$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: qmQN06ifJYsRDWV6P9ApxYGnVvVuk8r/oJLhxsQl7Fw= Subject key identifier: 6B:82:C5:1B:EB:B4:2E:0F:24:77:DB:FB:2D:B7:04:12:DE:C4:BB:90 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 347D Signing time: Thu 24 Apr 2025 14:40:11 +0000 Manifest this update: Thu 24 Apr 2025 14:40:10 +0000 Manifest next update: Thu 01 May 2025 14:40:10 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: LBtWmt2Nd3bXWNrbjsCDM/YhDSHBOKpWj5HsTjGdrHo=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Apr 24 14:40:10 2025 GMT Not After : May 1 14:40:10 2025 GMT Subject: CN=680a4d4b-e48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:df:54:02:8c:34:69:de:68:e5:c1:cf:c1: 24:48:80:ab:a1:cd:39:f6:be:80:2b:da:88:6f:a9: ed:c4:c1:50:7f:fa:31:e0:6e:ad:bc:fa:f6:e3:67: 04:5d:7b:e3:5b:67:2f:2e:f7:2d:b3:85:03:66:b7: 29:57:b3:d0:ef:99:1a:2f:f6:d1:c2:57:76:c1:93: 0c:39:38:5c:e9:6b:92:86:e5:3a:8e:4d:76:ed:e2: da:e3:69:6c:f6:4f:bf:50:22:75:65:31:65:af:6d: 23:34:a5:74:ab:54:3e:63:f8:9c:a9:8a:7f:2f:70: 73:00:0b:fb:09:2a:b6:d9:70:8b:a5:be:54:8e:9f: 50:fd:0b:27:d6:46:df:23:3a:04:3c:f5:b9:ef:fc: b9:6b:98:2a:7c:86:0e:08:0c:0c:c7:62:b9:b5:4a: 20:b4:ad:0a:f5:5f:df:08:e6:1a:57:fd:f7:da:14: 8e:a5:84:6b:3f:db:0c:4d:2f:b8:ba:01:bc:4f:e8: cb:75:41:59:d8:52:c2:5a:9b:b5:21:39:c4:5a:bb: 17:a4:5c:6e:b3:08:db:3b:b9:16:0e:18:11:0e:2d: 75:3e:e5:83:5b:25:7e:e0:c9:92:75:09:38:fd:b2: 55:3d:89:63:9f:06:da:2f:2d:cb:fc:54:cb:d2:e1: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:C5:1B:EB:B4:2E:0F:24:77:DB:FB:2D:B7:04:12:DE:C4:BB:90 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:70:96:35:84:50:69:3c:77:0b:40:00:a9:4a:23:3c:d3:65: 27:9b:9b:39:fd:db:71:8c:03:60:94:f6:f2:13:62:f2:01:59: 56:6e:f6:01:c7:a5:d9:71:bc:a1:d7:22:3a:64:88:3e:b9:4b: 73:5d:04:89:06:a7:cb:d1:8a:c6:b1:ae:13:b8:b3:be:19:02: 38:6b:b9:f2:ca:19:a6:2c:54:76:f3:d2:9f:2a:eb:15:29:ec: 94:8c:37:1d:fe:3e:f1:09:dc:1f:5e:fd:18:25:8c:38:76:95: 22:ee:7c:dd:ae:ca:18:ee:2f:6f:5c:d1:98:5e:b1:75:aa:1f: 9f:b0:99:ee:84:68:40:dd:22:8e:c7:ed:eb:d2:dd:0f:cb:b7: c3:c2:eb:4a:77:41:43:9d:81:2f:67:3a:7b:f6:10:07:93:12: b9:3d:b0:71:cf:a7:da:2c:a9:1c:5d:5e:f9:37:23:2c:1c:46: 04:76:b1:1a:88:40:fe:d8:f3:15:d3:2e:fe:f6:67:b5:53:ad: 15:da:f3:a8:68:05:fa:d1:77:f4:94:37:31:4a:d8:3d:00:86: f8:1b:d9:ef:b2:91:91:70:d5:f7:f3:c4:d9:c6:51:76:28:f8: 7f:69:de:11:ef:cc:f2:de:76:97:81:a7:a7:48:65:55:1f:a5: c5:8b:cf:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUwNDI0MTQ0MDEwWhcNMjUwNTAxMTQ0MDEwWjAYMRYwFAYD VQQDEw02ODBhNGQ0Yi1lNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL3fVAKMNGneaOXBz8EkSICroc059r6AK9qIb6ntxMFQf/ox4G6tvPr242cE XXvjW2cvLvcts4UDZrcpV7PQ75kaL/bRwld2wZMMOThc6WuShuU6jk127eLa42ls 9k+/UCJ1ZTFlr20jNKV0q1Q+Y/icqYp/L3BzAAv7CSq22XCLpb5Ujp9Q/Qsn1kbf IzoEPPW57/y5a5gqfIYOCAwMx2K5tUogtK0K9V/fCOYaV/332hSOpYRrP9sMTS+4 ugG8T+jLdUFZ2FLCWpu1ITnEWrsXpFxuswjbO7kWDhgRDi11PuWDWyV+4MmSdQk4 /bJVPYljnwbaLy3L/FTL0uEY0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuCxRvr tC4PJHfb+y23BBLexLuQMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCscJY1hFBpPHcLQACpSiM802Unm5s5/dtxjANglPbyE2LyAVlWbvYB x6XZcbyh1yI6ZIg+uUtzXQSJBqfL0YrGsa4TuLO+GQI4a7nyyhmmLFR289KfKusV KeyUjDcd/j7xCdwfXv0YJYw4dpUi7nzdrsoY7i9vXNGYXrF1qh+fsJnuhGhA3SKO x+3r0t0Py7fDwutKd0FDnYEvZzp79hAHkxK5PbBxz6faLKkcXV75NyMsHEYEdrEa iED+2PMV0y7+9me1U60V2vOoaAX60Xf0lDcxStg9AIb4G9nvspGRcNX388TZxlF2 KPh/ad4R78zy3naXgaenSGVVH6XFi88H -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client