$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: ulcNWVZXukJ+hDL7MC0rEQYi9qhmJs2AW5Fnt/EhLrU= Subject key identifier: 33:E0:BA:2E:B2:24:38:D3:CC:E9:76:61:F2:E5:8A:CC:D4:18:81:BD Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 09C5 Signing time: Thu 24 Apr 2025 19:52:39 +0000 Manifest this update: Thu 24 Apr 2025 19:52:39 +0000 Manifest next update: Thu 01 May 2025 19:52:39 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: 1DbYENx81petGCEIZ8cZsfrE9/yTTXw04NxCLpmWGNY=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: Apr 24 19:52:39 2025 GMT Not After : May 1 19:52:39 2025 GMT Subject: CN=680a9687-d5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:d9:3c:0a:83:c8:14:47:8d:56:d1:b5:58: ba:2d:c8:2e:75:f4:9e:3f:7f:d0:b5:86:0b:d4:f0: 36:44:4c:08:4e:bd:ab:dc:b7:f6:f3:fb:66:37:08: 25:68:09:8d:01:9f:aa:35:c4:a9:78:ca:1b:0b:3a: 57:c5:9d:98:94:c8:f0:28:cd:a2:36:9e:c1:f5:4d: f2:6e:da:34:e5:c3:dc:f0:42:38:b8:2d:a1:62:7e: 2a:e1:34:ee:57:da:bb:37:f0:0c:a3:fe:47:b0:2e: 87:89:27:99:72:a5:3c:77:7b:a0:ca:f9:02:1d:b8: 9f:d5:87:80:d6:d9:d0:c7:aa:30:06:1c:23:df:b4: f6:0d:ff:38:99:31:47:41:8f:32:4f:ce:f9:9c:bf: 41:57:84:15:8c:e5:d0:fd:01:1e:22:d5:07:33:1d: f1:94:bb:22:4d:93:45:1c:bf:a7:3f:8f:41:4d:88: 2c:38:3e:10:e3:ce:4e:38:48:d1:85:4f:15:20:81: 15:63:36:66:f7:60:a7:2f:70:f6:e7:02:af:32:f8: ab:b8:65:26:da:a8:68:28:db:df:47:62:21:df:95: c5:4a:12:6a:e3:cc:f3:3d:f5:a7:ff:3a:2e:19:95: 4e:2c:d7:1e:fc:8f:87:86:a8:2c:86:af:72:9f:a3: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E0:BA:2E:B2:24:38:D3:CC:E9:76:61:F2:E5:8A:CC:D4:18:81:BD X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:47:82:82:cf:3f:a2:b6:36:fa:78:2e:d6:f9:38:26:8b: 1d:34:27:e7:8e:97:fa:e4:dd:ab:06:a9:40:cb:00:5c:b8:bd: 65:e0:4a:92:70:d6:85:d7:5d:2e:a9:c1:04:bc:9e:8e:57:06: 7e:16:55:0e:65:e2:30:ac:fd:5b:72:bd:9f:75:d1:ec:cc:47: 0b:12:91:eb:c5:da:74:39:c5:b0:2d:2d:c8:e0:27:89:67:b9: fd:62:29:0f:92:b0:c8:66:c4:32:68:53:60:9d:10:21:78:57: ed:8c:2c:09:e1:58:20:f4:d3:11:bf:02:11:19:f0:4c:d0:01: d8:ba:2b:b9:27:aa:c1:91:c2:a3:e6:e7:06:25:f0:10:ee:6b: 1e:70:dc:91:5b:d1:6f:d8:ff:85:3f:06:1f:4f:c4:a6:dd:5b: 61:75:cf:f7:87:d4:57:6e:99:c2:65:6e:05:55:52:c7:da:ff: b3:c8:ce:19:0e:d3:8c:85:82:6d:f7:1c:20:14:cd:85:67:96: 8b:75:dd:ad:60:cf:50:d0:eb:fa:2c:b7:3f:0b:d8:44:75:5d: b9:58:37:8f:ea:93:bc:8b:e6:28:42:df:5a:fa:48:50:a8:69: 86:68:31:2a:9e:f0:05:74:e7:9f:9f:8c:67:95:8f:f1:0f:f4: 07:27:b9:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUwNDI0MTk1MjM5WhcNMjUwNTAxMTk1MjM5WjAYMRYwFAYD VQQDEw02ODBhOTY4Ny1kNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7jZPAqDyBRHjVbRtVi6LcgudfSeP3/QtYYL1PA2REwITr2r3Lf28/tmNwgl aAmNAZ+qNcSpeMobCzpXxZ2YlMjwKM2iNp7B9U3ybto05cPc8EI4uC2hYn4q4TTu V9q7N/AMo/5HsC6HiSeZcqU8d3ugyvkCHbif1YeA1tnQx6owBhwj37T2Df84mTFH QY8yT875nL9BV4QVjOXQ/QEeItUHMx3xlLsiTZNFHL+nP49BTYgsOD4Q485OOEjR hU8VIIEVYzZm92CnL3D25wKvMviruGUm2qhoKNvfR2Ih35XFShJq48zzPfWn/zou GZVOLNce/I+Hhqgshq9yn6NCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPgui6y JDjTzOl2YfLliszUGIG9MB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd4EeCgs8/orY2+ngu1vk4JosdNCfnjpf65N2rBqlAywBcuL1l4EqS cNaF110uqcEEvJ6OVwZ+FlUOZeIwrP1bcr2fddHszEcLEpHrxdp0OcWwLS3I4CeJ Z7n9YikPkrDIZsQyaFNgnRAheFftjCwJ4Vgg9NMRvwIRGfBM0AHYuiu5J6rBkcKj 5ucGJfAQ7msecNyRW9Fv2P+FPwYfT8Sm3Vthdc/3h9RXbpnCZW4FVVLH2v+zyM4Z DtOMhYJt9xwgFM2FZ5aLdd2tYM9Q0Ov6LLc/C9hEdV25WDeP6pO8i+YoQt9a+khQ qGmGaDEqnvAFdOefn4xnlY/xD/QHJ7ma -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:05 2025 by rpki-client