$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: zeGPJfVPQVk/5d3eriy82G6Xl9rBSOdHn+wpaY7bPVY= Subject key identifier: E0:05:42:47:E2:08:E0:F2:2C:40:F4:F5:85:E0:B3:32:BA:CA:16:C3 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: A5 Signing time: Sat 17 May 2025 05:43:41 +0000 Manifest this update: Sat 17 May 2025 05:43:40 +0000 Manifest next update: Sat 24 May 2025 05:43:40 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: yS8MYY3q4CEGiUW+TXSTpzg65i+m5xRnJRK0h7GHOhA=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: Ls+MqXGV/peb18S4iXh7J0QZNFdZuOz4J59MYeTRfFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: May 17 05:43:40 2025 GMT Not After : May 24 05:43:40 2025 GMT Subject: CN=6828220d-e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:37:b4:bd:70:f3:51:b6:4e:d7:46:30:8a: 53:1f:70:b4:cb:ec:8d:5d:a1:3a:e3:63:4f:17:fa: 39:0b:51:aa:ac:46:be:62:b1:8d:bf:30:1a:d8:ff: 36:23:59:db:12:a1:56:44:fd:76:0d:47:fa:f3:3a: da:a6:ce:b7:ac:e5:a9:08:22:e7:c8:8e:5a:13:b7: 42:b0:84:f9:99:bd:82:2d:14:ca:a7:7d:27:de:b0: 54:31:a9:0f:59:8b:ee:b1:36:5e:02:be:54:6f:b2: 74:b6:84:ab:03:f1:61:fa:a5:9d:14:d3:e0:99:55: 54:27:03:04:17:16:34:55:f8:5b:14:aa:75:d1:cc: f1:14:22:c3:64:7a:69:07:42:59:c8:2f:bf:82:3c: 34:dd:ae:b0:30:d9:a3:d8:63:a0:1d:89:f1:12:1f: 76:f2:6a:28:61:5e:93:42:c5:0d:3a:41:b3:55:45: ba:fb:2f:bc:e4:96:5d:75:87:26:3d:aa:5e:cf:80: 0d:d2:0f:3a:07:ca:5c:c3:f9:e8:8d:3c:35:78:86: 5f:24:7a:6b:cd:96:59:d4:5c:07:31:0b:84:4a:2d: 16:dc:8a:db:80:89:e3:82:96:03:43:6e:ca:1f:a7: ef:14:12:9e:b4:ad:53:5e:af:63:41:40:02:40:91: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:42:47:E2:08:E0:F2:2C:40:F4:F5:85:E0:B3:32:BA:CA:16:C3 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0f:2f:9e:db:e4:a1:19:93:74:42:8a:0d:d4:83:60:7e:4b: 86:e2:4a:99:69:2f:ff:53:cf:dd:2b:cf:02:fe:9f:f4:d9:02: ce:2f:f4:19:84:cf:74:a8:be:45:7a:b7:bf:a2:45:b6:54:65: a8:6c:55:5c:d2:72:7b:c7:f1:13:bd:9a:1c:9a:3d:b9:60:3c: 02:5d:29:f4:5a:f7:16:88:eb:af:df:c7:df:29:19:9e:d8:5c: 63:13:60:c8:c4:77:8d:37:46:90:ef:97:70:da:07:84:98:52: c5:a8:d9:13:0b:ac:9a:41:90:a9:80:0d:df:bc:6a:fa:60:24: c4:47:b9:e2:5d:9f:4b:aa:63:8a:32:ed:5a:a1:af:d2:46:35: ce:99:97:b2:5e:74:af:f3:8d:88:86:b5:15:77:ad:f8:be:a7: bb:78:ab:dc:f0:c0:bd:2c:0d:a3:4f:d2:65:ad:a4:a4:f7:ce: 52:d1:e2:33:db:20:7a:61:06:a2:f5:1b:37:78:82:0d:a7:59: 20:07:05:7a:0d:4d:47:3a:19:41:c2:6b:cb:22:9f:8c:f0:a9: da:ce:25:0a:e0:36:03:d6:d7:e9:5d:c3:88:5f:a0:02:15:d9: c8:9e:80:46:64:f1:4f:83:49:e9:a6:06:75:00:f8:87:5c:47: ec:e1:e2:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUwNTE3MDU0MzQwWhcNMjUwNTI0MDU0MzQwWjAYMRYwFAYD VQQDEw02ODI4MjIwZC1lMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVw3tL1w81G2TtdGMIpTH3C0y+yNXaE642NPF/o5C1GqrEa+YrGNvzAa2P82 I1nbEqFWRP12DUf68zraps63rOWpCCLnyI5aE7dCsIT5mb2CLRTKp30n3rBUMakP WYvusTZeAr5Ub7J0toSrA/Fh+qWdFNPgmVVUJwMEFxY0VfhbFKp10czxFCLDZHpp B0JZyC+/gjw03a6wMNmj2GOgHYnxEh928mooYV6TQsUNOkGzVUW6+y+85JZddYcm Papez4AN0g86B8pcw/nojTw1eIZfJHprzZZZ1FwHMQuESi0W3IrbgInjgpYDQ27K H6fvFBKetK1TXq9jQUACQJFWswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAFQkfi CODyLED09YXgszK6yhbDMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGDy+e2+ShGZN0QooN1INgfkuG4kqZaS//U8/dK88C/p/02QLOL/QZ hM90qL5Fere/okW2VGWobFVc0nJ7x/ETvZocmj25YDwCXSn0WvcWiOuv38ffKRme 2FxjE2DIxHeNN0aQ75dw2geEmFLFqNkTC6yaQZCpgA3fvGr6YCTER7niXZ9LqmOK Mu1aoa/SRjXOmZeyXnSv842IhrUVd634vqe7eKvc8MC9LA2jT9JlraSk985S0eIz 2yB6YQai9Rs3eIINp1kgBwV6DU1HOhlBwmvLIp+M8KnaziUK4DYD1tfpXcOIX6AC FdnInoBGZPFPg0nppgZ1APiHXEfs4eLC -----END CERTIFICATE-----Generated at Sat May 17 11:35:47 2025 by rpki-client