$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: CKN1WFUH1zFK/Dts0oBTQh4FGSHRJ1vg8BLji4rkSSk= Subject key identifier: AD:C1:A5:87:6B:AF:AC:A4:22:70:B4:EA:B1:3C:FC:A3:65:37:00:21 Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 019F Signing time: Thu 15 May 2025 02:48:21 +0000 Manifest this update: Thu 15 May 2025 02:48:21 +0000 Manifest next update: Thu 22 May 2025 02:48:21 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: ZWdUmC9qwiIX+w4CsSSb4f6FE/lonN8du9kXJ62yCUk=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: jtm4IGu6ehkk/GhdKICbbynbKgcYNoX0OJfsqwSmMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: May 15 02:48:21 2025 GMT Not After : May 22 02:48:21 2025 GMT Subject: CN=682555f5-1490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:9a:a9:89:71:c7:d0:ed:43:2f:63:c0:1d: 9d:54:c1:38:78:e3:b2:0f:61:b3:e0:34:d5:44:19: d8:eb:82:82:28:8c:81:60:18:ca:93:6c:57:f5:28: 73:ab:97:3d:ef:f8:ef:e9:51:85:8a:6c:77:96:19: e7:c8:b3:35:6b:36:5b:ac:2b:a2:bb:74:9a:2f:07: 9c:5b:5b:3b:33:28:71:8a:5f:3a:7d:3e:4e:17:ef: 98:7e:d0:92:81:7b:5d:3c:84:e5:8e:a5:17:e0:8c: 17:41:fb:24:44:0f:4c:2a:38:d0:46:66:5f:2a:c5: e6:10:e6:83:74:06:4a:72:1b:71:37:97:0b:16:d3: 9c:b9:a8:cc:ac:13:85:26:96:44:69:93:e5:a7:62: 89:71:4f:d5:ea:94:69:22:58:4e:a9:0f:41:f9:3e: 64:28:fd:29:17:79:3c:ea:b4:4f:2e:b4:2a:80:d6: b2:33:2e:f0:29:25:29:a4:c3:69:23:7d:f3:92:f0: c4:91:97:51:db:bb:43:8a:34:18:42:2e:68:7d:20: 22:ea:84:48:8f:21:62:fe:1a:a2:35:7e:a7:6e:a9: b8:12:6f:73:1d:e3:30:d1:fe:a1:d7:e0:c8:25:96: 2c:21:73:59:92:db:4a:76:35:e9:55:09:a1:ee:a0: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C1:A5:87:6B:AF:AC:A4:22:70:B4:EA:B1:3C:FC:A3:65:37:00:21 X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:48:dc:a9:4f:af:a4:68:0d:68:38:e7:32:0b:e6:ad:f9:c7: 52:3a:a5:6d:b7:d5:14:35:6c:2e:6b:95:70:cf:b8:14:6d:0f: 19:0b:e0:be:0a:a3:9d:20:60:45:f8:d1:25:d6:ee:20:4b:c4: c8:c2:3b:57:80:30:c6:1b:df:46:09:92:ea:e8:1e:bf:26:85: e7:91:b9:e7:64:98:aa:32:9e:4f:cf:dc:3b:11:01:fd:0e:da: ef:06:71:2b:c9:57:72:b2:28:4d:0f:04:2d:0d:7a:fc:da:e5: 74:a0:0a:23:50:66:06:e9:87:3d:90:c2:92:0e:1a:8f:76:1b: 3f:ee:bd:d6:d0:16:48:2d:a0:09:6a:4c:e9:c9:84:73:16:06: 8c:cc:ac:66:ec:d1:38:c7:d6:b5:fe:07:fd:3c:61:02:0a:2e: c4:6b:27:5a:80:2e:31:b9:36:11:30:af:8a:e2:97:da:39:50: 30:9b:79:bf:8e:cf:4a:bc:15:5e:fa:1c:c6:c7:7e:9f:1c:44: 8a:c4:47:07:a2:ef:38:24:63:c4:5c:a9:bf:a1:ef:b6:b8:61: 8d:ba:44:bb:dc:d5:21:e7:61:f7:08:92:74:ad:d0:7e:3b:6f: d0:0a:b5:1c:78:cf:1d:44:60:41:51:1b:48:6b:4b:d8:ed:d3: a9:4c:9a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjUwNTE1MDI0ODIxWhcNMjUwNTIyMDI0ODIxWjAYMRYwFAYD VQQDEw02ODI1NTVmNS0xNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FWaqYlxx9DtQy9jwB2dVME4eOOyD2Gz4DTVRBnY64KCKIyBYBjKk2xX9Shz q5c97/jv6VGFimx3lhnnyLM1azZbrCuiu3SaLwecW1s7Myhxil86fT5OF++YftCS gXtdPITljqUX4IwXQfskRA9MKjjQRmZfKsXmEOaDdAZKchtxN5cLFtOcuajMrBOF JpZEaZPlp2KJcU/V6pRpIlhOqQ9B+T5kKP0pF3k86rRPLrQqgNayMy7wKSUppMNp I33zkvDEkZdR27tDijQYQi5ofSAi6oRIjyFi/hqiNX6nbqm4Em9zHeMw0f6h1+DI JZYsIXNZkttKdjXpVQmh7qAE6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3BpYdr r6ykInC06rE8/KNlNwAhMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9SNypT6+kaA1oOOcyC+at+cdSOqVtt9UUNWwua5Vwz7gUbQ8ZC+C+ CqOdIGBF+NEl1u4gS8TIwjtXgDDGG99GCZLq6B6/JoXnkbnnZJiqMp5Pz9w7EQH9 DtrvBnEryVdysihNDwQtDXr82uV0oAojUGYG6Yc9kMKSDhqPdhs/7r3W0BZILaAJ akzpyYRzFgaMzKxm7NE4x9a1/gf9PGECCi7EaydagC4xuTYRMK+K4pfaOVAwm3m/ js9KvBVe+hzGx36fHESKxEcHou84JGPEXKm/oe+2uGGNukS73NUh52H3CJJ0rdB+ O2/QCrUceM8dRGBBURtIa0vY7dOpTJph -----END CERTIFICATE-----Generated at Fri May 16 18:51:56 2025 by rpki-client