$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: GFDlVWRLnzPyb6B2QxKEW0KTQFovwU1GTnf2fwblARE= Subject key identifier: 0D:F6:5F:2B:D2:36:A6:17:A9:DA:65:E0:61:46:F6:13:3E:17:3B:A4 Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 3476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3B94 Signing time: Sat 26 Apr 2025 14:35:39 +0000 Manifest this update: Sat 26 Apr 2025 14:35:39 +0000 Manifest next update: Sat 03 May 2025 14:35:39 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: DL+qDxJnrlzDe5lFnKaukSQiGv1X6OyhSj5tOrJIZMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13430 (0x3476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: Apr 26 14:35:39 2025 GMT Not After : May 3 14:35:39 2025 GMT Subject: CN=680cef3b-0364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:c6:d3:88:78:41:b5:1e:24:12:53:1f:ee: 01:89:d4:4d:0e:e3:76:89:58:c1:1d:32:3f:dc:64: 2e:84:5e:e9:44:62:e6:11:06:f8:0f:d0:45:c9:c6: 70:0f:73:31:93:0d:8d:6a:da:73:23:0e:16:e6:29: a8:a5:04:5f:3a:0b:a9:d8:36:3f:09:de:c5:32:aa: 61:a1:fe:b8:ea:60:8a:5f:2f:6f:47:7e:9c:e1:b8: 04:a3:59:ec:ee:7a:b3:87:4c:8d:88:d9:d9:74:18: 92:72:02:d0:6c:7a:b1:6a:0a:e1:21:2f:7f:32:2c: e9:f8:37:74:58:fe:31:a2:2b:75:7f:78:45:43:ed: 03:1d:6f:bd:43:9c:b5:75:3e:08:37:70:e3:6c:5c: 8a:60:81:41:82:ec:5f:71:53:5f:ba:ca:37:4f:70: 5d:45:5b:7b:58:21:6d:da:97:9a:b3:50:9d:a6:83: 31:05:70:1d:cf:9f:52:84:b1:a6:a8:eb:51:5c:d6: 2d:ee:1b:eb:b7:9f:78:52:e1:86:e0:c1:5f:81:e7: b8:17:d5:48:ec:e2:68:f8:36:01:89:61:d6:19:70: fd:55:75:77:13:79:96:6a:ea:6c:1c:6e:5f:74:75: 89:87:ee:f3:35:bc:83:29:6d:6d:6e:8b:09:41:a8: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:5F:2B:D2:36:A6:17:A9:DA:65:E0:61:46:F6:13:3E:17:3B:A4 X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:82:43:e0:39:16:21:21:a1:dc:65:03:59:c5:74:70:fd:6a: 43:a7:4a:1c:d9:c7:57:ae:d0:e8:b7:31:68:21:01:4a:ae:5a: e3:f6:99:f6:27:cf:e7:3e:b3:7d:59:c0:ee:2e:3e:c1:64:40: cf:ea:cf:9e:db:c4:b4:03:73:98:9a:66:79:e5:ee:42:59:c0: d3:e3:5b:b1:f8:67:14:ab:76:df:1b:7e:32:b7:4c:49:38:81: 7b:00:8d:1b:63:9c:5b:6a:30:39:d5:0c:49:0c:22:f5:0b:4d: f6:77:ca:20:bb:be:ba:a2:b9:de:09:90:15:3e:bc:3a:c4:9e: 16:e9:e1:cd:75:a4:6b:99:15:fc:37:42:b0:a0:aa:49:8c:2f: f4:17:15:d9:13:81:a8:e8:75:3c:ad:57:2a:55:2b:8d:73:63: 27:67:a6:a6:f2:db:59:57:ca:e9:5e:06:eb:db:28:37:0e:84: 46:c3:6c:97:29:ed:22:e3:de:06:e3:02:f6:fd:80:2f:b7:42: 90:58:17:29:2d:34:b1:47:17:be:9e:33:73:f3:4f:02:3e:c8: f5:95:3b:76:32:3a:63:a0:37:84:c3:ad:d7:8e:eb:b3:d7:a0: 13:21:c3:33:87:e7:4c:5d:d8:34:9d:d4:17:61:3a:1c:bf:4e: d0:2b:1b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUwNDI2MTQzNTM5WhcNMjUwNTAzMTQzNTM5WjAYMRYwFAYD VQQDEw02ODBjZWYzYi0wMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OnG04h4QbUeJBJTH+4BidRNDuN2iVjBHTI/3GQuhF7pRGLmEQb4D9BFycZw D3Mxkw2NatpzIw4W5imopQRfOgup2DY/Cd7FMqphof646mCKXy9vR36c4bgEo1ns 7nqzh0yNiNnZdBiScgLQbHqxagrhIS9/Mizp+Dd0WP4xoit1f3hFQ+0DHW+9Q5y1 dT4IN3DjbFyKYIFBguxfcVNfuso3T3BdRVt7WCFt2peas1CdpoMxBXAdz59ShLGm qOtRXNYt7hvrt594UuGG4MFfgee4F9VI7OJo+DYBiWHWGXD9VXV3E3mWaupsHG5f dHWJh+7zNbyDKW1tbosJQaiA/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA32XyvS NqYXqdpl4GFG9hM+FzukMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgkPgORYhIaHcZQNZxXRw/WpDp0oc2cdXrtDotzFoIQFKrlrj9pn2 J8/nPrN9WcDuLj7BZEDP6s+e28S0A3OYmmZ55e5CWcDT41ux+GcUq3bfG34yt0xJ OIF7AI0bY5xbajA51QxJDCL1C032d8ogu766orneCZAVPrw6xJ4W6eHNdaRrmRX8 N0KwoKpJjC/0FxXZE4Go6HU8rVcqVSuNc2MnZ6am8ttZV8rpXgbr2yg3DoRGw2yX Ke0i494G4wL2/YAvt0KQWBcpLTSxRxe+njNz808CPsj1lTt2MjpjoDeEw63Xjuuz 16ATIcMzh+dMXdg0ndQXYTocv07QKxvF -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:56 2025 by rpki-client