$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: T95rf9E2aIpNE0+VGzevEVRkBcGQ75weCGThSINCyRk= Subject key identifier: A6:C4:7F:2F:11:E4:30:6B:EF:0C:A4:72:14:6B:4F:44:20:8A:B3:FC Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: F6 Signing time: Fri 25 Apr 2025 04:20:28 +0000 Manifest this update: Fri 25 Apr 2025 04:20:28 +0000 Manifest next update: Fri 02 May 2025 04:20:28 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: gyWsXJEIJDG23F1dx7oHCSGWC6dxng1q9Pjeb+IBRRw=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Apr 25 04:20:28 2025 GMT Not After : May 2 04:20:28 2025 GMT Subject: CN=680b0d8c-fb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:0a:c3:42:54:10:fd:2c:8e:5b:71:c3:e5: d8:73:71:fa:d0:f6:95:87:67:2b:c5:63:9d:a9:65: 1b:69:18:d1:58:2d:af:98:ef:c8:ab:ab:f2:ad:45: fc:e3:64:c2:89:db:20:4c:6e:0a:6f:f8:01:b9:e6: 04:eb:26:c6:aa:23:6b:64:0e:2f:4e:7d:62:8a:35: ee:e9:c8:8c:6d:33:9d:78:c6:e4:9a:c3:7e:5d:f5: c7:c0:77:04:53:46:25:d7:ab:ec:9e:73:f3:d5:6f: 92:72:45:75:96:6c:49:47:da:7b:66:07:95:c5:2e: 20:10:4f:7c:af:3e:c0:1b:8e:13:8f:09:d3:cd:6b: 13:92:85:78:c7:7c:20:c8:77:5d:d4:5f:34:00:5c: b1:06:dc:27:74:63:73:4a:8f:96:ae:ab:f3:3f:a4: 4b:91:4c:bc:30:42:51:c8:98:25:51:2e:e8:6d:51: 7c:b5:52:f5:0f:60:cf:cd:fd:c0:2f:52:18:3a:f4: 57:9c:25:cb:2c:81:7d:2b:9a:82:96:a0:92:34:31: 24:7c:31:a9:b6:39:22:f0:14:d0:52:7a:a5:91:e0: 60:dd:f0:9d:e8:d8:1f:83:3a:cf:39:df:1b:3c:08: 83:05:24:fc:cd:00:75:48:0e:70:a4:7f:c9:d9:f6: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:7F:2F:11:E4:30:6B:EF:0C:A4:72:14:6B:4F:44:20:8A:B3:FC X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:2a:99:ab:d0:89:63:64:dc:d7:06:75:ba:68:56:4d:01:d7: 2a:de:8e:d1:6e:89:9a:1a:50:ee:5d:0f:9f:48:52:41:3a:81: 6d:23:4b:ab:9b:bd:a7:e8:e8:85:a0:43:9a:6c:70:55:2a:34: 94:a9:35:7b:d7:0e:3c:9e:91:c8:3d:f1:49:28:b6:b0:d2:6a: 51:b0:22:67:b0:56:32:57:e5:7f:50:21:ec:5d:89:47:01:f3: 53:a2:97:c6:16:53:ca:d6:1b:bc:4d:57:fb:89:8e:ab:52:22: b4:49:ca:df:9d:11:35:c9:52:c7:b8:fe:e6:07:74:f7:c7:00: c6:2d:ef:85:30:a0:36:f5:02:89:1f:af:cd:d3:a9:e1:5b:e7: 39:16:dd:e3:e2:c8:69:e8:8b:18:b8:6d:3d:dc:c6:b2:bb:6b: fc:55:d7:63:3c:f4:01:99:bc:3b:f5:2b:2c:24:fc:12:60:1b: dd:eb:b7:0a:a4:24:d8:74:97:0f:39:d6:d9:09:9e:6a:6c:75: b1:90:4e:f4:56:04:1b:d7:7e:fb:57:aa:38:61:63:f7:29:be: 97:21:4f:0c:3a:24:a9:3b:fd:82:ea:a7:1f:75:f2:d4:6e:3d: 90:aa:56:c7:3e:61:26:e9:aa:ad:15:6e:9d:ca:cd:c3:ce:e7: e5:85:b3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUwNDI1MDQyMDI4WhcNMjUwNTAyMDQyMDI4WjAYMRYwFAYD VQQDEw02ODBiMGQ4Yy1mYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JIKw0JUEP0sjltxw+XYc3H60PaVh2crxWOdqWUbaRjRWC2vmO/Iq6vyrUX8 42TCidsgTG4Kb/gBueYE6ybGqiNrZA4vTn1iijXu6ciMbTOdeMbkmsN+XfXHwHcE U0Yl16vsnnPz1W+SckV1lmxJR9p7ZgeVxS4gEE98rz7AG44TjwnTzWsTkoV4x3wg yHdd1F80AFyxBtwndGNzSo+WrqvzP6RLkUy8MEJRyJglUS7obVF8tVL1D2DPzf3A L1IYOvRXnCXLLIF9K5qClqCSNDEkfDGptjki8BTQUnqlkeBg3fCd6NgfgzrPOd8b PAiDBST8zQB1SA5wpH/J2fYE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbEfy8R 5DBr7wykchRrT0QgirP8MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWKpmr0IljZNzXBnW6aFZNAdcq3o7RbomaGlDuXQ+fSFJBOoFtI0ur m72n6OiFoEOabHBVKjSUqTV71w48npHIPfFJKLaw0mpRsCJnsFYyV+V/UCHsXYlH AfNTopfGFlPK1hu8TVf7iY6rUiK0ScrfnRE1yVLHuP7mB3T3xwDGLe+FMKA29QKJ H6/N06nhW+c5Ft3j4shp6IsYuG093Mayu2v8VddjPPQBmbw79SssJPwSYBvd67cK pCTYdJcPOdbZCZ5qbHWxkE70VgQb1377V6o4YWP3Kb6XIU8MOiSpO/2C6qcfdfLU bj2QqlbHPmEm6aqtFW6dys3DzuflhbPo -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:58 2025 by rpki-client