$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: Cpd9VGgdyoI5W1ZsEidIFnvzQMtLQNwmI4VSRpBvlj4= Subject key identifier: 25:E9:3F:89:82:0D:69:75:C0:9C:C9:CF:EC:7E:EE:3A:6B:31:69:7E Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 03CA Signing time: Fri 25 Apr 2025 00:23:35 +0000 Manifest this update: Fri 25 Apr 2025 00:23:35 +0000 Manifest next update: Fri 02 May 2025 00:23:35 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: XLSQDsVVOIhSnrQqUQiRV2yxroPq3qXR8BEfu1kxfMc=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=) 3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Apr 25 00:23:35 2025 GMT Not After : May 2 00:23:35 2025 GMT Subject: CN=680ad607-db9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:b6:45:8e:8f:f2:b9:fa:76:33:43:4d:eb: b7:a3:1e:56:ac:98:db:f1:04:a8:c9:17:22:b8:b1: 0f:50:02:61:67:90:f1:e1:9a:ec:36:6a:2f:20:c3: 73:d1:eb:1c:56:03:1a:71:45:d2:47:ae:f0:a5:23: 67:08:d2:5d:38:84:76:d6:d6:51:9b:18:38:4d:fe: 04:a8:86:64:d6:32:3a:f8:15:2b:be:f4:3e:a8:d6: 99:b9:55:dc:f6:73:fe:b9:3c:e0:34:85:0e:90:d4: a9:5a:fc:44:c1:23:89:92:ed:e9:5f:88:f9:4f:f6: e6:1b:98:5b:f2:45:19:3f:c3:70:14:16:b0:ed:d3: 94:59:c9:22:d8:81:1e:89:8c:19:45:a0:5b:9a:4c: a4:64:93:65:db:92:7a:d7:c0:71:4b:d3:2b:0f:83: 43:63:b1:3e:56:de:b1:46:5f:64:a7:4c:d3:ff:40: 8e:52:10:0b:14:65:78:d4:c9:72:d6:c1:23:64:8a: 85:98:0f:e5:62:dd:c8:cb:f4:37:95:5b:ce:9b:2a: 1a:f3:2a:ca:e3:ad:8b:09:2f:f8:53:73:c8:53:12: 00:ff:d5:79:af:e7:e4:63:2c:eb:cb:41:b5:fa:5f: 84:11:3c:4e:64:54:fe:34:f4:3d:c4:00:9d:61:56: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E9:3F:89:82:0D:69:75:C0:9C:C9:CF:EC:7E:EE:3A:6B:31:69:7E X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bb:cb:fb:8e:c0:e9:52:ea:d5:51:fb:a7:96:be:14:96:d6: 43:1b:97:8d:c9:cc:a2:11:c2:82:b6:a3:f6:55:0c:10:47:a3: 44:ad:62:2b:d9:9b:bb:a7:bd:ce:b5:62:b7:56:3e:2f:45:54: fd:37:39:49:1b:dd:a8:d8:38:72:4c:2c:ec:67:87:36:c5:e5: 9e:3e:ce:5c:f2:2b:32:e5:eb:c8:86:c2:2a:57:74:2a:9f:aa: 0d:55:af:27:5a:5f:3c:63:73:7a:04:eb:7c:09:23:d3:0c:2b: 2f:0c:14:85:ff:7e:17:53:84:eb:8d:a2:7a:6d:b6:9e:1b:9c: fb:ab:bb:35:fc:ac:8b:41:60:5f:26:b3:9a:f1:7f:1e:81:19: 91:a4:43:33:0f:f3:54:7b:64:55:21:7a:66:f1:db:6b:16:f4: 65:10:6a:e6:04:a2:72:85:da:52:61:c3:fb:27:8f:a2:05:03: ef:5d:a5:93:8c:2c:19:f7:c0:bc:eb:ef:b3:d2:10:f1:7d:c0: 37:ea:cf:ce:ea:db:da:92:2b:fb:8d:3b:68:7a:60:28:72:79: 30:21:da:8c:fd:b7:27:dd:fd:87:d0:ae:e3:b0:ae:93:8b:c9: 54:8c:8a:85:d4:52:1f:6e:24:98:77:f6:96:17:79:e8:dc:ce: b5:45:1b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUwNDI1MDAyMzM1WhcNMjUwNTAyMDAyMzM1WjAYMRYwFAYD VQQDEw02ODBhZDYwNy1kYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGi2RY6P8rn6djNDTeu3ox5WrJjb8QSoyRciuLEPUAJhZ5Dx4ZrsNmovIMNz 0escVgMacUXSR67wpSNnCNJdOIR21tZRmxg4Tf4EqIZk1jI6+BUrvvQ+qNaZuVXc 9nP+uTzgNIUOkNSpWvxEwSOJku3pX4j5T/bmG5hb8kUZP8NwFBaw7dOUWcki2IEe iYwZRaBbmkykZJNl25J618BxS9MrD4NDY7E+Vt6xRl9kp0zT/0COUhALFGV41Mly 1sEjZIqFmA/lYt3Iy/Q3lVvOmyoa8yrK462LCS/4U3PIUxIA/9V5r+fkYyzry0G1 +l+EETxOZFT+NPQ9xACdYVZUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXpP4mC DWl1wJzJz+x+7jprMWl+MB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTu8v7jsDpUurVUfunlr4UltZDG5eNycyiEcKCtqP2VQwQR6NErWIr 2Zu7p73OtWK3Vj4vRVT9NzlJG92o2DhyTCzsZ4c2xeWePs5c8isy5evIhsIqV3Qq n6oNVa8nWl88Y3N6BOt8CSPTDCsvDBSF/34XU4TrjaJ6bbaeG5z7q7s1/KyLQWBf JrOa8X8egRmRpEMzD/NUe2RVIXpm8dtrFvRlEGrmBKJyhdpSYcP7J4+iBQPvXaWT jCwZ98C86++z0hDxfcA36s/O6tvakiv7jTtoemAocnkwIdqM/bcn3f2H0K7jsK6T i8lUjIqF1FIfbiSYd/aWF3no3M61RRuX -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:36 2025 by rpki-client