$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: XyfiCxcVbvQ6V559O7UtPwvmmmBrFaW4KL6o6rJHtUE= Subject key identifier: AF:FD:D0:53:17:F0:F8:37:DF:3B:85:EB:87:8A:16:F4:10:7E:2A:6B Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 046C Signing time: Thu 24 Apr 2025 23:53:42 +0000 Manifest this update: Thu 24 Apr 2025 23:53:42 +0000 Manifest next update: Thu 01 May 2025 23:53:42 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: c2oBYi5r6Y7VJ+9p8pi3ThRa+Xvoc3HswK79a2VVh7E=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Apr 24 23:53:42 2025 GMT Not After : May 1 23:53:42 2025 GMT Subject: CN=680acf06-fe25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f4:ad:9c:ba:68:58:55:2c:2a:31:8b:bd:c6: b0:d2:bd:7d:c9:d9:70:d7:3b:0b:81:99:56:b7:c8: 85:33:99:2f:1e:8a:57:73:54:c6:7d:cc:ce:18:67: 92:06:71:be:d0:f3:c3:61:14:9f:bf:51:b4:41:ea: 79:cd:34:5e:ee:0b:a0:0e:a3:3b:ee:c1:70:2e:51: 16:56:ed:bc:7b:55:ab:fe:32:94:8e:f9:85:4a:f2: 4b:df:28:a8:69:60:66:61:19:18:bf:eb:a5:8b:fe: f7:50:7f:5c:ac:b1:7e:0e:33:1b:53:81:99:06:7a: 7d:82:f7:8a:0b:fe:ab:07:08:b9:f2:46:77:92:2e: 8b:36:f6:2a:1c:38:98:6e:79:7a:cf:cf:c5:95:ef: 41:59:2c:0f:d6:22:94:3f:85:0d:df:ad:1f:4f:65: 8c:c1:8f:ba:23:73:04:35:a0:90:18:7d:34:ae:e3: b8:70:6e:f0:b9:15:b1:99:80:96:e5:3c:79:82:02: c3:47:7c:7d:3b:f2:20:0f:75:7a:5b:95:d4:25:27: 22:a3:17:cc:76:a5:3a:d6:5b:da:fd:69:6d:08:08: cf:d2:66:78:bb:dc:4d:c4:83:84:4f:65:90:83:21: 6f:75:b4:68:64:0f:b8:17:1d:d3:d9:5c:91:9d:c1: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:D0:53:17:F0:F8:37:DF:3B:85:EB:87:8A:16:F4:10:7E:2A:6B X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:31:fd:3f:da:64:96:4f:03:ea:73:86:72:51:4e:7a:11: bb:7f:87:52:10:e3:b9:51:6f:71:4a:21:88:07:c1:6f:49:f3: 9e:99:2a:72:1a:db:b6:08:ef:70:cc:ea:56:61:2f:8c:ff:df: ea:a7:66:67:a0:53:de:27:6b:16:27:ae:86:78:07:d3:7b:04: ec:bf:3e:a7:09:a9:74:24:bb:e0:0e:77:17:79:17:96:ac:1f: 93:b8:c2:12:7c:2e:68:85:ba:8f:3c:34:76:ee:96:6b:cc:09: 7d:5a:aa:45:78:53:37:fa:f1:f0:cd:10:b6:43:51:fe:78:3c: b8:e7:fe:18:33:36:46:0a:11:69:4e:8c:e0:8a:bd:86:c5:c4: ee:97:b5:17:7f:35:e7:d5:fc:e1:50:6d:56:c3:e6:7c:0d:78: 5b:18:0f:89:94:e1:d1:c4:ba:99:c3:eb:aa:88:a3:04:24:77: e7:7e:a2:d0:74:29:da:91:23:93:08:22:7d:c4:72:4e:5a:55: 28:9d:20:05:0a:a2:5d:51:e4:d8:05:dc:a5:fb:51:36:89:8a: b9:5f:1b:25:95:78:13:85:02:01:be:78:96:1a:d6:f4:54:db: c8:48:e6:4f:98:6b:18:31:d8:19:58:ef:4d:f9:c5:ed:45:5e: 2f:58:87:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUwNDI0MjM1MzQyWhcNMjUwNTAxMjM1MzQyWjAYMRYwFAYD VQQDEw02ODBhY2YwNi1mZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9/StnLpoWFUsKjGLvcaw0r19ydlw1zsLgZlWt8iFM5kvHopXc1TGfczOGGeS BnG+0PPDYRSfv1G0Qep5zTRe7gugDqM77sFwLlEWVu28e1Wr/jKUjvmFSvJL3yio aWBmYRkYv+uli/73UH9crLF+DjMbU4GZBnp9gveKC/6rBwi58kZ3ki6LNvYqHDiY bnl6z8/Fle9BWSwP1iKUP4UN360fT2WMwY+6I3MENaCQGH00ruO4cG7wuRWxmYCW 5Tx5ggLDR3x9O/IgD3V6W5XUJScioxfMdqU61lva/WltCAjP0mZ4u9xNxIOET2WQ gyFvdbRoZA+4Fx3T2VyRncFtUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/90FMX 8Pg33zuF64eKFvQQfiprMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4mDH9P9pklk8D6nOGclFOehG7f4dSEOO5UW9xSiGIB8FvSfOemSpy Gtu2CO9wzOpWYS+M/9/qp2ZnoFPeJ2sWJ66GeAfTewTsvz6nCal0JLvgDncXeReW rB+TuMISfC5ohbqPPDR27pZrzAl9WqpFeFM3+vHwzRC2Q1H+eDy45/4YMzZGChFp Tozgir2GxcTul7UXfzXn1fzhUG1Ww+Z8DXhbGA+JlOHRxLqZw+uqiKMEJHfnfqLQ dCnakSOTCCJ9xHJOWlUonSAFCqJdUeTYBdyl+1E2iYq5XxsllXgThQIBvniWGtb0 VNvISOZPmGsYMdgZWO9N+cXtRV4vWIcL -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:36 2025 by rpki-client