$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: HSe6CykbXjUst1ii8eDBGF5JTyF5QdniVCNX9J+00Ro= Subject key identifier: 21:A0:EF:06:2A:7A:3B:51:22:71:A3:50:CA:61:C8:DF:F2:80:66:11 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2CA0 Signing time: Sat 10 May 2025 15:29:01 +0000 Manifest this update: Sat 10 May 2025 15:29:00 +0000 Manifest next update: Sat 17 May 2025 15:29:00 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: Ul8pR+tPmkJTW4m/ssQLUjtle5MZndA32WcKnZYFld8=) 2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=) 3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=) 4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: fo5MHUuRRZ0aet/6odghmGpOjhNAEkaCj7xDRNlqGJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11473 (0x2cd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: May 10 15:29:00 2025 GMT Not After : May 17 15:29:00 2025 GMT Subject: CN=681f70bc-b61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:91:29:97:11:af:d2:89:35:34:2b:aa:1f: fb:fd:e3:f4:83:4b:c3:b9:0a:dc:ca:a9:07:66:2d: 4c:cb:38:8e:5b:df:76:ab:06:7b:58:3c:4d:01:f6: 26:dd:c9:e2:8e:5e:fb:36:40:c0:bd:b3:20:31:33: fd:fb:82:a0:b8:7e:30:88:f4:d1:9c:1a:25:20:30: 05:d8:a0:d0:a4:a2:e1:c2:cb:73:6b:33:b0:60:e0: 1b:9c:d8:2f:46:64:8d:2f:cb:a5:d7:51:0d:64:c0: 58:b5:8a:ca:7b:d8:35:4f:50:95:70:d0:0e:ce:56: af:d4:62:e0:5a:39:9b:cb:79:8f:fc:90:39:79:0a: a1:e0:1d:5d:7f:bb:3f:7d:f4:71:e1:dd:9b:d5:7e: b6:11:ac:b0:16:da:7a:38:8a:84:ce:ba:be:43:62: c5:8f:2a:73:72:ac:c6:82:42:9a:1d:5b:7c:3f:c8: e5:5d:8d:95:3d:f6:d8:8f:33:b0:fe:d4:1e:79:3f: ea:28:fa:a5:74:ab:60:3c:6b:c8:cf:e8:70:ae:de: fd:8c:b4:dd:b1:4c:b2:d7:2d:46:47:f5:27:b9:47: 85:ea:12:7d:b5:e5:27:6b:72:ba:5e:97:69:13:eb: 60:03:55:31:05:b3:79:eb:82:21:d5:f2:7f:3f:51: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A0:EF:06:2A:7A:3B:51:22:71:A3:50:CA:61:C8:DF:F2:80:66:11 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:22:5b:70:a3:7e:9e:33:3d:35:e7:fb:e9:85:f7:b1:95:d3: 7d:31:a4:6d:32:06:08:c1:83:d3:de:d6:9f:d8:8f:b7:8b:b5: 47:2a:69:90:fe:fe:90:08:35:1c:83:14:6f:1d:20:44:96:2c: 87:b6:8f:22:42:0f:c7:01:ea:e1:df:77:63:59:e1:87:80:fb: a8:46:93:11:d4:a2:d2:d8:39:dd:68:75:ce:4e:dd:d7:9c:01: 2a:20:83:7f:3a:cb:b8:2a:34:91:91:87:ff:0f:1c:af:6b:89: 99:c7:d7:d5:2b:dd:e2:d0:6a:37:c4:65:c4:dc:e9:0f:46:fe: 46:68:97:3f:1a:1e:89:60:d0:ed:59:d1:f8:57:65:3b:86:07: 77:29:16:eb:0c:e8:a4:b3:cd:34:51:69:5c:0c:e7:92:85:0a: 47:cc:0c:76:2c:db:a8:fe:ae:2d:a5:8f:39:a0:66:96:9e:06: c6:ef:34:65:df:79:f6:0b:43:71:81:6c:44:53:d4:d7:29:df: 61:ef:f4:dd:70:e5:66:de:95:3c:00:68:82:91:0e:81:07:94: 84:da:5d:96:70:bd:a5:9c:51:84:2b:83:c2:36:b6:cb:9a:73: fc:1b:29:27:bb:f4:2b:f3:b2:7f:dc:e9:82:38:c5:96:81:14: 85:86:a1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjUwNTEwMTUyOTAwWhcNMjUwNTE3MTUyOTAwWjAYMRYwFAYD VQQDEw02ODFmNzBiYy1iNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8WRKZcRr9KJNTQrqh/7/eP0g0vDuQrcyqkHZi1MyziOW992qwZ7WDxNAfYm 3cnijl77NkDAvbMgMTP9+4KguH4wiPTRnBolIDAF2KDQpKLhwstzazOwYOAbnNgv RmSNL8ul11ENZMBYtYrKe9g1T1CVcNAOzlav1GLgWjmby3mP/JA5eQqh4B1df7s/ ffRx4d2b1X62EaywFtp6OIqEzrq+Q2LFjypzcqzGgkKaHVt8P8jlXY2VPfbYjzOw /tQeeT/qKPqldKtgPGvIz+hwrt79jLTdsUyy1y1GR/UnuUeF6hJ9teUna3K6Xpdp E+tgA1UxBbN564Ih1fJ/P1GrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGg7wYq ejtRInGjUMphyN/ygGYRMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEIltwo36eMz015/vphfexldN9MaRtMgYIwYPT3taf2I+3i7VHKmmQ /v6QCDUcgxRvHSBEliyHto8iQg/HAerh33djWeGHgPuoRpMR1KLS2DndaHXOTt3X nAEqIIN/Osu4KjSRkYf/Dxyva4mZx9fVK93i0Go3xGXE3OkPRv5GaJc/Gh6JYNDt WdH4V2U7hgd3KRbrDOiks800UWlcDOeShQpHzAx2LNuo/q4tpY85oGaWngbG7zRl 33n2C0NxgWxEU9TXKd9h7/TdcOVm3pU8AGiCkQ6BB5SE2l2WcL2lnFGEK4PCNrbL mnP8Gyknu/Qr87J/3OmCOMWWgRSFhqEE -----END CERTIFICATE-----Generated at Mon May 12 12:30:09 2025 by rpki-client