$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: 2klVEedVruzQ0xprMjKfJon7uKXZAbBfwWv5Ki+tthg= Subject key identifier: B2:72:90:B7:52:71:E3:70:7D:B1:0D:F0:5E:79:E7:94:CC:D6:01:2B Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 104A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 1042 Signing time: Thu 24 Apr 2025 17:24:19 +0000 Manifest this update: Thu 24 Apr 2025 17:24:19 +0000 Manifest next update: Thu 01 May 2025 17:24:19 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: bqL71luiivOu/mCxttP7+lEEAMnQ7FLdcz+Torc4qq4=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: hG1fGJzQ3JbtXbpeIbWQ7QaLlc8Fngz5Q1TdRya0bg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4170 (0x104a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Apr 24 17:24:19 2025 GMT Not After : May 1 17:24:19 2025 GMT Subject: CN=680a73c3-0727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:70:b5:a2:7a:10:f3:7a:94:8c:45:e2:20: a9:5d:b3:9f:fe:6f:c8:02:26:19:44:7a:56:65:05: 3d:e7:92:0a:5c:f3:e7:dd:1e:7d:33:1e:12:73:c1: a7:a8:14:76:23:cd:e3:0d:62:e8:6e:88:e0:48:51: ab:80:19:4e:40:17:ca:91:02:20:54:35:b7:cd:fa: 1c:4d:91:d7:8d:df:15:44:41:f6:67:d4:f9:64:f1: 7c:43:7f:c9:c6:23:a2:75:79:f2:99:cd:9b:db:26: 87:ae:11:67:76:a2:82:27:3d:fb:81:25:bd:13:52: f1:f6:b7:17:ed:e6:d5:aa:74:11:31:17:47:7c:a2: 2d:2b:01:14:8a:1d:89:cb:5d:54:09:e2:2b:c4:63: bf:06:18:a9:d7:8a:17:58:8d:0b:5e:a2:24:ec:75: ce:bf:0c:5a:68:cf:ad:d8:a0:7e:6d:56:32:42:13: 48:20:b5:bd:a4:94:d7:a8:a7:c3:2a:01:4d:1d:e5: 0e:d6:e5:be:56:fe:9d:fd:dd:fd:94:21:a1:1f:5c: 3c:3d:67:a8:8b:23:5b:45:74:1b:69:af:84:16:cb: 68:cd:6e:4c:bd:a5:87:9d:40:2e:85:f7:08:b4:fe: 98:b6:65:b8:b3:64:f4:ff:74:7c:e5:b5:28:cf:76: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:72:90:B7:52:71:E3:70:7D:B1:0D:F0:5E:79:E7:94:CC:D6:01:2B X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:ae:b9:b7:dd:0c:f0:40:09:9e:45:21:b4:d6:74:a4:e5:80: f7:3c:82:65:8b:cd:91:43:16:d1:bc:5e:04:9b:1a:6e:54:c7: 9e:45:f9:a4:c5:8b:8f:09:85:b2:d7:78:6f:81:97:db:86:3f: 14:1b:f7:da:9f:5d:6e:65:4a:89:ef:d2:38:22:df:5c:fc:20: 55:21:6c:24:e9:aa:99:f6:3d:13:74:49:a6:02:c5:17:83:da: 71:97:d9:88:a8:c1:ab:a4:e6:e3:0f:a9:1e:71:a7:fb:97:77: 6b:0d:92:5b:19:ef:3f:36:6b:c6:17:d1:aa:08:bc:72:72:26: 9a:31:83:93:bb:ec:bd:98:33:4b:cb:7a:01:1f:51:3b:95:be: ca:55:ee:8e:59:a2:fa:07:08:2b:ec:e8:cc:58:df:b4:d8:c1: c9:af:64:1a:d1:75:b8:5a:56:e4:d2:a7:76:d7:f7:fe:a2:47: 11:ce:e3:df:aa:29:30:e1:73:04:cd:3f:24:fd:9e:fd:13:25: 30:0c:73:42:ad:91:ec:b1:fa:55:a7:94:c8:16:e2:f7:b5:25: 2b:cc:c7:4b:4e:33:34:1c:5f:88:40:31:8f:dc:81:f0:2d:25: ec:41:a5:4a:05:4b:aa:f3:7e:cc:c8:27:b5:29:05:33:d3:77: 42:81:ec:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwNDI0MTcyNDE5WhcNMjUwNTAxMTcyNDE5WjAYMRYwFAYD VQQDEw02ODBhNzNjMy0wNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVhwtaJ6EPN6lIxF4iCpXbOf/m/IAiYZRHpWZQU955IKXPPn3R59Mx4Sc8Gn qBR2I83jDWLobojgSFGrgBlOQBfKkQIgVDW3zfocTZHXjd8VREH2Z9T5ZPF8Q3/J xiOidXnymc2b2yaHrhFndqKCJz37gSW9E1Lx9rcX7ebVqnQRMRdHfKItKwEUih2J y11UCeIrxGO/Bhip14oXWI0LXqIk7HXOvwxaaM+t2KB+bVYyQhNIILW9pJTXqKfD KgFNHeUO1uW+Vv6d/d39lCGhH1w8PWeoiyNbRXQbaa+EFstozW5MvaWHnUAuhfcI tP6YtmW4s2T0/3R85bUoz3aSnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJykLdS ceNwfbEN8F5555TM1gErMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMrrm33QzwQAmeRSG01nSk5YD3PIJli82RQxbRvF4EmxpuVMeeRfmk xYuPCYWy13hvgZfbhj8UG/fan11uZUqJ79I4It9c/CBVIWwk6aqZ9j0TdEmmAsUX g9pxl9mIqMGrpObjD6kecaf7l3drDZJbGe8/NmvGF9GqCLxyciaaMYOTu+y9mDNL y3oBH1E7lb7KVe6OWaL6Bwgr7OjMWN+02MHJr2Qa0XW4Wlbk0qd21/f+okcRzuPf qikw4XMEzT8k/Z79EyUwDHNCrZHssfpVp5TIFuL3tSUrzMdLTjM0HF+IQDGP3IHw LSXsQaVKBUuq837MyCe1KQUz03dCgewN -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:33 2025 by rpki-client