$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: rx9l1yj/Q5jGxGGIVhIQyaahL+L5DPR7YcJ7MQzLK8I= Subject key identifier: F4:80:9C:C2:F0:3D:10:B7:3B:96:56:7F:DA:D5:48:15:AB:24:8B:6F Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 0877 Signing time: Thu 24 Apr 2025 20:31:03 +0000 Manifest this update: Thu 24 Apr 2025 20:31:03 +0000 Manifest next update: Thu 01 May 2025 20:31:02 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: NzA16mtGaqeqh2zpDMAiag9Xf2mJLBhZhJ50ZEx6Bgg=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: hcolG+bA9kqJJPc6IsihTDFxcpdloDt804WFQ6sb6CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Apr 24 20:31:03 2025 GMT Not After : May 1 20:31:02 2025 GMT Subject: CN=680a9f87-94ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:ea:ae:05:a8:51:e1:d2:4a:f1:a6:00:99: 8b:49:fd:0d:8a:46:de:6c:16:e2:c1:ae:9b:84:95: ef:59:5f:d0:2c:fa:60:09:ea:4d:1d:fa:9f:36:9c: 3a:06:99:ac:7a:3e:52:f7:b6:a7:4a:fb:bb:33:c2: 8a:10:42:1c:dd:4d:bd:80:e6:5f:06:44:26:33:f6: d6:3b:0a:e3:f5:6d:40:81:5b:10:52:44:d4:90:2f: 8b:4e:b1:86:83:7e:34:43:d5:57:92:e4:ca:1d:81: 43:85:d6:4d:41:2a:c1:50:52:7b:cd:72:83:5c:6c: 27:3f:59:40:c9:08:c8:f8:ee:06:fa:8c:e0:38:b8: 61:67:82:50:48:70:fd:a2:ff:1b:5e:3d:cf:2b:3f: 07:6f:d3:fb:c3:86:41:58:d0:2c:f6:83:6f:59:2d: 75:b9:a0:a9:7c:4c:58:13:ea:8a:32:7d:59:91:af: 2d:b8:07:33:e5:18:cc:c5:d6:f3:2f:4b:7c:ff:c7: 12:f0:e0:83:cb:85:c8:43:73:ac:c2:5a:2d:22:51: a6:ab:db:5d:0a:b9:7c:db:d9:f6:71:b2:1c:69:67: 35:e1:9f:a3:a8:27:83:df:bd:98:c1:76:30:07:2a: f7:84:19:19:d0:61:57:42:22:35:ba:1f:ae:ca:42: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:80:9C:C2:F0:3D:10:B7:3B:96:56:7F:DA:D5:48:15:AB:24:8B:6F X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:bb:f5:9c:c8:6c:75:84:36:b4:f8:58:2d:1f:96:1a:61: d2:78:78:29:2f:e7:41:57:8a:f0:d0:8c:4d:3d:47:a5:dc:61: f3:6b:9a:c2:ee:47:fa:6b:f2:76:b9:72:74:5e:d2:0f:bc:37: 2b:b7:a3:e1:5f:5b:fb:a2:e3:c2:1d:82:eb:b6:2c:44:9a:31: af:41:dd:a8:95:ed:06:70:71:1d:c7:99:91:01:38:a6:60:bd: 52:83:14:57:8f:b1:99:82:86:65:08:a0:91:95:94:7c:16:b5: e3:82:b0:73:bd:7e:49:8a:a7:78:10:38:c9:5f:db:03:f7:90: c4:20:23:11:91:02:87:05:05:db:aa:6a:35:e7:2a:db:73:06: fa:73:61:9e:b9:f2:8b:d1:7e:db:02:83:52:6d:69:08:cf:d9: d9:97:4c:80:a7:47:80:2f:36:5f:2d:25:44:53:e4:75:24:cf: fb:27:94:20:79:a8:03:d4:77:e5:b1:d6:36:8c:58:19:44:c2: 3f:20:80:7f:35:c2:ad:94:ac:b5:4e:fa:57:c7:f8:d9:d3:bc: ac:e6:3c:1a:8d:b2:5c:9d:79:48:a1:bd:7a:2b:eb:80:5c:8b: f3:4b:a1:00:9d:2e:ef:bf:9a:75:88:45:68:c9:2d:4a:82:e1: ab:5b:2a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwNDI0MjAzMTAzWhcNMjUwNTAxMjAzMTAyWjAYMRYwFAYD VQQDEw02ODBhOWY4Ny05NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOfqrgWoUeHSSvGmAJmLSf0NikbebBbiwa6bhJXvWV/QLPpgCepNHfqfNpw6 Bpmsej5S97anSvu7M8KKEEIc3U29gOZfBkQmM/bWOwrj9W1AgVsQUkTUkC+LTrGG g340Q9VXkuTKHYFDhdZNQSrBUFJ7zXKDXGwnP1lAyQjI+O4G+ozgOLhhZ4JQSHD9 ov8bXj3PKz8Hb9P7w4ZBWNAs9oNvWS11uaCpfExYE+qKMn1Zka8tuAcz5RjMxdbz L0t8/8cS8OCDy4XIQ3OswlotIlGmq9tdCrl829n2cbIcaWc14Z+jqCeD372YwXYw Byr3hBkZ0GFXQiI1uh+uykLgJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSAnMLw PRC3O5ZWf9rVSBWrJItvMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+bv1nMhsdYQ2tPhYLR+WGmHSeHgpL+dBV4rw0IxNPUel3GHza5rC 7kf6a/J2uXJ0XtIPvDcrt6PhX1v7ouPCHYLrtixEmjGvQd2ole0GcHEdx5mRATim YL1SgxRXj7GZgoZlCKCRlZR8FrXjgrBzvX5Jiqd4EDjJX9sD95DEICMRkQKHBQXb qmo15yrbcwb6c2GeufKL0X7bAoNSbWkIz9nZl0yAp0eALzZfLSVEU+R1JM/7J5Qg eagD1HflsdY2jFgZRMI/IIB/NcKtlKy1TvpXx/jZ07ys5jwajbJcnXlIob16K+uA XIvzS6EAnS7vv5p1iEVoyS1KguGrWyq7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:07 2025 by rpki-client