$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: YdR0+BVFj+8lpp3yArcv/uM0twaIm9MugTyrBlGvgUE= Subject key identifier: 78:06:8D:7B:DA:12:85:8D:1B:A5:A2:80:90:A9:B6:3F:3E:F0:E5:34 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 15 Signing time: Sat 17 May 2025 07:29:31 +0000 Manifest this update: Sat 17 May 2025 07:29:30 +0000 Manifest next update: Sat 24 May 2025 07:29:30 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: mKo0Dmz21VkA9Ry2V0CC5rVESD2WVmO7dRKQLQVCKcM=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: May 17 07:29:30 2025 GMT Not After : May 24 07:29:30 2025 GMT Subject: CN=68283ada-0066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:88:8a:f1:d0:f6:67:a9:a1:59:54:8c:ff: 9f:95:34:d8:99:1d:ef:1d:98:83:6c:5f:99:4a:18: 87:96:51:ec:9e:99:6c:d6:8e:8c:c3:37:59:fd:51: af:74:b9:1d:6a:80:94:38:69:33:b1:9c:47:56:ee: b7:39:d2:fb:a7:4b:11:89:95:a3:be:9b:5e:f5:63: 76:ed:9f:56:0b:b5:46:99:30:7a:ae:7f:e0:02:1e: d2:50:49:1f:06:71:34:ec:90:46:24:b1:30:8c:41: f2:70:79:5e:56:b3:03:85:4a:55:ba:11:6b:49:4e: 4e:27:81:c8:b6:ff:d6:3d:d5:ba:c4:c6:4e:7f:0c: a4:17:75:b4:cb:21:e9:9c:cf:83:bb:07:a1:40:24: e3:6d:76:b1:fc:62:97:0e:9e:85:4c:f9:90:1b:88: ac:a1:b3:8d:85:a1:a7:c3:9f:0f:34:4d:0d:74:f5: 89:b2:63:59:2b:69:da:56:cc:68:35:0b:c9:d0:fb: 2d:9d:14:b0:cc:04:a6:43:95:bd:cd:84:03:f5:14: ec:9e:53:3b:84:8b:27:99:c6:1e:4a:44:0b:60:59: a1:5f:64:61:81:33:ee:11:9e:fc:0b:0c:de:d9:45: 30:08:6f:9c:5c:1d:e9:8f:df:98:c6:52:26:f7:80: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:8D:7B:DA:12:85:8D:1B:A5:A2:80:90:A9:B6:3F:3E:F0:E5:34 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1b:ee:ca:ca:26:40:de:d5:d5:92:87:39:b0:07:75:d7:38: 18:05:af:1c:18:29:aa:9f:53:5c:fd:16:e1:8a:a8:a6:90:c0: 70:0d:c9:10:0c:99:11:38:0e:64:18:4d:1f:19:fb:6d:62:73: dd:9e:8b:da:e1:a1:4d:5b:3a:69:f0:3f:2a:d4:55:85:e9:f8: 39:e7:84:12:ef:51:75:e6:e1:14:05:70:13:f5:72:33:66:12: e0:6b:81:e0:42:0c:11:7d:3b:37:e5:40:ed:6f:33:c3:e6:b8: 7c:ba:89:63:fb:5c:00:49:7d:de:cf:a1:e9:90:2d:f3:cf:f3: 4e:0c:05:05:a8:d7:1c:73:95:d2:37:62:ef:b1:cb:eb:ab:cd: fc:9e:6f:e5:5f:c1:36:38:90:da:b2:01:dc:e5:56:45:58:94: 05:85:f4:5d:47:83:ac:f2:88:93:41:f7:47:db:e3:cb:27:39: 73:75:57:19:54:ab:94:18:67:9f:c3:9d:24:ee:13:91:35:f3: 08:86:bc:2a:18:0c:ef:2b:58:98:13:a8:b6:4b:14:f3:51:a7: c2:64:d6:f2:ca:7c:2b:fe:05:51:ec:2d:cd:7b:f2:3d:e1:54: 8b:28:79:53:94:f8:ba:14:c1:41:ee:c5:1e:b8:0b:bb:9b:a6: 24:39:27:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA1MTcwNzI5MzBaFw0yNTA1MjQwNzI5MzBaMBgxFjAUBgNV BAMTDTY4MjgzYWRhLTAwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3joiK8dD2Z6mhWVSM/5+VNNiZHe8dmINsX5lKGIeWUeyemWzWjozDN1n9Ua90 uR1qgJQ4aTOxnEdW7rc50vunSxGJlaO+m171Y3btn1YLtUaZMHquf+ACHtJQSR8G cTTskEYksTCMQfJweV5WswOFSlW6EWtJTk4ngci2/9Y91brExk5/DKQXdbTLIemc z4O7B6FAJONtdrH8YpcOnoVM+ZAbiKyhs42FoafDnw80TQ109YmyY1kradpWzGg1 C8nQ+y2dFLDMBKZDlb3NhAP1FOyeUzuEiyeZxh5KRAtgWaFfZGGBM+4RnvwLDN7Z RTAIb5xcHemP35jGUib3gCzpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeAaNe9oS hY0bpaKAkKm2Pz7w5TQwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALob7srKJkDe1dWShzmwB3XXOBgFrxwYKaqfU1z9FuGKqKaQwHANyRAM mRE4DmQYTR8Z+21ic92ei9rhoU1bOmnwPyrUVYXp+DnnhBLvUXXm4RQFcBP1cjNm EuBrgeBCDBF9OzflQO1vM8PmuHy6iWP7XABJfd7PoemQLfPP804MBQWo1xxzldI3 Yu+xy+urzfyeb+VfwTY4kNqyAdzlVkVYlAWF9F1Hg6zyiJNB90fb48snOXN1VxlU q5QYZ5/DnSTuE5E18wiGvCoYDO8rWJgTqLZLFPNRp8Jk1vLKfCv+BVHsLc178j3h VIsoeVOU+LoUwUHuxR64C7ubpiQ5J84= -----END CERTIFICATE-----Generated at Sun May 18 11:13:47 2025 by rpki-client