$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: rEXM9b/4zNVC5bd/ku5WBUkAr1U5L0K1nBtrpmUMM1g= Subject key identifier: D8:03:5D:19:6C:BA:CF:52:BF:90:EE:64:9E:02:B4:F9:3C:20:28:7F Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: 59 Signing time: Sun 11 May 2025 05:59:12 +0000 Manifest this update: Sun 11 May 2025 05:59:11 +0000 Manifest next update: Sun 18 May 2025 05:59:11 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: aTwCYXQ8La/qSmmiaYr+7aHPSryihmj/enB0btA/PKk=) 2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: Gjud9DBV5l2d7shu62YgWfFgE4K+4bhp6xDHyEbycw8=) 3: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=) 4: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: May 11 05:59:11 2025 GMT Not After : May 18 05:59:11 2025 GMT Subject: CN=68203cb0-2c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:d6:2a:d7:44:cb:84:97:68:5c:d9:7f:dd: e5:ce:f7:10:8c:8c:c6:8b:9b:72:30:3c:4a:17:7f: 24:3b:d4:d8:65:0c:29:4b:ab:bf:52:84:79:7e:a2: 1c:92:d9:dc:ec:2f:77:74:f0:c1:1d:1f:f7:e2:41: 72:44:79:8d:31:8f:e0:47:7c:26:af:e1:6c:54:80: 7d:66:e9:2c:a0:a3:d8:85:72:2c:8f:83:8e:36:7d: 35:cc:64:73:f8:43:8e:38:ca:37:b9:30:5b:70:dd: 10:e7:ec:06:eb:bd:03:ae:c2:44:3c:65:b8:a6:77: 92:8d:18:ef:64:a2:f3:c4:86:b3:bc:21:35:b5:92: fe:e9:c6:a3:a8:92:9c:4c:cf:b8:40:3e:48:98:93: 6f:22:08:0d:c4:7d:7a:2e:9b:82:2f:09:78:ca:6e: 76:bb:05:6e:1e:e7:7b:5a:8e:e9:96:a2:b6:b7:a1: 8a:af:d2:0c:bd:c3:6f:fb:0b:19:c5:17:61:3c:5b: 81:65:ed:91:4a:26:8f:fa:4d:0a:d7:0a:fc:2e:0e: 2d:28:b3:fc:82:3b:58:6a:6c:a0:c5:02:db:c4:a1: 87:3f:4f:be:99:57:d6:96:4b:da:c5:7e:1a:5d:30: 16:4e:8a:c5:38:86:cd:50:99:48:6e:fa:4d:06:e6: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:5D:19:6C:BA:CF:52:BF:90:EE:64:9E:02:B4:F9:3C:20:28:7F X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:18:5f:ca:11:46:ea:b0:c0:f6:60:5b:9d:41:6b:44:e8: 09:8d:a1:c7:c2:b7:8d:d9:08:a2:31:c4:2b:22:a1:d4:0c:11: 0b:18:88:b9:34:8a:14:32:33:bc:8e:08:84:1c:3c:8f:ae:6d: 7b:0a:b4:61:99:13:33:22:68:1d:8f:df:66:7f:9a:49:ff:ae: a0:ce:7a:3f:60:86:a5:e2:e7:fc:0f:95:cc:58:3a:d8:e7:e7: 52:85:4a:41:12:77:32:08:b2:2a:e1:81:95:85:de:bd:ad:57: 4a:59:68:1b:73:3d:09:9d:cd:52:ee:5c:22:e4:af:d3:89:92: 9a:f4:d7:14:28:0f:88:de:75:dc:d0:12:59:68:fe:53:ae:ab: 5f:b8:f1:5b:97:b4:c0:31:4a:10:af:c0:20:fa:bd:06:85:b3: 70:23:7b:f7:13:24:e4:f0:c7:c8:85:76:50:0e:fc:5e:8b:84: 2f:37:43:4a:08:b0:c7:74:ea:b3:ca:49:f2:64:c1:16:93:55: a1:20:ba:58:fc:61:c8:68:4a:da:c6:83:03:36:06:37:a5:8e: d4:96:e4:4e:80:51:db:6e:a1:7b:58:31:b1:74:21:5a:9d:86: 72:aa:b8:29:4a:62:18:64:8c:69:14:a5:d4:68:67:64:1a:17: e4:ad:29:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx QjgyMUU1NDAeFw0yNTA1MTEwNTU5MTFaFw0yNTA1MTgwNTU5MTFaMBgxFjAUBgNV BAMTDTY4MjAzY2IwLTJjMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ59Yq10TLhJdoXNl/3eXO9xCMjMaLm3IwPEoXfyQ71NhlDClLq79ShHl+ohyS 2dzsL3d08MEdH/fiQXJEeY0xj+BHfCav4WxUgH1m6Sygo9iFciyPg442fTXMZHP4 Q444yje5MFtw3RDn7AbrvQOuwkQ8Zbimd5KNGO9kovPEhrO8ITW1kv7pxqOokpxM z7hAPkiYk28iCA3EfXoum4IvCXjKbna7BW4e53tajumWora3oYqv0gy9w2/7CxnF F2E8W4Fl7ZFKJo/6TQrXCvwuDi0os/yCO1hqbKDFAtvEoYc/T76ZV9aWS9rFfhpd MBZOisU4hs1QmUhu+k0G5o1LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ANdGWy6 z1K/kO5kngK0+TwgKH8wHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODlCLzFCQ0Q0M0I2QjExMTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcw eUhvckprLWRiQ3h1Q0hsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUXGF/KEUbqsMD2YFudQWtE6AmNocfCt43ZCKIxxCsiodQMEQsYiLk0 ihQyM7yOCIQcPI+ubXsKtGGZEzMiaB2P32Z/mkn/rqDOej9ghqXi5/wPlcxYOtjn 51KFSkESdzIIsirhgZWF3r2tV0pZaBtzPQmdzVLuXCLkr9OJkpr01xQoD4jeddzQ Ello/lOuq1+48VuXtMAxShCvwCD6vQaFs3Aje/cTJOTwx8iFdlAO/F6LhC83Q0oI sMd06rPKSfJkwRaTVaEgulj8YchoStrGgwM2BjeljtSW5E6AUdtuoXtYMbF0IVqd hnKquClKYhhkjGkUpdRoZ2QaF+StKQM= -----END CERTIFICATE-----Generated at Sun May 11 09:41:50 2025 by rpki-client