$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json) Hash identifier: PJ8f1TQYrST5jnTWZFh1CznJ91LKOJdq5Gjopq/orDQ= Subject key identifier: 4A:13:1F:9B:6F:92:FE:B6:DF:E1:89:1B:CD:81:1E:3B:B1:D2:2C:6A Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:06:36 +0000 Manifest this update: Fri 25 Apr 2025 04:06:36 +0000 Manifest next update: Fri 02 May 2025 04:06:36 +0000 Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: xoEVghgPjx5JoJdiGnETxiWZ1cBZQBsf7vlH7k8/Kvo=) 2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Validity Not Before: Apr 25 04:06:36 2025 GMT Not After : May 2 04:06:36 2025 GMT Subject: CN=680b0a4c-bce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:f8:5f:5f:59:80:90:25:eb:8a:0b:ef:aa: 6c:73:19:54:38:03:9f:2b:c4:bf:b0:68:e9:b8:c7: a4:c8:47:6d:05:d5:a2:c2:fb:0c:ca:96:70:f8:4c: 72:46:18:28:e0:9a:d8:0f:31:fe:1f:b7:a6:2b:e6: c5:3e:42:2b:55:a3:45:34:24:96:fc:da:f2:50:26: 02:38:b0:a3:f0:48:b7:3a:50:7d:20:40:d1:97:6f: 55:aa:e7:18:5b:62:50:b3:24:c2:22:bb:3d:2f:25: 72:74:3d:2c:1a:9a:52:df:ea:71:73:ce:f6:96:ac: b8:ab:ec:01:83:2a:62:3e:ac:27:85:98:09:2d:44: fb:27:b3:f3:bc:26:81:2d:30:2a:8a:9a:8a:e3:c9: 3e:32:39:29:e9:66:3b:b5:8f:69:d4:60:96:32:13: f8:6c:c0:4d:9f:da:69:35:6c:a8:62:84:b2:40:ae: 9f:b2:d1:7f:a5:98:09:67:f6:74:6d:07:8b:ac:85: bf:49:29:2b:39:a8:03:5c:84:c8:b1:a8:57:a6:92: 92:36:52:72:65:97:a3:d3:e0:17:6f:a9:14:53:dd: b8:ce:99:79:c8:cf:29:62:ed:80:2c:af:a9:25:11: e5:79:28:40:a0:68:19:dc:81:f7:55:1c:57:17:0e: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:13:1F:9B:6F:92:FE:B6:DF:E1:89:1B:CD:81:1E:3B:B1:D2:2C:6A X509v3 Authority Key Identifier: keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ca:03:c1:b2:e2:77:c2:e6:fe:13:a9:0b:58:7e:94:d5:6b: 6c:94:ec:77:05:71:ba:56:77:98:55:c3:cf:81:e7:9d:03:88: e5:18:d7:23:99:d2:46:6f:07:c9:3f:38:cc:55:60:f8:9a:82: 57:4b:af:83:b7:a2:fd:e6:24:28:30:1b:d9:34:99:a1:a7:a0: bb:44:bc:47:2f:b6:90:69:70:75:60:6f:97:80:83:5c:d4:5b: e9:c2:3b:2a:3b:45:73:7d:e0:b6:f4:49:23:9b:ad:64:2e:39: 0c:83:aa:92:c8:0e:b6:8d:51:2d:9a:1a:6c:2e:a6:13:f0:52: c5:31:fe:62:0e:65:a4:d8:6f:bb:67:54:4a:47:db:88:39:98: cd:92:2b:67:c9:b5:9d:51:31:d5:c5:b5:2c:bd:eb:40:c6:57: 92:78:b9:35:31:47:77:0f:b7:b3:b5:3e:bd:9c:4c:a1:a2:ff: 71:27:92:36:c8:c4:09:e7:91:9f:48:5f:70:34:83:38:fb:ad: c7:28:28:c1:10:da:a0:bb:99:e9:0a:5d:33:af:bf:41:6a:bb: ef:43:42:1c:07:9c:c2:94:47:42:3b:b9:6c:03:06:02:15:95: 37:0d:8d:e4:0d:ca:dd:8f:c6:8f:71:fd:75:aa:81:e1:f0:a1: 54:0e:6b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2 MzY5MDI3ODAwHhcNMjUwNDI1MDQwNjM2WhcNMjUwNTAyMDQwNjM2WjAYMRYwFAYD VQQDEw02ODBiMGE0Yy1iY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEb4X19ZgJAl64oL76pscxlUOAOfK8S/sGjpuMekyEdtBdWiwvsMypZw+Exy Rhgo4JrYDzH+H7emK+bFPkIrVaNFNCSW/NryUCYCOLCj8Ei3OlB9IEDRl29VqucY W2JQsyTCIrs9LyVydD0sGppS3+pxc872lqy4q+wBgypiPqwnhZgJLUT7J7PzvCaB LTAqipqK48k+Mjkp6WY7tY9p1GCWMhP4bMBNn9ppNWyoYoSyQK6fstF/pZgJZ/Z0 bQeLrIW/SSkrOagDXITIsahXppKSNlJyZZej0+AXb6kUU924zpl5yM8pYu2ALK+p JRHleShAoGgZ3IH3VRxXFw5T+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoTH5tv kv623+GJG82BHjux0ixqMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ3MS82RkU4QTJFRTkyM0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRt SjV5TXljRHY1UE5qYVFKNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwygPBsuJ3wub+E6kLWH6U1WtslOx3BXG6VneYVcPPgeedA4jlGNcj mdJGbwfJPzjMVWD4moJXS6+Dt6L95iQoMBvZNJmhp6C7RLxHL7aQaXB1YG+XgINc 1FvpwjsqO0VzfeC29Ekjm61kLjkMg6qSyA62jVEtmhpsLqYT8FLFMf5iDmWk2G+7 Z1RKR9uIOZjNkitnybWdUTHVxbUsvetAxleSeLk1MUd3D7eztT69nEyhov9xJ5I2 yMQJ55GfSF9wNIM4+63HKCjBENqgu5npCl0zr79BarvvQ0IcB5zClEdCO7lsAwYC FZU3DY3kDcrdj8aPcf11qoHh8KFUDmsh -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:59 2025 by rpki-client