$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: G4iojxgKEdZYbjNPEzfo/5jL6P76LSyuQQqrOrwSbOg= Subject key identifier: E6:19:E7:7F:49:F7:45:C5:C3:D7:EB:E1:76:F6:B7:40:E6:2B:E7:C9 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 0298 Signing time: Fri 25 Apr 2025 01:18:40 +0000 Manifest this update: Fri 25 Apr 2025 01:18:40 +0000 Manifest next update: Fri 02 May 2025 01:18:40 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: tPKCutU653Ucu2pUdl8aFQAjellcx/ec4B3dfHDhFZ8=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Apr 25 01:18:40 2025 GMT Not After : May 2 01:18:40 2025 GMT Subject: CN=680ae2f0-a740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:b8:3c:09:4d:2f:03:c9:24:f3:70:5b:5c: bd:07:ee:18:fc:ee:11:1f:77:2c:e9:a1:58:a3:c3: 72:df:3f:f9:6d:f6:27:fe:33:03:19:47:82:de:3c: 14:58:08:1f:7b:b2:3f:62:75:65:05:85:60:68:64: 52:4a:18:ec:32:d4:78:e6:08:f2:a0:c8:d7:94:bb: 27:c9:d3:34:2f:a9:5f:5a:f7:98:3c:e2:5d:83:af: 50:f9:58:50:16:b4:9f:4a:72:8d:a2:85:14:9d:28: 4b:69:66:b3:86:9e:91:b4:6f:12:65:48:34:b4:32: 00:eb:f7:c9:f4:05:dd:74:98:f8:08:e0:5e:19:c9: 1b:90:c3:ba:c6:7f:88:4d:e4:9b:1c:2d:55:ee:ee: 24:f2:27:9e:6a:8f:8e:96:48:8d:48:1c:69:ea:75: a7:15:b5:5c:22:51:4c:12:76:63:2d:88:d7:a3:94: 82:cd:f0:54:dd:05:39:03:28:72:3b:f2:6a:9a:de: 13:cd:97:59:66:87:ab:86:e4:48:30:49:11:de:1a: 7e:08:84:a5:ba:04:be:33:24:e5:d1:0f:12:0c:6e: 5c:f8:be:99:c1:85:b5:67:a0:45:b6:68:b4:ff:70: e2:51:6a:e4:0f:72:49:09:0a:10:c7:73:f0:6c:3c: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:19:E7:7F:49:F7:45:C5:C3:D7:EB:E1:76:F6:B7:40:E6:2B:E7:C9 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e3:81:49:a6:e0:5c:ec:2b:fd:74:63:6c:2f:91:6e:59:6b: 54:85:da:a7:3b:4c:9f:6c:63:f8:22:14:c3:1c:5c:6c:b8:6b: 1c:37:a7:63:df:b3:0a:81:bc:0e:5d:c6:b3:74:4a:1e:a5:45: 15:bc:bc:d8:0f:17:bd:e6:63:8c:a4:c1:e7:19:c2:20:b1:7f: eb:70:a0:ac:4c:05:f4:00:84:9e:f7:55:26:3a:91:53:29:2a: e8:63:06:38:a2:23:7e:f4:e6:dd:dd:1d:b1:30:d0:2b:1c:5d: b9:9d:df:a6:5d:b7:52:63:6e:5b:b1:f3:8f:24:c9:72:b0:17: 1b:5a:d8:3f:6b:14:ec:7c:0c:cf:cf:45:bc:bf:9a:09:81:cf: 7a:9a:92:6c:0a:ad:74:d2:c9:bf:c2:a2:db:5b:b5:9d:ea:8b: 13:11:ee:2f:29:7d:a4:c1:f6:2f:d6:e1:c8:a3:9b:50:25:2b: 67:62:8b:ff:1e:cb:03:eb:ae:e1:f2:05:9a:77:32:d0:b5:13: ac:07:95:0b:b9:22:45:b6:29:d7:75:e2:31:46:1a:a1:9b:44: 58:87:a5:b4:ec:82:58:af:4b:8d:ca:1c:34:40:67:c4:4d:57: f7:c4:5c:de:9e:50:61:f2:1d:23:9a:53:b3:e4:c1:14:f2:0c: ad:4a:2f:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwNDI1MDExODQwWhcNMjUwNTAyMDExODQwWjAYMRYwFAYD VQQDEw02ODBhZTJmMC1hNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspe4PAlNLwPJJPNwW1y9B+4Y/O4RH3cs6aFYo8Ny3z/5bfYn/jMDGUeC3jwU WAgfe7I/YnVlBYVgaGRSShjsMtR45gjyoMjXlLsnydM0L6lfWveYPOJdg69Q+VhQ FrSfSnKNooUUnShLaWazhp6RtG8SZUg0tDIA6/fJ9AXddJj4COBeGckbkMO6xn+I TeSbHC1V7u4k8ieeao+OlkiNSBxp6nWnFbVcIlFMEnZjLYjXo5SCzfBU3QU5Ayhy O/Jqmt4TzZdZZoerhuRIMEkR3hp+CISlugS+MyTl0Q8SDG5c+L6ZwYW1Z6BFtmi0 /3DiUWrkD3JJCQoQx3PwbDwSdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYZ539J 90XFw9fr4Xb2t0DmK+fJMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi44FJpuBc7Cv9dGNsL5FuWWtUhdqnO0yfbGP4IhTDHFxsuGscN6dj 37MKgbwOXcazdEoepUUVvLzYDxe95mOMpMHnGcIgsX/rcKCsTAX0AISe91UmOpFT KSroYwY4oiN+9Obd3R2xMNArHF25nd+mXbdSY25bsfOPJMlysBcbWtg/axTsfAzP z0W8v5oJgc96mpJsCq100sm/wqLbW7Wd6osTEe4vKX2kwfYv1uHIo5tQJStnYov/ HssD667h8gWadzLQtROsB5ULuSJFtinXdeIxRhqhm0RYh6W07IJYr0uNyhw0QGfE TVf3xFzenlBh8h0jmlOz5MEU8gytSi9I -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:48 2025 by rpki-client