$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: LS0gcAxoNxoBLhJnowZP3rYggmeYtISXp9fluzPoksM= Subject key identifier: 5F:B4:7E:91:F7:AC:71:42:38:95:7F:46:FF:25:0E:D9:0A:E3:26:95 Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:18:28 +0000 Manifest this update: Fri 25 Apr 2025 06:18:27 +0000 Manifest next update: Fri 02 May 2025 06:18:27 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: W0Lu09CpJBSCQdSk4PZ5w2cpSQ/pq0Ld2JuNRPjF93Q=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: Apr 25 06:18:27 2025 GMT Not After : May 2 06:18:27 2025 GMT Subject: CN=680b2934-6c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:80:16:7d:9d:3b:ce:24:20:7c:03:2b:d8: d8:c5:64:c0:bf:8c:74:8a:38:bc:9c:3a:01:10:33: aa:2d:3c:b1:3e:4f:f2:26:72:95:cc:94:59:ca:a2: 0d:9b:1c:43:01:d8:ef:1c:75:2c:44:18:ae:36:fb: 66:60:94:bb:57:ac:7b:ca:43:07:48:43:78:c2:ae: c5:db:f6:02:d9:e9:01:90:c8:05:d5:18:38:a9:21: 5b:fd:b6:56:4e:b1:19:49:a7:24:2d:06:9b:7d:1e: b3:cf:6c:d5:f3:d6:51:f8:d6:8b:30:e7:42:6f:38: 0c:79:e8:22:1a:79:92:9e:81:31:b3:1b:f0:88:fc: f2:e3:64:19:8a:67:f1:0d:af:1c:7e:10:29:7f:4a: a0:ed:e9:11:28:e0:80:7d:cd:da:cb:d8:d0:70:97: 8c:be:51:8d:44:b5:3a:a4:14:ff:11:98:b3:99:82: dd:95:35:bb:83:4d:66:2a:9a:7d:08:78:3a:72:f9: a1:62:34:49:c1:9e:7c:9d:fd:ea:eb:68:d7:df:16: f2:bf:e9:77:07:96:d6:18:46:66:e6:f4:02:4f:29: d0:c6:4c:28:ea:d1:62:60:cf:0b:4a:f0:cc:29:ec: 68:a3:8d:26:6a:24:e3:62:c2:2d:af:06:10:53:c4: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B4:7E:91:F7:AC:71:42:38:95:7F:46:FF:25:0E:D9:0A:E3:26:95 X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a6:32:fa:bd:54:40:13:c5:51:1f:29:c7:8d:29:1c:3e:09: 52:00:96:b1:f3:d1:1d:95:0e:4a:a3:9e:97:f4:1d:89:0d:70: a0:b7:95:98:b5:1f:fe:1c:f5:de:ac:44:29:61:4b:99:03:59: f8:9a:98:77:da:6c:e4:d6:e3:9c:99:99:f2:78:38:bb:4a:9d: 41:b9:41:d3:31:c0:c7:27:58:db:d1:ba:35:05:3a:a0:55:d1: b6:f9:46:2b:29:97:0e:f1:cd:e8:23:ed:4b:d9:0b:5b:2e:a8: de:6c:51:40:7c:b8:f9:10:27:d0:c2:a3:9c:7d:68:03:e4:a8: 59:95:91:a0:6f:7f:50:5b:70:4f:5f:d6:ae:cb:3d:b8:a3:f3: 8d:83:6d:cc:38:3d:58:7d:d1:ea:5c:f5:fa:c4:4d:09:c1:4d: b4:c1:b0:17:b0:22:66:ad:4c:10:5d:5e:39:db:e6:37:ab:b5: a9:d3:cc:1a:df:e7:3a:fb:ce:c3:a9:fe:d6:76:d6:41:51:48: 6c:f8:f6:c5:07:54:3f:63:d2:c2:e6:24:48:82:94:88:59:b8: 37:29:44:15:2c:84:a8:41:00:e6:bc:1c:20:ba:d2:63:4d:7d: 5f:86:ad:be:45:3c:bd:7f:ab:49:50:04:d6:99:8d:88:78:e9: c2:62:28:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDlDMTExMC8GA1UEBRMoQTQxNTA0RTY2RTMxNDQzNDg2MjUxOTA2OTZFMEU4OEZG QjFGNTI3MDAeFw0yNTA0MjUwNjE4MjdaFw0yNTA1MDIwNjE4MjdaMBgxFjAUBgNV BAMTDTY4MGIyOTM0LTZjODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTDYAWfZ07ziQgfAMr2NjFZMC/jHSKOLycOgEQM6otPLE+T/ImcpXMlFnKog2b HEMB2O8cdSxEGK42+2ZglLtXrHvKQwdIQ3jCrsXb9gLZ6QGQyAXVGDipIVv9tlZO sRlJpyQtBpt9HrPPbNXz1lH41osw50JvOAx56CIaeZKegTGzG/CI/PLjZBmKZ/EN rxx+ECl/SqDt6REo4IB9zdrL2NBwl4y+UY1EtTqkFP8RmLOZgt2VNbuDTWYqmn0I eDpy+aFiNEnBnnyd/erraNffFvK/6XcHltYYRmbm9AJPKdDGTCjq0WJgzwtK8Mwp 7GijjSZqJONiwi2vBhBTxLXvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX7R+kfes cUI4lX9G/yUO2QrjJpUwHwYDVR0jBBgwFoAUpBUE5m4xRDSGJRkGluDoj/sfUnAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOUMxLzMwODA1Q0FBQUQ3 MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJVRTVtNHhSRFNHSlJrR2x1RG9qX3NmVW5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OUMxLzMwODA1Q0FBQUQ3MjExRUZBREYyMzQ1RUM0RjlBRTAyL3BCVUU1bTR4UkRT R0pSa0dsdURval9zZlVuQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2mMvq9VEATxVEfKceNKRw+CVIAlrHz0R2VDkqjnpf0HYkNcKC3lZi1 H/4c9d6sRClhS5kDWfiamHfabOTW45yZmfJ4OLtKnUG5QdMxwMcnWNvRujUFOqBV 0bb5Risplw7xzegj7UvZC1suqN5sUUB8uPkQJ9DCo5x9aAPkqFmVkaBvf1BbcE9f 1q7LPbij842Dbcw4PVh90epc9frETQnBTbTBsBewImatTBBdXjnb5jertanTzBrf 5zr7zsOp/tZ21kFRSGz49sUHVD9j0sLmJEiClIhZuDcpRBUshKhBAOa8HCC60mNN fV+Grb5FPL1/q0lQBNaZjYh46cJiKHo= -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:13 2025 by rpki-client