$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: eLUMY8/tVJLkKlsbArWYnkIK5ovDT80qVxB3gMuo1ew= Subject key identifier: 4A:6E:2E:A5:7C:80:AF:B9:72:7E:52:C6:0B:D6:7F:DA:29:83:C0:8B Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 035D Signing time: Fri 25 Apr 2025 00:44:47 +0000 Manifest this update: Fri 25 Apr 2025 00:44:47 +0000 Manifest next update: Fri 02 May 2025 00:44:47 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: Crh8QttnCwpLMNDs6IHau4ZGUqzq7tGkw3JVwr6oneY=) 2: 82230EB20A7211EE8FA2CD58C4F9AE02.roa (hash: pFtPdQMMb/WQBA6aWqz7vT25hbAFdZnwC3pUZe1i/Ks=) 3: 80FAEBF40A7211EE8FA2CD58C4F9AE02.roa (hash: Sf1R/khEpR4iFJR+AM7kGD6260NMhorWrh2A7K0OVyw=) 4: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: TyBxPxhfQAireAxlWMgdzu2oa+eead1thRrfD4eJkU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Apr 25 00:44:47 2025 GMT Not After : May 2 00:44:47 2025 GMT Subject: CN=680adaff-c009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bb:e0:60:80:5c:d0:56:89:56:b3:b5:2f:b0: 0d:7c:32:48:78:c5:c4:17:3a:bb:64:f5:f6:27:af: bf:03:95:f1:c8:55:79:d6:e6:13:9c:2e:f0:ca:49: f7:a0:af:00:9e:9b:92:57:1a:b9:94:c9:69:da:14: 08:8c:04:a0:0b:b9:43:26:84:f9:1a:82:c3:55:83: 86:15:64:db:4d:13:88:2c:bc:ab:7a:31:92:16:42: ed:c5:9c:65:50:98:cf:37:14:06:c0:f5:b8:dd:f1: 15:19:2c:7a:96:3d:f2:bf:28:0b:37:71:e3:2a:48: 38:d0:99:1a:32:31:ba:f3:35:fa:d6:f0:8c:9b:d1: fe:f9:19:cb:95:75:93:96:04:ab:3d:33:c2:4a:e6: 1c:3f:36:7e:0d:48:15:9b:9b:b3:80:a1:59:3b:a4: 11:6e:9f:bd:41:62:2f:51:72:62:06:4d:be:2e:fb: e8:10:17:d1:86:20:4e:70:be:cd:06:76:d5:ab:6f: 3e:08:c6:47:dd:a0:ae:29:8e:3f:bb:47:3d:31:5e: 7d:d3:b3:4e:b3:b1:96:69:b1:d7:10:5e:7e:a3:be: 91:31:03:ba:ee:7d:9d:4a:11:d7:d6:6f:43:06:18: e2:75:e0:49:20:05:79:d4:fa:c6:51:4f:59:91:9d: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:2E:A5:7C:80:AF:B9:72:7E:52:C6:0B:D6:7F:DA:29:83:C0:8B X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:7d:f1:e3:64:f5:64:45:23:1a:f5:27:87:83:c2:29:6b:a7: 3a:42:de:9e:1b:f1:d1:47:91:c5:e8:0b:f7:a0:57:7c:fa:80: b1:16:91:c3:87:af:10:dd:21:b8:8f:6d:f4:40:4c:0b:7c:42: 70:e2:d0:2f:2b:13:af:6b:ae:80:23:51:3f:89:30:23:bf:c6: 2c:67:ac:4d:23:22:43:4d:8e:c4:ea:d4:85:6d:4a:9f:00:4f: c2:1f:ba:8f:71:51:10:82:b0:eb:35:57:93:00:01:01:a6:cd: f9:2b:65:ee:e9:b6:20:ed:f6:af:d3:ee:ed:20:cb:a9:cd:40: 77:f9:5c:b1:ea:ac:cf:d3:a1:12:2f:14:78:ba:57:af:42:b1: ce:1b:cc:0e:b4:79:10:30:94:b5:33:34:a6:ff:1d:8f:b8:72: dd:d1:0f:27:f6:d5:69:3f:7e:3c:8c:80:82:82:b6:52:88:17: c0:e5:b6:9a:54:ae:a3:a9:b2:d3:59:67:d2:14:a6:92:f4:e4: f8:47:b6:5a:77:f4:ee:9b:80:27:7f:4f:90:ba:ff:d6:f5:7d: a8:dc:e0:93:20:b4:9e:d6:3d:32:84:89:6b:ec:f8:f5:ac:fc: 88:10:5c:2e:c5:bf:dc:7d:89:68:82:d2:21:b5:2f:bf:a3:c0: 56:8e:bf:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUwNDI1MDA0NDQ3WhcNMjUwNTAyMDA0NDQ3WjAYMRYwFAYD VQQDEw02ODBhZGFmZi1jMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+rvgYIBc0FaJVrO1L7ANfDJIeMXEFzq7ZPX2J6+/A5XxyFV51uYTnC7wykn3 oK8AnpuSVxq5lMlp2hQIjASgC7lDJoT5GoLDVYOGFWTbTROILLyrejGSFkLtxZxl UJjPNxQGwPW43fEVGSx6lj3yvygLN3HjKkg40JkaMjG68zX61vCMm9H++RnLlXWT lgSrPTPCSuYcPzZ+DUgVm5uzgKFZO6QRbp+9QWIvUXJiBk2+LvvoEBfRhiBOcL7N BnbVq28+CMZH3aCuKY4/u0c9MV5907NOs7GWabHXEF5+o76RMQO67n2dShHX1m9D BhjideBJIAV51PrGUU9ZkZ1kYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpuLqV8 gK+5cn5SxgvWf9opg8CLMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzffHjZPVkRSMa9SeHg8Ipa6c6Qt6eG/HRR5HF6Av3oFd8+oCxFpHD h68Q3SG4j230QEwLfEJw4tAvKxOva66AI1E/iTAjv8YsZ6xNIyJDTY7E6tSFbUqf AE/CH7qPcVEQgrDrNVeTAAEBps35K2Xu6bYg7fav0+7tIMupzUB3+Vyx6qzP06ES LxR4ulevQrHOG8wOtHkQMJS1MzSm/x2PuHLd0Q8n9tVpP348jICCgrZSiBfA5baa VK6jqbLTWWfSFKaS9OT4R7Zad/Tum4Anf0+Quv/W9X2o3OCTILSe1j0yhIlr7Pj1 rPyIEFwuxb/cfYlogtIhtS+/o8BWjr+Z -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:47 2025 by rpki-client