$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: p4QmwmJ6BzuANxdmXg28QBY5odnpCxJAMfAC5H1zzfk= Subject key identifier: 07:4D:CD:6C:60:BE:E1:73:8A:5F:F3:86:93:79:CF:D6:58:FE:DC:7F Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B59 Signing time: Thu 24 Apr 2025 19:18:39 +0000 Manifest this update: Thu 24 Apr 2025 19:18:39 +0000 Manifest next update: Thu 01 May 2025 19:18:39 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: JKUyGOp9sMlyhPXvUsnLCo8KHRZrgf/9eotfQIGKwlk=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Apr 24 19:18:39 2025 GMT Not After : May 1 19:18:39 2025 GMT Subject: CN=680a8e8f-083a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:af:a4:49:2d:aa:3f:38:a2:14:a4:22:6a: 1a:bc:2c:ec:51:e7:5d:bf:49:1f:fd:35:db:e4:e6: bd:fc:fa:c8:1a:92:bf:96:4a:b9:7b:df:5b:f1:2d: ed:45:d8:1d:c4:0b:c1:24:32:d0:d8:0c:71:90:ad: 64:86:a6:98:29:11:60:8f:99:0a:a3:35:4f:ed:8d: fb:3b:f0:14:c8:28:c9:a9:1f:94:6c:24:23:23:47: cc:d9:ec:a2:be:78:b6:19:7a:44:50:2d:b4:38:6f: 03:61:0b:76:28:7f:a5:31:4f:b5:06:a5:81:62:58: 14:77:da:02:18:4b:6a:e3:35:57:a5:90:b0:76:27: 33:1c:2b:92:57:6a:6c:dc:aa:58:af:6e:ca:4f:1b: 41:aa:53:26:28:a0:3a:10:e7:d5:c9:1a:c4:84:5a: 4a:21:32:38:40:4d:3d:6a:0f:1a:eb:06:5a:2b:34: 6e:05:12:12:fe:f8:95:df:c8:a1:f4:52:4e:1a:e6: 3a:61:f5:82:2c:5c:8d:df:42:2d:95:15:ea:c2:09: 1f:69:45:e3:7d:d0:db:7d:07:65:cc:23:f3:7c:ae: 2a:06:29:ab:73:94:06:3a:6b:83:9b:6b:3c:9d:57: 45:9d:fe:f3:34:1a:95:65:96:21:bd:81:2e:3e:fa: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:CD:6C:60:BE:E1:73:8A:5F:F3:86:93:79:CF:D6:58:FE:DC:7F X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:2f:f5:64:76:5b:a2:8a:90:b7:f5:52:56:19:23:aa:58: c6:c7:8e:fc:4c:a5:f1:3f:72:f2:02:c1:cc:0a:fc:fc:51:22: 51:57:88:27:59:be:48:18:e6:81:52:9c:f7:96:ef:df:94:90: 62:12:62:4e:18:95:21:15:15:2d:ef:16:16:22:83:c6:e3:8b: 72:03:5e:fe:30:01:58:5e:2a:e9:61:d5:4d:77:39:0e:dd:2e: 23:d7:ec:9c:b1:00:b2:28:b6:40:7d:3c:fc:58:f8:76:62:b1: 88:13:20:6a:25:6c:71:f0:45:07:48:21:3f:1a:fd:63:b5:6c: 19:07:16:32:80:61:83:fb:5b:07:5e:36:fb:52:6c:64:f4:0d: 1e:6a:d8:f7:05:28:2e:6b:74:b7:15:e5:d9:6a:60:8a:b0:83: 4d:3c:3d:20:aa:f1:f4:75:6d:e8:82:87:58:5e:95:b3:12:4a: a5:f4:b7:d8:f5:3e:75:1d:24:9c:83:65:ed:e2:ab:81:35:ad: d6:51:d6:d1:89:2b:96:ea:35:10:2c:88:95:26:aa:5d:ca:ce: bd:dd:b6:7a:89:63:d9:16:91:2a:6d:a7:b9:b4:5e:e0:e6:6e: 66:67:b3:0e:de:36:df:ce:50:9b:b6:b1:3f:a2:85:fc:78:cc: eb:01:3e:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwNDI0MTkxODM5WhcNMjUwNTAxMTkxODM5WjAYMRYwFAYD VQQDEw02ODBhOGU4Zi0wODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XmvpEktqj84ohSkImoavCzsUeddv0kf/TXb5Oa9/PrIGpK/lkq5e99b8S3t RdgdxAvBJDLQ2AxxkK1khqaYKRFgj5kKozVP7Y37O/AUyCjJqR+UbCQjI0fM2eyi vni2GXpEUC20OG8DYQt2KH+lMU+1BqWBYlgUd9oCGEtq4zVXpZCwdiczHCuSV2ps 3KpYr27KTxtBqlMmKKA6EOfVyRrEhFpKITI4QE09ag8a6wZaKzRuBRIS/viV38ih 9FJOGuY6YfWCLFyN30ItlRXqwgkfaUXjfdDbfQdlzCPzfK4qBimrc5QGOmuDm2s8 nVdFnf7zNBqVZZYhvYEuPvrepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdNzWxg vuFzil/zhpN5z9ZY/tx/MB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0QS/1ZHZbooqQt/VSVhkjqljGx478TKXxP3LyAsHMCvz8USJRV4gn Wb5IGOaBUpz3lu/flJBiEmJOGJUhFRUt7xYWIoPG44tyA17+MAFYXirpYdVNdzkO 3S4j1+ycsQCyKLZAfTz8WPh2YrGIEyBqJWxx8EUHSCE/Gv1jtWwZBxYygGGD+1sH Xjb7Umxk9A0eatj3BSgua3S3FeXZamCKsINNPD0gqvH0dW3ogodYXpWzEkql9LfY 9T51HSScg2Xt4quBNa3WUdbRiSuW6jUQLIiVJqpdys693bZ6iWPZFpEqbae5tF7g 5m5mZ7MO3jbfzlCbtrE/ooX8eMzrAT4i -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:35 2025 by rpki-client