$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: BM6+BdsQUE+tyQDI3b5pR0JJksxq4o5Yd1Q5QDofkls= Subject key identifier: E0:A2:E3:C5:23:BF:22:31:25:6D:B0:1E:48:D6:62:C9:52:D2:9D:82 Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 0172 Signing time: Fri 25 Apr 2025 02:59:57 +0000 Manifest this update: Fri 25 Apr 2025 02:59:57 +0000 Manifest next update: Fri 02 May 2025 02:59:57 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: +gvVNpLkqoAw6K3YapvxTrd6fo+x0DmMnwZyTv9J6zQ=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: Apr 25 02:59:57 2025 GMT Not After : May 2 02:59:57 2025 GMT Subject: CN=680afaad-63e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:e0:cd:67:d0:26:6f:3e:77:40:0b:7a:7b: eb:5e:25:59:54:dd:f7:d1:35:8c:76:c1:5f:67:d7: 1f:6f:68:ca:a6:0c:7f:98:75:c0:66:aa:fe:1e:67: fb:1b:c8:ad:08:7b:f9:e0:e7:f8:23:61:bc:bb:ea: 22:33:a0:7d:76:cb:30:16:5d:f7:40:88:b5:0e:b7: 4b:af:12:85:5d:92:fd:b0:9d:72:3b:27:25:76:da: 33:f8:34:f5:05:1a:2e:26:ed:20:50:af:ef:99:fd: a7:bd:8f:e0:82:65:02:01:7a:ea:0b:35:67:ec:fd: 92:9c:9b:ba:6f:ab:d3:80:93:05:f1:f7:9a:b2:6c: 37:12:08:21:2d:0b:69:17:d9:63:99:dd:ff:53:f9: 8d:63:9d:d3:90:db:29:ba:83:60:13:01:07:b7:4b: e7:1d:6b:8c:74:04:37:68:00:8b:1a:06:a0:38:20: 5b:d9:b9:2e:8c:ee:1e:b0:8b:25:10:9a:96:d1:6e: 87:e0:39:06:85:f7:b7:fd:ec:3f:1f:ca:bc:c2:fd: cd:7d:42:8b:69:54:33:03:cf:e1:83:6a:2f:fe:64: 8b:2d:7a:c4:2d:71:29:fc:ac:02:a2:c5:2c:b1:0b: f4:87:de:3a:3e:c6:5b:d3:40:dc:47:0a:cc:65:eb: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A2:E3:C5:23:BF:22:31:25:6D:B0:1E:48:D6:62:C9:52:D2:9D:82 X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:15:1f:75:e6:e0:1a:40:35:85:09:bb:05:c8:2d:49:c3:0e: 2f:a0:9f:6b:53:98:84:91:3a:58:7c:4f:7c:1a:09:dc:8f:f6: 49:36:af:c4:fa:3e:da:ab:13:97:d0:d4:88:f8:bc:63:83:67: 39:16:24:bc:eb:fd:76:81:bb:db:ee:e9:c5:1e:b7:36:d5:6c: cd:e7:33:d5:d7:54:e6:c2:b1:2a:b1:00:93:61:db:e6:b8:6b: 28:27:99:67:13:85:29:b3:98:e7:40:48:c1:09:e1:bd:ca:05: 67:1a:86:28:b7:4d:40:03:ae:b5:cc:91:0c:1f:75:53:d3:7e: 9f:1a:1e:4e:85:0d:71:e8:80:b6:10:3b:34:9c:cc:61:e3:db: 53:0d:8d:ab:d2:0b:4e:c9:8c:7d:f3:cd:86:84:83:39:cb:22: 88:4f:83:a1:72:9a:a4:b6:d2:cb:29:9b:65:e6:ac:26:3a:c3: d3:7c:a3:c7:c7:8a:c4:d4:a7:88:5f:28:4c:3e:85:d3:1c:f2: 2d:6c:38:73:d9:6a:f8:4e:11:17:1b:f3:a3:cd:14:09:19:f8: 4b:c9:4b:5a:ca:e3:6b:37:c9:e2:64:ea:cd:08:ee:7d:de:a5: f6:68:ba:ba:0f:31:e4:57:76:62:ac:ba:0f:53:7d:9b:75:c3: c4:c4:63:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjUwNDI1MDI1OTU3WhcNMjUwNTAyMDI1OTU3WjAYMRYwFAYD VQQDEw02ODBhZmFhZC02M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WDgzWfQJm8+d0ALenvrXiVZVN330TWMdsFfZ9cfb2jKpgx/mHXAZqr+Hmf7 G8itCHv54Of4I2G8u+oiM6B9dsswFl33QIi1DrdLrxKFXZL9sJ1yOycldtoz+DT1 BRouJu0gUK/vmf2nvY/ggmUCAXrqCzVn7P2SnJu6b6vTgJMF8feasmw3EgghLQtp F9ljmd3/U/mNY53TkNspuoNgEwEHt0vnHWuMdAQ3aACLGgagOCBb2bkujO4esIsl EJqW0W6H4DkGhfe3/ew/H8q8wv3NfUKLaVQzA8/hg2ov/mSLLXrELXEp/KwCosUs sQv0h946PsZb00DcRwrMZetW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCi48Uj vyIxJW2wHkjWYslS0p2CMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHFR915uAaQDWFCbsFyC1Jww4voJ9rU5iEkTpYfE98Ggncj/ZJNq/E +j7aqxOX0NSI+Lxjg2c5FiS86/12gbvb7unFHrc21WzN5zPV11TmwrEqsQCTYdvm uGsoJ5lnE4Ups5jnQEjBCeG9ygVnGoYot01AA661zJEMH3VT036fGh5OhQ1x6IC2 EDs0nMxh49tTDY2r0gtOyYx9882GhIM5yyKIT4OhcpqkttLLKZtl5qwmOsPTfKPH x4rE1KeIXyhMPoXTHPItbDhz2Wr4ThEXG/OjzRQJGfhLyUtayuNrN8niZOrNCO59 3qX2aLq6DzHkV3ZirLoPU32bdcPExGM2 -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:38 2025 by rpki-client