$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft File: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json) Hash identifier: VMtthad/3YIxHQkknA0//0K2BO5LgIl4iVCev63jG9U= Subject key identifier: 1D:60:76:DD:CC:9B:C7:4B:29:E0:55:8C:B8:52:7E:46:09:90:88:AC Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 Certificate issuer: /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft Manifest number: 59 Signing time: Fri 25 Apr 2025 06:08:27 +0000 Manifest this update: Fri 25 Apr 2025 06:08:27 +0000 Manifest next update: Fri 02 May 2025 06:08:27 +0000 Files and hashes: 1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: cFGGPhAtNpIh1YnoZ2O26sauGP68jbeUsYE6i9xbzfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Validity Not Before: Apr 25 06:08:27 2025 GMT Not After : May 2 06:08:27 2025 GMT Subject: CN=680b26db-c41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:b8:0f:58:2f:b8:fa:98:b2:1c:4c:8b:86: b4:72:33:c8:4d:35:73:17:37:41:c2:77:87:91:2d: a9:cf:c4:43:65:28:ac:16:9c:1e:71:2d:9a:4b:19: 7f:b1:51:36:f2:14:62:4a:75:60:1b:9f:46:dd:35: 02:e9:bc:81:01:6a:d0:06:6a:d4:24:7f:e9:fb:83: 9d:c5:4c:bf:10:aa:fc:7f:12:ff:48:fd:1d:cc:60: ab:b6:56:15:f6:d2:8c:7f:9d:68:96:36:51:22:df: 40:f2:6d:b6:5f:8c:c2:21:fe:a8:b2:48:e6:98:2d: 62:41:f7:4b:aa:f8:37:31:93:de:77:38:e6:43:56: 6f:a3:a5:88:01:da:fb:eb:60:02:d8:b3:7b:02:ec: 26:16:c4:e2:0b:8d:7d:76:b1:04:d8:dd:22:ba:4c: 20:63:10:95:11:40:e2:7f:fb:23:cd:2d:83:93:69: 85:25:0e:45:8c:18:59:7a:c1:fd:16:94:e0:fa:7c: 29:27:c8:39:36:9c:98:91:ff:e7:4e:94:28:f8:49: 7c:ab:31:e4:0f:96:ad:71:33:21:cf:e4:de:02:bc: 03:bc:60:7a:13:d8:16:3a:06:60:82:17:78:2a:eb: a2:ee:46:e9:39:ff:94:64:6f:1d:3a:79:89:1e:11: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:76:DD:CC:9B:C7:4B:29:E0:55:8C:B8:52:7E:46:09:90:88:AC X509v3 Authority Key Identifier: keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:51:60:9a:96:da:6b:69:21:b2:ee:3a:c3:6e:21:4b:d7:b0: d1:63:be:12:0d:8a:d6:fb:af:8e:81:e5:df:20:70:18:04:05: 9d:c2:a5:9b:17:bd:b0:4a:42:8d:a3:6b:04:0d:df:fb:74:16: 06:84:d4:c1:34:48:51:aa:9e:4a:9f:3d:52:6b:6e:ba:d2:f4: b5:72:53:1f:a9:29:49:29:f9:ad:1c:78:da:33:ba:f3:01:2e: 9a:73:0e:f4:06:d9:43:a5:59:05:2e:5a:c6:35:f1:97:9c:5b: 4e:27:24:de:58:07:df:40:e0:2d:be:df:1a:0f:c1:ea:13:73: 10:8b:42:a7:bc:cc:7b:e9:9a:0d:8a:dc:aa:3f:72:d4:f8:38: 09:07:43:bb:97:f4:f2:fe:26:2d:8e:b5:67:cf:0f:20:47:f8: 30:13:1e:18:5d:d9:93:82:8a:03:d4:cb:20:6b:e0:0a:9d:b0: 5e:69:27:9e:f7:91:6f:5c:7f:22:9e:1b:3d:0b:52:30:48:ed: df:9f:b6:8b:7c:cd:5b:65:a3:57:46:ad:dc:a2:4d:77:b8:81: 48:94:a6:5c:e4:7a:2b:96:a3:7f:97:23:c8:93:1b:c9:33:18: 4f:7b:71:01:56:42:2a:70:e1:fa:9c:97:58:51:cc:e9:0e:9f: 4e:54:27:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODI5RDExMC8GA1UEBRMoM0MxOENEOEI1QjAxRDUwMjM3NjQwQzI2QzAzNzc1NDZE ODA0RkRCNDAeFw0yNTA0MjUwNjA4MjdaFw0yNTA1MDIwNjA4MjdaMBgxFjAUBgNV BAMTDTY4MGIyNmRiLWM0MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAPbgPWC+4+piyHEyLhrRyM8hNNXMXN0HCd4eRLanPxENlKKwWnB5xLZpLGX+x UTbyFGJKdWAbn0bdNQLpvIEBatAGatQkf+n7g53FTL8Qqvx/Ev9I/R3MYKu2VhX2 0ox/nWiWNlEi30DybbZfjMIh/qiySOaYLWJB90uq+Dcxk953OOZDVm+jpYgB2vvr YALYs3sC7CYWxOILjX12sQTY3SK6TCBjEJURQOJ/+yPNLYOTaYUlDkWMGFl6wf0W lOD6fCknyDk2nJiR/+dOlCj4SXyrMeQPlq1xMyHP5N4CvAO8YHoT2BY6BmCCF3gq 66LuRuk5/5Rkbx06eYkeEY4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHWB23cyb x0sp4FWMuFJ+RgmQiKwwHwYDVR0jBBgwFoAUPBjNi1sB1QI3ZAwmwDd1RtgE/bQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MjlELzUxMjU1MjZFOUM2 RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJM1pBd213RGQxUnRnRV9i US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEJqTmkxc0IxUUkzWkF3bXdEZDFSdGdFX2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MjlELzUxMjU1MjZFOUM2RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJ M1pBd213RGQxUnRnRV9iUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBRYJqW2mtpIbLuOsNuIUvXsNFjvhINitb7r46B5d8gcBgEBZ3CpZsX vbBKQo2jawQN3/t0FgaE1ME0SFGqnkqfPVJrbrrS9LVyUx+pKUkp+a0ceNozuvMB LppzDvQG2UOlWQUuWsY18ZecW04nJN5YB99A4C2+3xoPweoTcxCLQqe8zHvpmg2K 3Ko/ctT4OAkHQ7uX9PL+Ji2OtWfPDyBH+DATHhhd2ZOCigPUyyBr4AqdsF5pJ573 kW9cfyKeGz0LUjBI7d+ftot8zVtlo1dGrdyiTXe4gUiUplzkeiuWo3+XI8iTG8kz GE97cQFWQipw4fqcl1hRzOkOn05UJ9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:29 2025 by rpki-client