$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: kWar1pxlIXsacklMHZHMAjE9KpVnutsv90B1Mi51758= Subject key identifier: 7F:3C:5B:39:07:DB:64:4D:B2:80:DF:62:E2:C4:74:72:26:D3:22:0A Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03C5 Signing time: Thu 15 May 2025 00:40:45 +0000 Manifest this update: Thu 15 May 2025 00:40:45 +0000 Manifest next update: Thu 22 May 2025 00:40:45 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: x3MZ9pIwUXXQlcyIDzTMkKFHpOlZzb93OtAUJOMjpPo=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: May 15 00:40:45 2025 GMT Not After : May 22 00:40:45 2025 GMT Subject: CN=6825380d-7c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:36:30:53:41:e1:21:56:4f:36:5f:48:e5: 3a:cb:e4:75:d3:49:0b:f1:cb:a8:e9:1f:37:99:eb: aa:5e:bf:9f:2a:1c:58:91:cd:23:d2:24:80:f8:c8: 5f:7b:c1:fd:ff:22:98:ce:9d:fb:ef:7d:3e:41:31: b6:54:fd:4f:f5:25:53:24:87:25:09:7d:c7:84:21: 54:12:a1:98:d9:67:4f:9f:51:b3:f3:a8:87:2d:2a: 6c:5a:27:7e:c5:38:8c:6c:91:d8:3e:44:2f:d5:8f: a5:ca:72:52:97:72:24:10:52:0f:da:0c:d6:bb:bc: 41:f0:84:87:cd:17:f0:f4:4c:20:42:8f:c4:72:27: cd:73:5d:db:25:66:94:b4:b6:b3:a1:c5:0b:c9:76: db:c3:97:fd:a6:4b:66:43:2b:f3:25:ac:96:87:8d: 36:cb:3a:5b:69:68:61:87:88:7e:9b:96:7d:44:54: 73:d6:d1:b2:9d:9f:cd:af:10:c3:7b:71:aa:c3:e9: 00:1c:62:9e:7a:1f:45:41:7f:38:fd:2c:5c:5d:9e: 70:a9:12:0e:97:0f:f6:a0:9f:8d:58:3d:cd:73:39: 9b:ab:20:55:9b:90:5e:41:10:9a:e0:b8:3c:0a:26: dc:0f:d3:89:ec:79:47:c4:24:77:78:49:29:3a:3f: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:5B:39:07:DB:64:4D:B2:80:DF:62:E2:C4:74:72:26:D3:22:0A X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:54:0f:54:be:e1:25:59:98:78:30:b9:8b:2e:70:1d:d7:83: 13:58:40:6e:25:fd:dc:42:b9:fb:17:04:17:8a:7f:43:36:d2: 4b:b4:21:b1:23:11:21:2e:21:1f:79:59:22:9b:5c:f3:29:0d: 92:05:61:b2:ab:0d:65:14:f2:2e:35:a2:f0:cf:18:92:17:84: e2:6e:6d:4e:dd:16:eb:30:d4:5f:b5:1d:51:62:3e:3d:c2:ba: 17:36:cd:e8:3f:56:5c:e0:66:ed:c8:79:e9:69:a4:d8:18:b0: 93:5e:af:5a:45:0f:04:12:23:64:48:63:dd:ae:fb:05:09:e1: 44:12:48:0c:af:cf:8d:b1:5a:60:95:ba:c9:65:e4:34:e9:9e: 01:4e:99:6e:d6:17:3a:20:88:67:74:55:93:68:99:ef:ba:86: a1:37:c6:72:9e:67:10:f5:ef:f0:a4:67:f3:36:d5:26:0b:24: 4e:f4:4f:1a:22:f4:47:ce:60:8b:cc:62:ee:11:fd:f8:62:1e: 5d:f9:1d:1b:2d:85:71:2b:28:eb:28:6f:8a:39:2a:5a:c1:21: b7:6f:9a:48:15:d8:f5:01:3a:b5:b2:ea:6c:1d:45:4c:84:be: e2:33:7f:4c:27:4d:65:2c:3d:a9:51:aa:59:03:52:ab:74:a4: 60:6e:3e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwNTE1MDA0MDQ1WhcNMjUwNTIyMDA0MDQ1WjAYMRYwFAYD VQQDEw02ODI1MzgwZC03YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfM2MFNB4SFWTzZfSOU6y+R100kL8cuo6R83meuqXr+fKhxYkc0j0iSA+Mhf e8H9/yKYzp37730+QTG2VP1P9SVTJIclCX3HhCFUEqGY2WdPn1Gz86iHLSpsWid+ xTiMbJHYPkQv1Y+lynJSl3IkEFIP2gzWu7xB8ISHzRfw9EwgQo/EcifNc13bJWaU tLazocULyXbbw5f9pktmQyvzJayWh402yzpbaWhhh4h+m5Z9RFRz1tGynZ/NrxDD e3Gqw+kAHGKeeh9FQX84/SxcXZ5wqRIOlw/2oJ+NWD3NczmbqyBVm5BeQRCa4Lg8 CibcD9OJ7HlHxCR3eEkpOj/UYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH88WzkH 22RNsoDfYuLEdHIm0yIKMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUVA9UvuElWZh4MLmLLnAd14MTWEBuJf3cQrn7FwQXin9DNtJLtCGx IxEhLiEfeVkim1zzKQ2SBWGyqw1lFPIuNaLwzxiSF4Tibm1O3RbrMNRftR1RYj49 wroXNs3oP1Zc4GbtyHnpaaTYGLCTXq9aRQ8EEiNkSGPdrvsFCeFEEkgMr8+NsVpg lbrJZeQ06Z4BTplu1hc6IIhndFWTaJnvuoahN8ZynmcQ9e/wpGfzNtUmCyRO9E8a IvRHzmCLzGLuEf34Yh5d+R0bLYVxKyjrKG+KOSpawSG3b5pIFdj1ATq1supsHUVM hL7iM39MJ01lLD2pUapZA1KrdKRgbj4z -----END CERTIFICATE-----Generated at Thu May 15 03:20:17 2025 by rpki-client