$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: 98CpUCWnNIoqhVjMKsawvXq3/MNFVdSHhM1uJpMJXKU= Subject key identifier: 39:9D:1D:31:0C:81:07:62:1B:79:4B:65:99:7C:88:FF:C4:9F:A9:D0 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 0281 Signing time: Sat 21 Jun 2025 01:19:43 +0000 Manifest this update: Sat 21 Jun 2025 01:19:43 +0000 Manifest next update: Sat 28 Jun 2025 01:19:43 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: X3tyroVCBPvEl51LNSsnnTMdH/WEgdA1MGBersGg8p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 01:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Jun 21 01:19:43 2025 GMT Not After : Jun 28 01:19:43 2025 GMT Subject: CN=685608af-3c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:9f:33:09:15:70:1d:7d:a4:24:93:d2:0a: ba:37:74:24:97:14:0c:5e:5e:79:4d:da:8d:df:46: 47:07:e6:ce:f1:c2:e3:1b:2a:c2:90:f9:a1:cc:c3: 84:35:94:a4:9a:11:ef:c3:53:54:a9:4d:d9:01:dd: 58:0f:b8:c3:e7:3c:3d:87:df:07:65:6b:44:84:ac: 77:74:a5:90:e0:ea:ab:7a:47:fa:ee:42:32:57:58: 61:10:cc:fc:80:a9:ec:e2:9b:e6:db:d1:6d:f8:a7: 4c:b8:13:fe:21:38:e0:1c:9a:b3:07:99:0f:42:50: d6:f1:c4:3f:ce:a7:9e:53:bd:d5:57:f8:1e:ff:2c: 62:30:ab:23:a3:41:b1:c6:90:b2:81:af:05:99:70: 69:e5:1d:2a:13:39:1c:1c:2c:10:20:12:a6:d3:98: f1:cd:14:0d:78:3c:d3:02:cf:5d:f3:8d:79:3f:71: 3e:1d:19:c3:91:03:c7:87:41:f5:5f:07:c9:51:c5: e2:37:89:1a:47:ba:27:de:39:4f:d5:c1:e3:37:b0: 08:9b:97:d5:8b:ff:f0:18:2e:9e:e9:5b:32:5b:9a: 09:4a:14:83:68:c7:a0:21:bb:49:f7:4a:5d:f7:cc: 90:0f:19:d0:49:f4:f4:a6:31:08:c8:41:57:fa:31: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:1D:31:0C:81:07:62:1B:79:4B:65:99:7C:88:FF:C4:9F:A9:D0 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ce:09:6f:04:c7:31:42:a6:19:b8:c7:f7:d9:95:29:09:f4: 6f:11:c2:50:98:bc:3a:21:f0:92:db:73:69:cb:cc:23:8e:37: c3:7a:61:db:81:ba:32:5f:b2:57:c9:cb:18:4d:0f:7f:26:fe: b9:96:d2:e5:62:91:df:a6:a2:16:02:f6:2f:21:a9:16:09:ec: ff:55:6b:b1:7d:22:a1:cb:4e:bc:f1:aa:32:75:e2:c7:fc:2b: 27:6b:3e:9d:eb:85:19:a5:2e:cd:aa:12:9b:70:24:a2:4e:f9: ae:8b:00:bc:25:25:58:92:4c:06:12:6e:2c:c2:d1:bd:52:95: 03:24:97:ee:f1:19:39:02:f0:62:fa:f3:64:8b:35:31:e7:6b: 06:32:e1:3e:72:aa:6a:fb:2d:1b:5a:33:6c:98:6b:31:b2:c7: 2f:0a:f8:5b:ce:b2:ae:79:a3:a0:e1:b3:90:10:38:fd:83:39: af:ce:ba:f4:77:87:33:d1:20:e3:26:d2:80:62:64:6a:cb:3b: 8e:6a:97:ea:86:f1:9c:54:8b:a7:61:28:5d:8c:b0:85:a0:61: 9d:61:62:72:a0:10:12:ea:04:e1:04:7d:45:65:55:80:b1:a8: aa:cf:6c:90:93:19:b3:77:9d:ed:d8:77:2c:88:76:33:d2:aa: 36:e1:69:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUwNjIxMDExOTQzWhcNMjUwNjI4MDExOTQzWjAYMRYwFAYD VQQDEw02ODU2MDhhZi0zYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweufMwkVcB19pCST0gq6N3QklxQMXl55TdqN30ZHB+bO8cLjGyrCkPmhzMOE NZSkmhHvw1NUqU3ZAd1YD7jD5zw9h98HZWtEhKx3dKWQ4Oqrekf67kIyV1hhEMz8 gKns4pvm29Ft+KdMuBP+ITjgHJqzB5kPQlDW8cQ/zqeeU73VV/ge/yxiMKsjo0Gx xpCyga8FmXBp5R0qEzkcHCwQIBKm05jxzRQNeDzTAs9d8415P3E+HRnDkQPHh0H1 XwfJUcXiN4kaR7on3jlP1cHjN7AIm5fVi//wGC6e6VsyW5oJShSDaMegIbtJ90pd 98yQDxnQSfT0pjEIyEFX+jHCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmdHTEM gQdiG3lLZZl8iP/En6nQMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTzglvBMcxQqYZuMf32ZUpCfRvEcJQmLw6IfCS23Npy8wjjjfDemHb gboyX7JXycsYTQ9/Jv65ltLlYpHfpqIWAvYvIakWCez/VWuxfSKhy0688aoydeLH /Csnaz6d64UZpS7NqhKbcCSiTvmuiwC8JSVYkkwGEm4swtG9UpUDJJfu8Rk5AvBi +vNkizUx52sGMuE+cqpq+y0bWjNsmGsxsscvCvhbzrKueaOg4bOQEDj9gzmvzrr0 d4cz0SDjJtKAYmRqyzuOapfqhvGcVIunYShdjLCFoGGdYWJyoBAS6gThBH1FZVWA saiqz2yQkxmzd53t2HcsiHYz0qo24WlK -----END CERTIFICATE-----Generated at Sat Jun 21 11:08:01 2025 by rpki-client