$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: hgxApyY2jlAu+Q7mauyGeIEZV2DQkR2WsyrcbzXmTdU= Subject key identifier: 33:43:C5:74:2B:0F:6C:89:73:C6:B9:C3:D0:2C:DC:9B:76:95:4C:09 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 02CA Signing time: Sun 11 May 2025 00:56:11 +0000 Manifest this update: Sun 11 May 2025 00:56:10 +0000 Manifest next update: Sun 18 May 2025 00:56:10 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: tEwidDplEsCcDVvi0v/XX2VAjkI6+Aj7pOkeulb7gz4=) 2: E6054D96F3CB11ECA86DCE60C4F9AE02.roa (hash: PELmNyhpg0raHsA7GFw1TRNGLjn8BhP7w+wplytqqsg=) 3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: May 11 00:56:10 2025 GMT Not After : May 18 00:56:10 2025 GMT Subject: CN=681ff5aa-351b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:ad:31:06:b7:f0:21:58:d1:55:c7:e2:a2: 30:1c:82:c4:99:4e:aa:75:dc:2e:f4:ec:24:53:ca: 2b:e5:db:7e:d4:cb:85:0a:0a:58:35:7e:36:bb:11: d4:86:48:d2:fe:41:93:61:f8:ae:b3:22:e3:45:72: 51:93:3a:67:c5:3e:b5:18:ad:5f:5e:da:26:44:a0: ce:83:5d:20:a8:01:b0:56:65:e8:d0:41:5b:49:29: 98:64:8b:40:34:a9:2f:25:1c:42:76:65:ac:af:1d: 04:7e:84:04:62:34:7a:c9:2e:17:cf:1d:9b:c3:eb: 60:7e:05:1a:1e:2b:a9:30:47:3f:1b:2b:50:84:7f: f7:69:ff:a2:40:ce:aa:c2:a6:9f:f4:cb:02:5f:ad: 56:33:96:12:cc:ae:c6:76:6c:16:cd:3c:1e:7f:7c: f1:86:f9:65:d7:51:6d:0f:7d:a0:3f:87:26:7c:b1: 74:02:1b:47:16:4d:1e:3a:44:b2:cb:63:b9:b1:a6: da:e1:52:cf:4d:e3:94:0d:c9:47:0e:b4:ee:c6:6b: b5:61:3c:d0:ed:5c:13:34:8c:b5:35:7c:62:d7:86: 02:c4:d0:7b:f9:6d:bf:a4:fd:3e:28:47:0f:cd:27: 54:16:5e:2e:b5:70:a5:7f:0a:a5:bb:9c:8a:c6:d2: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:43:C5:74:2B:0F:6C:89:73:C6:B9:C3:D0:2C:DC:9B:76:95:4C:09 X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:90:70:78:96:fc:e0:2f:6e:e6:7d:3a:55:70:f1:09:e9:1d: 04:05:f4:bd:13:cc:19:ad:fc:90:04:8e:f2:56:d4:d9:9c:5b: 6a:9c:2f:e0:e4:ca:1a:db:ea:05:92:b6:22:be:32:b5:62:36: 83:14:95:a8:df:d7:7d:3b:7a:64:bf:64:70:b9:ee:4f:db:d3: 36:6b:10:07:1d:7d:7d:a9:c0:a0:7f:00:db:4c:5c:fc:ca:00: e5:7b:1c:c1:6b:18:e6:b8:97:cc:c5:03:21:37:8a:fd:5b:bc: 92:2d:ad:8f:3a:87:a6:09:12:38:9e:a9:62:ea:c2:95:9e:b9: 75:c5:cd:ef:d9:07:33:a0:e7:36:db:9d:3f:2e:4e:4b:49:f5: 34:de:ee:bd:6b:62:6e:b9:46:4b:2e:97:38:11:3a:61:c5:dd: 12:92:75:12:1d:a8:91:c6:9b:5f:e9:7c:5e:38:f3:ba:63:1d: 22:e8:32:92:94:8a:fb:16:e2:5e:52:ab:96:53:c5:5e:ea:78: a8:8d:79:ad:36:1e:88:87:b9:45:d9:d0:26:5e:80:a4:bc:b1: 24:47:9e:81:0f:d0:63:b9:6c:65:32:5a:c4:9e:73:e2:cf:6f: 61:5d:8e:92:ba:e6:9e:90:bf:8c:65:34:51:25:e5:e0:f5:12: 59:91:32:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwNTExMDA1NjEwWhcNMjUwNTE4MDA1NjEwWjAYMRYwFAYD VQQDEw02ODFmZjVhYS0zNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznStMQa38CFY0VXH4qIwHILEmU6qddwu9OwkU8or5dt+1MuFCgpYNX42uxHU hkjS/kGTYfiusyLjRXJRkzpnxT61GK1fXtomRKDOg10gqAGwVmXo0EFbSSmYZItA NKkvJRxCdmWsrx0EfoQEYjR6yS4Xzx2bw+tgfgUaHiupMEc/GytQhH/3af+iQM6q wqaf9MsCX61WM5YSzK7GdmwWzTwef3zxhvll11FtD32gP4cmfLF0AhtHFk0eOkSy y2O5saba4VLPTeOUDclHDrTuxmu1YTzQ7VwTNIy1NXxi14YCxNB7+W2/pP0+KEcP zSdUFl4utXClfwqlu5yKxtLOywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNDxXQr D2yJc8a5w9As3Jt2lUwJMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgkHB4lvzgL27mfTpVcPEJ6R0EBfS9E8wZrfyQBI7yVtTZnFtqnC/g 5Moa2+oFkrYivjK1YjaDFJWo39d9O3pkv2Rwue5P29M2axAHHX19qcCgfwDbTFz8 ygDlexzBaxjmuJfMxQMhN4r9W7ySLa2POoemCRI4nqli6sKVnrl1xc3v2QczoOc2 250/Lk5LSfU03u69a2JuuUZLLpc4ETphxd0SknUSHaiRxptf6XxeOPO6Yx0i6DKS lIr7FuJeUquWU8Ve6niojXmtNh6Ih7lF2dAmXoCkvLEkR56BD9BjuWxlMlrEnnPi z29hXY6SuuaekL+MZTRRJeXg9RJZkTJu -----END CERTIFICATE-----Generated at Mon May 12 08:28:52 2025 by rpki-client