f:ca:ba: da:70:a8:91:2c:f8:fc:9a:1c:3e:c1:a7:1a:35:36: 29:14:ec:67:5e:62:78:2a:d8:c8:91:1b:87:ff:1b: b5:fd:ee:29:2c:90:f5:64:f7:81:1f:f1:db:38:4c: 19:38:1c:fb:08:99:b5:29:dc:4f:c3:bf:19:3e:a4: 44:f6:65:b3:a7:8e:6a:97:bb:15:eb:f4:e4:46:27: 7b:fd:84:7d:22:f9:b5:49:ec:9d:1c:4c:59:7a:bd: 3f:26:c5:74:73:0b:00:37:65:4f:15:c5:2f:cc:95: e0:3c:90:fa:86:4e:e6:7d:d7:9e:95:df:1e:4a:f6: 8f:d8:e6:99:7a:a0:fe:c7:3b:6e:f1:fe:34:8e:0b: 70:fe:d4:9d:95:a0:ab:00:84:e9:f6:b3:b3:ec:50: f3:65:4c:7e:77:b3:cc:4e:d9:e2:15:25:c7:9b:76: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C8:5F:A3:F9:BB:8A:15:11:A6:C2:37:C9:3D:5C:E2:26:E2:B6:B7 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:f3:a3:7d:d9:b8:bd:0a:7b:5b:e4:8d:4b:ab:83:d8:e6: 47:36:04:da:5e:00:ff:91:77:6b:af:64:a7:d8:2c:77:dc:61: 32:3d:16:20:b6:37:e2:b2:ea:11:b4:c4:83:b8:dc:7e:92:ed: 60:cb:a1:a1:77:31:20:4c:d9:59:30:71:7f:68:87:d5:41:a4: cd:84:d1:c6:d8:5c:c6:d0:d2:4a:1a:d3:f7:37:b2:b4:bd:f1: 63:be:15:cd:dd:8f:ea:45:25:96:1f:67:08:08:41:5d:3c:1f: d2:0a:a4:22:e6:58:d8:57:09:b2:68:4f:bc:87:f2:08:03:3b: 09:81:f5:d4:ac:c8:9c:c6:1b:46:30:85:14:c7:7e:c9:0d:b7: fd:b8:19:7a:a4:e9:cd:dc:2d:45:25:09:48:bc:c7:b9:1a:26: ee:5a:62:f7:45:df:83:cf:7e:48:b1:9c:b6:59:fa:96:a8:7b: 7d:1c:27:98:78:41:c7:88:19:c5:9b:bb:c2:ad:42:be:85:99: a0:67:e2:52:5d:9e:c3:db:86:39:53:11:0c:af:fd:2b:d2:81: f8:2a:e6:2e:16:bc:d8:f3:d0:bb:ac:10:5f:40:39:1c:50:7f: 1b:4f:e0:7d:dc:5b:ee:2d:93:88:b4:73:57:45:a4:ac:2e:e0: cc:25:cd:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwNTEzMDExOTIxWhcNMjUwNTIwMDExOTIxWjAYMRYwFAYD VQQDEw02ODIyOWUxOS1kOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RNOUSTNEMBiS4l8jSiE+8nuJayJfe8mAtk6DkpU1ZsrCq+n+I/giYTCkcQ4 oQJvZZzStaFX1BasLepOnDutzEtAm6oOwyWKJkuo1sUPfdyv/p03P5RPyrracKiR LPj8mhw+wacaNTYpFOxnXmJ4KtjIkRuH/xu1/e4pLJD1ZPeBH/HbOEwZOBz7CJm1 KdxPw78ZPqRE9mWzp45ql7sV6/TkRid7/YR9Ivm1SeydHExZer0/JsV0cwsAN2VP FcUvzJXgPJD6hk7mfdeeld8eSvaP2OaZeqD+xztu8f40jgtw/tSdlaCrAITp9rOz 7FDzZUx+d7PMTtniFSXHm3YvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3IX6P5 u4oVEabCN8k9XOIm4ra3MB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZB/Ojfdm4vQp7W+SNS6uD2OZHNgTaXgD/kXdrr2Sn2Cx33GEyPRYg tjfisuoRtMSDuNx+ku1gy6GhdzEgTNlZMHF/aIfVQaTNhNHG2FzG0NJKGtP3N7K0 vfFjvhXN3Y/qRSWWH2cICEFdPB/SCqQi5ljYVwmyaE+8h/IIAzsJgfXUrMicxhtG MIUUx37JDbf9uBl6pOnN3C1FJQlIvMe5GibuWmL3Rd+Dz35IsZy2WfqWqHt9HCeY eEHHiBnFm7vCrUK+hZmgZ+JSXZ7D24Y5UxEMr/0r0oH4KuYuFrzY89C7rBBfQDkc UH8bT+B93FvuLZOItHNXRaSsLuDMJc1o -----END CERTIFICATE-----Generated at Wed May 14 10:11:16 2025 by rpki-client