$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: 9tsHm3qzbtP/ptkdyR1Ck3y9Q57J3ttIoqBBorlbvaM= Subject key identifier: A4:20:3B:1D:70:14:79:C2:3E:45:AC:81:AA:F6:D9:C5:A7:12:2E:EB Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 03C8 Signing time: Fri 25 Apr 2025 00:25:20 +0000 Manifest this update: Fri 25 Apr 2025 00:25:20 +0000 Manifest next update: Fri 02 May 2025 00:25:20 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: xf89T5BqPPLfd/CHZn5o6l8UTxZlfSBtRA1+LkyFPUo=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: ABrIq2phc9urb6rkViq/Ir7haK/5vojTJpbzqSfLFQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Apr 25 00:25:20 2025 GMT Not After : May 2 00:25:20 2025 GMT Subject: CN=680ad670-10f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:c7:5e:e2:14:32:a2:e2:b0:bf:37:5a:4c: 6a:47:36:c7:16:e7:2b:ca:fe:5a:93:e8:a4:af:85: 17:b1:2f:ea:fd:80:27:1e:ae:a4:e7:ff:fb:2a:b8: b9:a3:fe:72:15:bc:9d:ac:b0:67:b1:03:85:45:60: 0b:48:f6:16:10:a4:b3:ee:a5:df:fd:24:4b:2f:a2: 12:3d:5d:4f:9f:a7:2a:27:bc:54:e5:0f:a7:44:67: 98:4c:82:14:56:87:d0:77:46:53:1c:d2:b8:dd:10: 92:05:c4:68:d7:0e:6c:63:b1:48:40:6a:79:f1:95: 1a:7c:5b:51:c3:74:95:dc:b6:12:5b:f9:00:17:96: a1:e7:14:2b:15:1e:04:4b:39:b3:91:d8:dd:5b:9e: f8:c2:43:8e:5f:73:b9:db:e6:bc:7e:dc:f0:1c:3e: 14:cc:a9:7a:d1:46:7a:c8:7b:fe:cc:b7:c5:ba:94: d5:aa:70:68:22:93:04:bf:f2:6f:23:54:10:1f:e2: a8:5b:dd:5b:1e:a3:1f:88:79:90:a3:ec:a7:f3:a4: 95:b1:a8:41:d2:af:4b:ac:df:86:cb:67:f7:84:dc: 5d:90:89:7b:b2:41:75:22:a8:df:2d:93:b3:aa:25: 30:63:38:62:c8:20:f6:02:fd:0e:53:72:4c:7b:e8: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:3B:1D:70:14:79:C2:3E:45:AC:81:AA:F6:D9:C5:A7:12:2E:EB X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ba:a8:59:70:22:f8:63:f3:4f:1b:41:b9:e6:05:73:4c:50: 06:b7:70:88:4c:af:7f:80:9a:41:32:c2:89:30:67:cf:2d:22: 1e:09:3e:b7:e7:ee:e6:38:f4:d0:cd:98:e7:22:21:95:92:de: 35:e4:37:37:e7:6d:64:89:cc:9a:64:ee:02:76:05:8c:e7:ff: ce:e9:2a:11:07:d2:72:99:f9:19:c3:18:d5:93:22:42:92:3f: 34:79:18:fa:df:28:12:66:6c:2a:46:a8:33:97:36:19:3c:8b: c8:99:25:85:da:ce:23:06:77:f3:d4:30:64:db:dc:6c:a3:98: 7a:bf:9b:92:dd:3c:c5:9f:96:06:03:4a:2a:eb:48:b3:db:6a: 3e:cc:89:fc:b8:06:17:cc:52:26:28:03:48:c2:95:de:55:66: af:7c:e7:e1:ac:02:23:4f:88:88:31:4b:12:c1:8d:04:a1:64: 0a:cc:d5:de:1c:a1:ae:f4:99:4f:28:da:10:cc:e2:a2:57:94: 2c:a1:70:43:9a:91:e9:c0:56:8a:b6:01:fe:54:9b:ae:00:81: 37:59:f0:35:c5:71:63:2b:f9:99:f3:03:bc:5c:07:67:8a:7e: ab:25:ea:3a:50:58:8e:48:95:a2:38:f6:35:17:e3:37:a0:16: f6:45:3e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwNDI1MDAyNTIwWhcNMjUwNTAyMDAyNTIwWjAYMRYwFAYD VQQDEw02ODBhZDY3MC0xMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNXHXuIUMqLisL83WkxqRzbHFucryv5ak+ikr4UXsS/q/YAnHq6k5//7Kri5 o/5yFbydrLBnsQOFRWALSPYWEKSz7qXf/SRLL6ISPV1Pn6cqJ7xU5Q+nRGeYTIIU VofQd0ZTHNK43RCSBcRo1w5sY7FIQGp58ZUafFtRw3SV3LYSW/kAF5ah5xQrFR4E SzmzkdjdW574wkOOX3O52+a8ftzwHD4UzKl60UZ6yHv+zLfFupTVqnBoIpMEv/Jv I1QQH+KoW91bHqMfiHmQo+yn86SVsahB0q9LrN+Gy2f3hNxdkIl7skF1IqjfLZOz qiUwYzhiyCD2Av0OU3JMe+gN4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQgOx1w FHnCPkWsgar22cWnEi7rMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANuqhZcCL4Y/NPG0G55gVzTFAGt3CITK9/gJpBMsKJMGfPLSIeCT63 5+7mOPTQzZjnIiGVkt415Dc3521kicyaZO4CdgWM5//O6SoRB9JymfkZwxjVkyJC kj80eRj63ygSZmwqRqgzlzYZPIvImSWF2s4jBnfz1DBk29xso5h6v5uS3TzFn5YG A0oq60iz22o+zIn8uAYXzFImKANIwpXeVWavfOfhrAIjT4iIMUsSwY0EoWQKzNXe HKGu9JlPKNoQzOKiV5QsoXBDmpHpwFaKtgH+VJuuAIE3WfA1xXFjK/mZ8wO8XAdn in6rJeo6UFiOSJWiOPY1F+M3oBb2RT7C -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:00 2025 by rpki-client