$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json) Hash identifier: BNwWfg6gT6MgAPyUn3H/S/c/t7QTXjx6XRW5imnb/eg= Subject key identifier: B7:C7:D3:34:B1:DE:02:D5:42:36:6C:AD:97:79:92:46:DD:99:B5:CB Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft Manifest number: 0C11 Signing time: Sat 10 May 2025 18:32:07 +0000 Manifest this update: Sat 10 May 2025 18:32:06 +0000 Manifest next update: Sat 17 May 2025 18:32:06 +0000 Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: zlipUjIM/Eq+aU6EjSFULoISlkIJjBgoRY3zw/a4afs=) 2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: Cjl2Pm+bCZ4QUEFMoQa/76zBHtfWqc+OXt4GAiijv7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: May 10 18:32:06 2025 GMT Not After : May 17 18:32:06 2025 GMT Subject: CN=681f9ba6-56b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:4d:f4:05:a2:9c:70:8a:75:d6:2a:6a:79: f8:47:b1:80:1a:14:14:c3:51:ee:e4:38:5c:81:bd: e1:dc:02:5b:06:98:23:1f:98:e4:a2:60:37:43:ad: ab:ec:e2:76:aa:62:5c:72:c4:92:cd:8c:09:53:13: 53:40:73:fd:33:1d:24:45:fa:ee:4d:e9:42:89:76: 96:49:8d:6a:03:14:7b:0f:9c:43:22:3b:66:7d:d6: 63:4b:3d:40:b1:17:1f:63:64:30:e0:b7:af:33:80: 32:bc:1f:dd:33:3e:09:da:cd:19:3b:4d:64:89:f3: 25:e8:4c:cc:29:67:62:78:2c:72:96:02:e0:26:57: 2a:69:7a:8b:2e:c0:5a:3c:ad:39:bb:b1:fd:50:15: 0a:33:90:51:7c:14:60:06:6d:90:eb:8a:0a:64:d2: 33:73:38:6f:bb:24:a0:2f:a3:37:69:9c:5e:28:31: ac:64:a0:03:8a:f9:94:b3:7c:d0:47:2c:ff:e3:2a: 64:37:d3:b4:38:4d:25:99:5f:86:3b:86:ee:b4:80: de:64:df:39:ce:d2:d1:a4:77:a5:22:1c:f9:09:e8: ed:fc:67:cc:ea:10:52:04:17:18:d0:9b:c3:fa:30: 1e:c4:9a:40:d2:4c:55:81:c8:f2:c0:c7:8b:db:57: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:D3:34:B1:DE:02:D5:42:36:6C:AD:97:79:92:46:DD:99:B5:CB X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:71:21:43:c7:ec:6d:65:1f:71:de:a9:a3:43:ec:02:0b:80: fb:0b:fc:87:03:e8:54:8a:d3:ae:f6:9e:2e:ad:13:f9:e7:e7: 48:dd:27:a3:45:bf:58:c8:35:af:b9:ee:35:e4:38:7c:74:ae: d2:07:00:dd:7e:05:1b:74:2c:e8:e4:5c:46:ee:95:39:7c:27: 76:35:54:21:41:f4:22:cb:6b:9a:6e:dd:6c:55:89:5f:33:8f: 84:1b:0d:ca:9d:bf:7e:44:33:3b:77:4c:8c:92:7b:f0:64:84: 0d:62:79:5d:8f:f8:8b:8c:87:52:f0:a5:02:87:c4:9c:fc:bd: 94:b8:91:aa:14:84:32:44:08:44:83:52:02:38:39:70:97:d3: 88:f7:7f:8a:fa:56:a0:61:b2:3c:92:7c:cf:49:44:6d:4b:9c: f8:3a:33:d6:85:c8:6c:5e:fe:af:66:2f:1d:fe:bc:fe:67:8e: 07:81:4b:70:92:f9:71:5f:a5:4a:37:5f:b3:25:1e:b4:f2:06: b7:b6:0c:5f:a2:01:8c:a6:cd:8a:9d:af:b7:6e:b1:48:32:f2: e7:61:01:38:80:04:e7:b3:d5:e1:2f:56:76:5c:75:5f:dc:07: ac:75:0f:1f:87:25:06:35:67:ad:4a:71:30:a1:4e:65:5b:a9: 4a:d1:17:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUwNTEwMTgzMjA2WhcNMjUwNTE3MTgzMjA2WjAYMRYwFAYD VQQDEw02ODFmOWJhNi01NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGVN9AWinHCKddYqann4R7GAGhQUw1Hu5Dhcgb3h3AJbBpgjH5jkomA3Q62r 7OJ2qmJccsSSzYwJUxNTQHP9Mx0kRfruTelCiXaWSY1qAxR7D5xDIjtmfdZjSz1A sRcfY2Qw4LevM4AyvB/dMz4J2s0ZO01kifMl6EzMKWdieCxylgLgJlcqaXqLLsBa PK05u7H9UBUKM5BRfBRgBm2Q64oKZNIzczhvuySgL6M3aZxeKDGsZKADivmUs3zQ Ryz/4ypkN9O0OE0lmV+GO4butIDeZN85ztLRpHelIhz5Cejt/GfM6hBSBBcY0JvD +jAexJpA0kxVgcjywMeL21dYEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfH0zSx 3gLVQjZsrZd5kkbdmbXLMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQcSFDx+xtZR9x3qmjQ+wCC4D7C/yHA+hUitOu9p4urRP55+dI3Sej Rb9YyDWvue415Dh8dK7SBwDdfgUbdCzo5FxG7pU5fCd2NVQhQfQiy2uabt1sVYlf M4+EGw3Knb9+RDM7d0yMknvwZIQNYnldj/iLjIdS8KUCh8Sc/L2UuJGqFIQyRAhE g1ICODlwl9OI93+K+lagYbI8knzPSURtS5z4OjPWhchsXv6vZi8d/rz+Z44HgUtw kvlxX6VKN1+zJR608ga3tgxfogGMps2Kna+3brFIMvLnYQE4gATns9XhL1Z2XHVf 3AesdQ8fhyUGNWetSnEwoU5lW6lK0Rcb -----END CERTIFICATE-----Generated at Sun May 11 22:12:57 2025 by rpki-client