$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft File: pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json) Hash identifier: gVBWqzg/gqTeCTkiMM9ojqYwsK7sa7wsIpazxz1PTMw= Subject key identifier: 4A:1D:2A:94:DA:B1:88:0F:E7:F4:0E:9A:C9:2E:94:8A:3B:A5:CF:42 Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft Manifest number: 023D Signing time: Sat 17 May 2025 02:08:00 +0000 Manifest this update: Sat 17 May 2025 02:08:00 +0000 Manifest next update: Sat 24 May 2025 02:08:00 +0000 Files and hashes: 1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: IeX7VzD8eG6Z3XQoRtaNsbHzN3LIEOn3wUHt6+/W9hQ=) 2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Validity Not Before: May 17 02:08:00 2025 GMT Not After : May 24 02:08:00 2025 GMT Subject: CN=6827ef80-8e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:10:ce:6d:1c:e2:ea:17:c7:ae:77:11:80: df:d3:a4:b5:ef:88:dc:d5:7b:2a:cd:01:bb:2f:a3: fe:5e:b2:1e:73:58:51:84:9d:3e:ff:8c:e0:78:14: 8e:ff:70:ff:e0:8f:43:f0:49:72:dc:48:2a:bd:99: 2c:98:86:28:3b:c9:b7:2c:cc:41:b4:b1:2a:e0:c8: e7:46:fd:83:0d:ab:2f:92:f6:d2:a3:76:92:50:d5: b0:e0:59:47:3a:3e:03:af:a5:06:b0:3c:3d:ae:21: c2:2d:75:31:3b:31:03:fb:f8:ae:4f:52:7b:2f:50: d4:32:fa:63:85:4a:d5:a8:60:0f:d2:37:f2:bc:54: 52:48:36:0c:cf:de:81:08:11:fb:df:40:64:04:93: a3:aa:1a:58:26:76:05:82:8f:cb:b5:af:38:10:5c: 7c:d0:39:1c:69:7b:7c:44:a4:0c:bc:65:ab:6e:a3: 1d:f9:36:3d:25:a3:e5:20:fe:b9:56:76:9b:3f:be: 16:c3:df:af:3e:76:ef:2a:8b:9a:5b:d6:c9:0d:ee: d4:a8:2a:97:fc:90:aa:fb:9b:c0:ae:73:1a:94:e7: 90:86:3b:c6:c2:39:09:d7:af:42:93:da:7b:8c:e1: 46:9e:fb:36:6a:39:a4:ae:c6:14:3a:6c:3f:be:03: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:2A:94:DA:B1:88:0F:E7:F4:0E:9A:C9:2E:94:8A:3B:A5:CF:42 X509v3 Authority Key Identifier: keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:48:55:68:7f:90:78:52:60:e3:a8:f5:ef:2e:6c:72:8d: 91:d8:55:44:89:04:5b:da:42:cd:d2:2e:72:d0:42:f7:3a:33: 42:1e:42:d1:32:53:38:1e:24:04:46:b8:ea:1b:0b:b8:b4:49: cb:3f:ef:89:ba:68:90:19:04:a7:fd:04:25:3f:71:bf:9f:b0: ab:87:12:69:94:1c:c3:43:6e:74:f6:79:78:d5:28:9f:50:92: 4e:9d:7a:72:6b:0d:05:9c:13:9f:53:b6:b9:e3:d3:88:2a:bb: a9:c3:27:6d:6c:a2:84:0b:cd:5e:ee:1c:3e:e6:ba:63:b8:2f: f1:76:88:c9:fd:74:5f:28:02:23:e0:9e:f0:49:80:db:68:86: 82:a8:5b:a4:43:24:4e:55:cc:e4:28:b7:b4:2a:e9:5e:fe:7f: c2:49:19:59:0f:cb:7e:42:86:0d:3a:68:04:38:15:c4:2e:13: 8f:25:8f:51:35:07:47:5d:3a:f1:05:de:d9:8b:25:90:7a:f9: 8d:cc:13:62:fa:67:1f:64:fb:90:3d:31:de:a9:87:e5:39:c2: 92:7f:2a:7b:d7:df:8d:4d:0c:59:2e:2d:d8:91:b2:7d:1b:e9: 86:c2:8c:90:d5:56:7f:ff:cd:49:f4:06:1c:85:36:0c:73:b4: 42:6f:b7:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw QjU3MkVFN0EwHhcNMjUwNTE3MDIwODAwWhcNMjUwNTI0MDIwODAwWjAYMRYwFAYD VQQDEw02ODI3ZWY4MC04ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXIQzm0c4uoXx653EYDf06S174jc1XsqzQG7L6P+XrIec1hRhJ0+/4zgeBSO /3D/4I9D8Ely3EgqvZksmIYoO8m3LMxBtLEq4MjnRv2DDasvkvbSo3aSUNWw4FlH Oj4Dr6UGsDw9riHCLXUxOzED+/iuT1J7L1DUMvpjhUrVqGAP0jfyvFRSSDYMz96B CBH730BkBJOjqhpYJnYFgo/Lta84EFx80DkcaXt8RKQMvGWrbqMd+TY9JaPlIP65 VnabP74Ww9+vPnbvKouaW9bJDe7UqCqX/JCq+5vArnMalOeQhjvGwjkJ169Ck9p7 jOFGnvs2ajmkrsYUOmw/vgPy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEodKpTa sYgP5/QOmskulIo7pc9CMB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3 NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDUyMi9ERTIwRkM5NjI3NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpk aU44dWJVOUQzaW9MVnk3bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARF0hVaH+QeFJg46j17y5sco2R2FVEiQRb2kLN0i5y0EL3OjNCHkLR MlM4HiQERrjqGwu4tEnLP++JumiQGQSn/QQlP3G/n7CrhxJplBzDQ2509nl41Sif UJJOnXpyaw0FnBOfU7a549OIKrupwydtbKKEC81e7hw+5rpjuC/xdojJ/XRfKAIj 4J7wSYDbaIaCqFukQyROVczkKLe0Kule/n/CSRlZD8t+QoYNOmgEOBXELhOPJY9R NQdHXTrxBd7ZiyWQevmNzBNi+mcfZPuQPTHeqYflOcKSfyp719+NTQxZLi3YkbJ9 G+mGwoyQ1VZ//81J9AYchTYMc7RCb7c7 -----END CERTIFICATE-----Generated at Sun May 18 11:02:03 2025 by rpki-client