$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json) Hash identifier: kBZFA8G0NWmHeJ/WFlSJXxDnhamp5VmlyHCeh5TzNOQ= Subject key identifier: B1:5C:E2:8A:04:B6:7A:B3:30:52:65:41:A0:F8:4D:2C:7E:EC:E4:94 Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Certificate serial: 14DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft Manifest number: 14D1 Signing time: Thu 24 Apr 2025 16:51:09 +0000 Manifest this update: Thu 24 Apr 2025 16:51:08 +0000 Manifest next update: Thu 01 May 2025 16:51:08 +0000 Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: RWd/jki40raCsd+p/bBoVI6+CvSKTTIZMBpuU8f7p8I=) 2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5339 (0x14db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Validity Not Before: Apr 24 16:51:08 2025 GMT Not After : May 1 16:51:08 2025 GMT Subject: CN=680a6bfd-2967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:c9:44:1e:f7:9f:c7:85:94:79:dd:7b:b1: 38:00:14:7b:be:8f:de:d5:5e:be:9b:6f:96:96:a6: e3:4a:a4:69:ae:c5:39:c8:bf:29:86:f6:0f:be:24: 4c:be:cf:2f:63:85:a1:63:a5:fa:73:32:37:01:01: 4f:56:02:0c:34:a7:48:4b:0f:6e:db:16:e2:de:10: f1:38:01:26:d4:0f:f8:9e:41:d6:55:9b:d6:59:ad: 92:96:33:07:1a:9b:13:6f:12:99:d0:ff:13:4b:d9: cf:32:73:74:7e:52:94:e8:12:2b:00:bf:23:e9:3e: 67:47:34:54:3c:3c:75:5f:40:90:18:dd:41:34:80: 71:e2:db:73:57:b2:13:27:3f:39:d8:3f:1e:2c:99: 8e:a1:89:ec:1d:c6:6c:94:35:46:ff:5f:18:a0:bc: 27:17:c8:fe:75:d8:7b:ea:25:5f:45:51:7f:c5:53: d3:f3:60:b7:9e:0a:eb:05:b1:0b:6f:4c:ec:31:63: 20:13:fb:31:e4:10:60:48:61:34:3f:b7:4b:aa:52: 22:26:b1:f1:24:ef:87:5f:f2:18:1c:a4:e8:66:97: 06:0c:8b:ee:75:9c:0d:e8:f8:43:85:c3:d1:13:1d: 6b:47:66:4c:75:7a:f2:2c:3a:39:44:35:69:74:01: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:E2:8A:04:B6:7A:B3:30:52:65:41:A0:F8:4D:2C:7E:EC:E4:94 X509v3 Authority Key Identifier: keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9f:58:84:3e:6b:aa:de:db:94:21:17:8c:39:ec:d7:7e:42: cb:26:2d:97:b0:c8:da:81:68:00:a1:c0:67:5d:26:ad:17:d5: c4:da:25:06:9e:c7:d8:c0:14:41:bd:77:f2:57:36:37:6f:e2: 82:69:88:98:38:72:8d:f1:50:80:62:d6:a7:35:bc:0d:4d:aa: 44:64:fb:f4:08:e1:b8:f5:ef:80:70:43:2b:cf:e4:dd:83:2a: a9:1a:86:c8:00:8f:47:ea:c7:8d:3c:3a:38:72:79:de:5a:d0: f3:bc:99:f8:07:77:0b:42:90:9e:34:9e:c7:cc:96:52:60:29: 33:60:6e:a1:9c:3f:ac:51:c2:5a:6e:44:3d:a6:98:f9:42:f4: f0:f3:07:9f:3c:6a:89:7c:9e:68:1b:66:12:ed:11:f4:53:f0: 8c:9f:f2:7a:5a:66:e2:ca:c4:a2:1c:ca:13:63:35:3f:fa:52: 8f:c0:ac:18:ed:a1:9c:dd:d9:f1:48:94:de:32:8b:a1:aa:2b: 94:a6:6f:7e:be:dc:51:64:16:68:a7:4c:90:d0:71:54:b4:02: 1b:40:16:ec:f3:e0:60:7d:6d:67:5c:25:df:4b:d5:63:94:e7: 45:f4:b6:b6:07:84:15:76:d6:db:2c:45:c3:46:e3:30:b5:b7: 5f:28:f8:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3 M0U0OUU1NEEwHhcNMjUwNDI0MTY1MTA4WhcNMjUwNTAxMTY1MTA4WjAYMRYwFAYD VQQDEw02ODBhNmJmZC0yOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaXJRB73n8eFlHnde7E4ABR7vo/e1V6+m2+WlqbjSqRprsU5yL8phvYPviRM vs8vY4WhY6X6czI3AQFPVgIMNKdISw9u2xbi3hDxOAEm1A/4nkHWVZvWWa2SljMH GpsTbxKZ0P8TS9nPMnN0flKU6BIrAL8j6T5nRzRUPDx1X0CQGN1BNIBx4ttzV7IT Jz852D8eLJmOoYnsHcZslDVG/18YoLwnF8j+ddh76iVfRVF/xVPT82C3ngrrBbEL b0zsMWMgE/sx5BBgSGE0P7dLqlIiJrHxJO+HX/IYHKToZpcGDIvudZwN6PhDhcPR Ex1rR2ZMdXryLDo5RDVpdAGmRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFc4ooE tnqzMFJlQaD4TSx+7OSUMB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgwMy81NDZFRDczQTUzMzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VG RDE2RlpzUmgyYXR6NUo1VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCan1iEPmuq3tuUIReMOezXfkLLJi2XsMjagWgAocBnXSatF9XE2iUG nsfYwBRBvXfyVzY3b+KCaYiYOHKN8VCAYtanNbwNTapEZPv0COG49e+AcEMrz+Td gyqpGobIAI9H6seNPDo4cnneWtDzvJn4B3cLQpCeNJ7HzJZSYCkzYG6hnD+sUcJa bkQ9ppj5QvTw8wefPGqJfJ5oG2YS7RH0U/CMn/J6WmbiysSiHMoTYzU/+lKPwKwY 7aGc3dnxSJTeMouhqiuUpm9+vtxRZBZop0yQ0HFUtAIbQBbs8+BgfW1nXCXfS9Vj lOdF9La2B4QVdtbbLEXDRuMwtbdfKPij -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:50 2025 by rpki-client