$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: XXCMVQyWFaq352ZUfIUFqcRfkb6UM+t+nw/TBWwL4HA= Subject key identifier: 53:5E:44:64:E4:C2:67:2D:71:9E:F2:65:90:28:03:0A:F1:C3:AF:D4 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 044E Signing time: Thu 15 May 2025 00:15:46 +0000 Manifest this update: Thu 15 May 2025 00:15:46 +0000 Manifest next update: Thu 22 May 2025 00:15:46 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: azew39ZOqUZNARNS/oFAx6XMdjobZFaH2QX07c5+wn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: May 15 00:15:46 2025 GMT Not After : May 22 00:15:46 2025 GMT Subject: CN=68253232-fa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:25:2a:01:42:1a:f8:af:98:95:59:64:20: f1:67:7f:8d:1b:e2:f0:9c:63:f0:d6:cd:a3:1f:dc: fb:4b:53:65:d2:78:59:4a:a3:a6:16:d0:68:1c:fc: 01:ea:8d:1b:80:7f:b1:dc:98:61:29:a2:bb:a5:01: 95:3e:55:ad:08:c1:4a:61:c0:b9:cb:60:88:d8:39: 62:97:a3:4c:38:dd:27:1d:93:68:af:f9:12:47:30: 5f:de:e8:ea:21:76:e2:db:8b:68:ba:c4:a6:f9:47: cc:65:6d:a6:53:1f:45:29:c8:21:7e:b7:0d:6c:02: 7f:21:6e:10:a7:2d:17:dd:e1:25:29:5a:51:b4:0a: 03:e7:95:df:64:3b:71:93:b7:19:be:8f:07:8b:40: 70:7c:ee:ab:24:7e:61:e5:53:82:03:b1:51:19:f9: 39:a8:16:c2:0e:d7:7f:57:e2:a8:1f:e8:9f:38:78: 12:eb:a8:a3:a9:c2:72:c4:25:c4:9d:0f:2c:34:40: 7a:0b:7d:12:dc:0a:f2:e0:20:31:b3:0c:5e:84:38: 71:26:6e:b5:cf:c8:94:5b:ec:43:23:20:6d:ae:ab: 4d:b7:61:5d:26:06:8d:90:0f:77:99:47:41:9a:f6: a1:37:fb:e3:39:14:6b:1a:65:cb:29:c5:78:f8:ab: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:44:64:E4:C2:67:2D:71:9E:F2:65:90:28:03:0A:F1:C3:AF:D4 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:81:a4:62:e3:ec:b3:4a:be:24:3e:f7:4b:d1:eb:b7:dd:e7: b6:86:73:9a:c0:b8:57:ec:c3:65:8f:66:f7:b7:18:be:80:2c: 49:7d:52:22:c8:ec:06:ab:53:05:59:07:00:08:7a:f2:cc:bf: b0:27:52:2f:ad:c8:8c:2f:c3:cf:6e:86:71:ea:c9:f3:9f:1d: f7:9f:28:35:6f:25:62:8d:3b:d7:3c:99:b3:74:0e:5c:7b:0a: a3:df:87:7f:bb:ed:83:f0:d7:1b:c7:da:e2:bf:0c:42:37:a9: 88:41:0f:37:24:e4:d4:ec:5f:df:6c:4d:ed:0c:1f:8e:53:86: 93:47:8c:07:0c:42:9e:c6:49:51:74:75:25:d3:82:16:d8:99: 83:a8:d8:e9:8f:74:aa:c9:36:a4:40:39:8b:9f:c3:56:7b:59: 4e:8a:b3:e3:5c:32:c1:a7:02:52:5b:a8:d7:c3:b1:78:06:3c: 3a:19:3a:10:c8:ac:ff:7e:ee:db:47:01:0d:53:1c:76:98:8f: f5:1b:57:26:89:3a:e1:25:29:61:62:10:62:52:d2:ad:83:29: 45:4c:7c:63:91:df:81:0f:a8:0d:5e:0d:68:2d:b4:79:1d:5d: 4f:01:45:d7:5d:77:4b:fb:63:d6:45:8a:cc:b1:94:30:15:12: 10:8e:99:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUwNTE1MDAxNTQ2WhcNMjUwNTIyMDAxNTQ2WjAYMRYwFAYD VQQDEw02ODI1MzIzMi1mYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHMlKgFCGvivmJVZZCDxZ3+NG+LwnGPw1s2jH9z7S1Nl0nhZSqOmFtBoHPwB 6o0bgH+x3JhhKaK7pQGVPlWtCMFKYcC5y2CI2Dlil6NMON0nHZNor/kSRzBf3ujq IXbi24tousSm+UfMZW2mUx9FKcghfrcNbAJ/IW4Qpy0X3eElKVpRtAoD55XfZDtx k7cZvo8Hi0BwfO6rJH5h5VOCA7FRGfk5qBbCDtd/V+KoH+ifOHgS66ijqcJyxCXE nQ8sNEB6C30S3Ary4CAxswxehDhxJm61z8iUW+xDIyBtrqtNt2FdJgaNkA93mUdB mvahN/vjORRrGmXLKcV4+KsZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNeRGTk wmctcZ7yZZAoAwrxw6/UMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvgaRi4+yzSr4kPvdL0eu33ee2hnOawLhX7MNlj2b3txi+gCxJfVIi yOwGq1MFWQcACHryzL+wJ1IvrciML8PPboZx6snznx33nyg1byVijTvXPJmzdA5c ewqj34d/u+2D8Ncbx9rivwxCN6mIQQ83JOTU7F/fbE3tDB+OU4aTR4wHDEKexklR dHUl04IW2JmDqNjpj3SqyTakQDmLn8NWe1lOirPjXDLBpwJSW6jXw7F4Bjw6GToQ yKz/fu7bRwENUxx2mI/1G1cmiTrhJSlhYhBiUtKtgylFTHxjkd+BD6gNXg1oLbR5 HV1PAUXXXXdL+2PWRYrMsZQwFRIQjpmZ -----END CERTIFICATE-----Generated at Thu May 15 19:26:42 2025 by rpki-client