$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: Ccx29YQeqo/PRRRnHDVyaImonlZ2yuYYiX64Mn//T34= Subject key identifier: BE:F1:D6:6B:2F:34:EB:87:5D:B9:2D:0E:CC:13:6A:5D:34:89:87:31 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 08F4 Signing time: Thu 24 Apr 2025 20:15:34 +0000 Manifest this update: Thu 24 Apr 2025 20:15:34 +0000 Manifest next update: Thu 01 May 2025 20:15:34 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: nSLuWIPDPWpYFn8L4Nym6dlfGGCnqV2M90oTlpNCY0I=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: g6ZF73udqOvaMk79CC0xL6laKl1ilnMa4mhmtzges9Y=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: GgE2GgTXjnlE63xFP6LVosemjRTE0pIIUFRg3E+lupM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Apr 24 20:15:34 2025 GMT Not After : May 1 20:15:34 2025 GMT Subject: CN=680a9be6-9bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:8e:60:cb:55:55:34:99:3c:87:c4:e6:71: 09:57:5b:94:c8:36:cf:25:5e:91:2f:2d:d0:d4:f0: 6e:04:90:b4:e2:6b:9c:a6:9b:87:cc:b5:d4:b3:30: 60:f8:3f:3f:ba:2e:8a:60:b4:71:74:f5:c0:b8:f6: 83:4f:32:1d:30:28:f9:6b:0b:19:d8:14:0f:88:8f: f4:14:99:15:ce:55:d6:9a:74:02:aa:e9:68:56:c3: 18:c2:e0:26:d6:4a:40:13:31:93:c5:e4:bf:08:34: 93:0b:d2:da:3f:6d:35:79:35:29:ad:5d:08:09:4b: 0d:b7:99:b1:d6:2a:56:3b:04:d4:63:db:45:b1:5b: f7:52:0b:f1:9d:d1:92:42:19:94:3b:8d:54:5c:be: c1:ea:50:68:7c:37:b2:ea:2f:f5:6b:e1:0d:a4:e0: 34:ea:45:6c:e3:5f:84:f5:6d:d2:02:6a:29:cf:d2: 5e:f8:b0:91:a4:b2:8c:61:8e:55:62:81:7e:c4:6d: 59:6d:f1:98:73:df:ce:d7:f9:fd:e8:18:74:99:bf: 31:dc:ad:af:81:10:6d:34:be:c9:87:83:64:e4:74: e8:60:d4:e1:b2:62:b3:58:e7:7b:9b:5d:47:4e:2a: de:a5:7a:8f:18:17:aa:f1:44:86:c1:6c:08:3b:29: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F1:D6:6B:2F:34:EB:87:5D:B9:2D:0E:CC:13:6A:5D:34:89:87:31 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6b:20:10:8d:f4:84:7f:ea:49:a2:b6:5f:fd:df:a6:1a:c6: f8:b6:60:37:84:1a:d7:02:00:9c:aa:33:20:29:3f:c3:93:e9: d4:69:72:6d:82:2f:3e:0b:7a:48:b2:b5:a8:f9:43:56:5e:c5: e3:fe:c0:b6:4d:75:00:40:85:93:b6:ec:b5:fb:c7:cf:37:21: 90:cf:6e:db:df:c8:1b:c2:f3:4f:92:2c:0e:70:c8:a3:cb:4d: 10:42:6a:6f:c2:f5:5b:ec:20:dd:46:16:37:04:d8:ea:05:7b: ba:59:d8:c9:e8:9d:11:bf:33:6f:2c:44:67:02:c4:ad:c0:c4: a8:50:e7:35:d4:0a:8d:ac:a2:aa:f4:96:f5:c1:56:9e:f5:ad: 1c:3d:46:7a:7f:36:81:5f:ef:82:06:2d:5d:68:a2:69:68:0a: a8:98:c7:87:99:d7:42:ab:86:bd:56:95:8f:05:1c:b5:48:38: 06:a9:04:ea:56:cd:0b:c2:0b:5c:ab:b9:07:85:4c:b4:cc:66: 73:17:2b:d5:44:f3:3c:1f:60:7f:2c:79:3b:63:cc:40:e8:0c: 7d:0f:e3:7d:c1:8b:1f:6d:23:8a:e1:4c:c2:ed:e8:16:d0:e3: 1c:96:09:29:a7:5a:02:4b:f0:db:8e:78:ba:27:43:0b:3a:1c: 3e:e8:fa:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUwNDI0MjAxNTM0WhcNMjUwNTAxMjAxNTM0WjAYMRYwFAYD VQQDEw02ODBhOWJlNi05YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG+OYMtVVTSZPIfE5nEJV1uUyDbPJV6RLy3Q1PBuBJC04mucppuHzLXUszBg +D8/ui6KYLRxdPXAuPaDTzIdMCj5awsZ2BQPiI/0FJkVzlXWmnQCquloVsMYwuAm 1kpAEzGTxeS/CDSTC9LaP201eTUprV0ICUsNt5mx1ipWOwTUY9tFsVv3UgvxndGS QhmUO41UXL7B6lBofDey6i/1a+ENpOA06kVs41+E9W3SAmopz9Je+LCRpLKMYY5V YoF+xG1ZbfGYc9/O1/n96Bh0mb8x3K2vgRBtNL7Jh4Nk5HToYNThsmKzWOd7m11H TirepXqPGBeq8USGwWwIOylBfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7x1msv NOuHXbktDswTal00iYcxMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFayAQjfSEf+pJorZf/d+mGsb4tmA3hBrXAgCcqjMgKT/Dk+nUaXJt gi8+C3pIsrWo+UNWXsXj/sC2TXUAQIWTtuy1+8fPNyGQz27b38gbwvNPkiwOcMij y00QQmpvwvVb7CDdRhY3BNjqBXu6WdjJ6J0RvzNvLERnAsStwMSoUOc11AqNrKKq 9Jb1wVae9a0cPUZ6fzaBX++CBi1daKJpaAqomMeHmddCq4a9VpWPBRy1SDgGqQTq Vs0Lwgtcq7kHhUy0zGZzFyvVRPM8H2B/LHk7Y8xA6Ax9D+N9wYsfbSOK4UzC7egW 0OMclgkpp1oCS/Dbjni6J0MLOhw+6PoF -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client