$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: Oka36Eiio4Pc7oNikrsACqaucBXEzFSP+qpxXiTocB0= Subject key identifier: 77:63:96:FB:D6:9D:4A:79:64:06:B0:94:6C:B7:A9:7A:50:55:35:92 Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 065F Signing time: Thu 24 Apr 2025 22:12:33 +0000 Manifest this update: Thu 24 Apr 2025 22:12:32 +0000 Manifest next update: Thu 01 May 2025 22:12:32 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: jJuhBSep4+sq3Gx2UKPeb2H/MklWbxa7dq8NDlg6mh8=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 8dWiJ/OmKFV8qByI8Vgf+dd59z/OKU3BjXA1o7cnn3g=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: DsJu31VmqRJ0VhuZIHzXvyh3HyPC4dntssT9G4PSpBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Apr 24 22:12:32 2025 GMT Not After : May 1 22:12:32 2025 GMT Subject: CN=680ab751-31e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:f2:b8:a8:58:d8:76:6d:0b:17:77:a1:84: 1b:0c:cc:4a:b2:46:1f:45:1e:43:c4:be:ea:a8:59: 07:cc:b3:7b:59:33:f2:1d:5d:d3:c8:d9:0b:1e:8a: d0:21:de:fa:aa:dd:e6:87:91:0b:be:62:39:48:60: 30:90:e1:55:c5:2e:51:39:34:1b:64:99:57:10:82: 0e:6b:cb:62:4c:1b:02:08:96:da:3c:5b:44:55:05: ba:36:f6:4d:20:b5:cd:4d:55:ac:a3:53:68:60:94: 76:9e:d4:2a:ff:39:d5:56:22:28:8d:7b:92:3f:22: b2:13:0c:d0:ee:f8:34:e1:d9:f7:fa:19:c7:31:af: 4e:83:bf:b8:bc:4c:0e:c4:e3:30:cb:0f:07:b0:e9: c4:dd:5b:f1:7e:89:fb:8d:02:94:a9:6c:37:ab:c8: 80:29:db:11:e8:95:67:6d:02:ab:c9:77:91:b1:ed: 26:81:2c:98:af:b1:fc:0b:88:c1:2e:9a:50:24:b8: 2a:0e:f3:23:b0:d2:f8:d4:88:c5:8d:5b:4d:7a:50: 34:80:93:fd:e2:9a:a5:9d:fe:42:80:64:89:30:b5: 00:cb:d2:06:1c:46:17:66:f7:26:dd:1f:ef:23:c1: 7a:67:f7:7f:2f:02:85:2b:7a:60:ab:ae:f7:82:c8: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:96:FB:D6:9D:4A:79:64:06:B0:94:6C:B7:A9:7A:50:55:35:92 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:50:3e:3b:00:0d:3a:cf:6a:c5:4e:0e:b7:ab:c4:ca:25:28: 5a:c4:ee:13:b7:bf:3b:e3:f9:2f:bf:66:20:82:81:fd:85:28: 1a:dd:a1:48:2a:a0:f0:39:20:46:5b:46:3c:41:de:d3:c4:c2: 3e:55:d0:02:1f:d6:3f:ce:b8:0a:01:6e:60:80:9a:47:b0:64: 5d:bc:21:06:eb:f3:4e:40:d0:8f:76:b1:fc:94:87:11:56:37: c4:af:9a:da:4f:93:23:a7:f9:b3:c2:b7:62:7c:59:c3:9f:9a: f8:ba:cc:ab:73:5f:2f:be:cc:31:46:62:8b:73:2e:e4:a8:7c: af:11:6c:d5:6a:40:e5:32:cb:8b:f6:0e:74:e9:78:26:41:7e: 24:5f:0d:4a:87:1d:11:71:31:00:27:02:d9:29:77:01:e4:31: 2c:14:d8:8b:9c:54:77:07:90:9d:93:c5:2f:72:01:a4:60:3f: 42:dd:5a:79:e8:25:73:3c:96:02:44:44:e5:31:80:76:ae:ba: a6:ef:80:2c:5f:c0:06:82:ef:be:73:6b:3c:15:57:ae:78:ed: c3:27:a6:bd:c9:93:b9:d5:13:05:4e:bc:86:61:fb:b6:0d:11: 51:1d:a9:f9:60:a5:37:63:46:76:14:1a:56:db:a9:3b:71:24: 4e:9d:71:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwNDI0MjIxMjMyWhcNMjUwNTAxMjIxMjMyWjAYMRYwFAYD VQQDEw02ODBhYjc1MS0zMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8ryuKhY2HZtCxd3oYQbDMxKskYfRR5DxL7qqFkHzLN7WTPyHV3TyNkLHorQ Id76qt3mh5ELvmI5SGAwkOFVxS5ROTQbZJlXEIIOa8tiTBsCCJbaPFtEVQW6NvZN ILXNTVWso1NoYJR2ntQq/znVViIojXuSPyKyEwzQ7vg04dn3+hnHMa9Og7+4vEwO xOMwyw8HsOnE3Vvxfon7jQKUqWw3q8iAKdsR6JVnbQKryXeRse0mgSyYr7H8C4jB LppQJLgqDvMjsNL41IjFjVtNelA0gJP94pqlnf5CgGSJMLUAy9IGHEYXZvcm3R/v I8F6Z/d/LwKFK3pgq673gsh4awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdjlvvW nUp5ZAawlGy3qXpQVTWSMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeUD47AA06z2rFTg63q8TKJShaxO4Tt7874/kvv2YggoH9hSga3aFI KqDwOSBGW0Y8Qd7TxMI+VdACH9Y/zrgKAW5ggJpHsGRdvCEG6/NOQNCPdrH8lIcR VjfEr5raT5Mjp/mzwrdifFnDn5r4usyrc18vvswxRmKLcy7kqHyvEWzVakDlMsuL 9g506XgmQX4kXw1Khx0RcTEAJwLZKXcB5DEsFNiLnFR3B5Cdk8UvcgGkYD9C3Vp5 6CVzPJYCRETlMYB2rrqm74AsX8AGgu++c2s8FVeueO3DJ6a9yZO51RMFTryGYfu2 DRFRHan5YKU3Y0Z2FBpW26k7cSROnXHJ -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:55 2025 by rpki-client