$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json) Hash identifier: GnaHbBxQk8wURqe3qSsLt2WG8dCX5BJiAnqAWIY24SY= Subject key identifier: A8:F4:52:69:AD:D2:F3:58:B4:FF:09:94:53:85:7E:07:0C:50:EE:CA Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft Manifest number: 052A Signing time: Thu 12 Jun 2025 23:07:27 +0000 Manifest this update: Thu 12 Jun 2025 23:07:27 +0000 Manifest next update: Thu 19 Jun 2025 23:07:26 +0000 Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: IA3WWR8qtETNRQS0TmbwQJiBCnvLwWokUqwbY5rMDbU=) 2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: GyNWMA5uS2CM++CZD9BiRxHkePo3mscOl1IpeulPgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Validity Not Before: Jun 12 23:07:27 2025 GMT Not After : Jun 19 23:07:26 2025 GMT Subject: CN=684b5daf-8e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:5f:2d:92:24:8f:47:ad:5d:5c:7f:f5:37: f9:c9:d6:d8:e3:03:c1:f2:fa:3e:ae:b0:73:c7:56: 41:2b:e5:d4:f4:42:3b:45:a5:05:21:82:d0:b4:8a: 71:36:83:af:80:89:15:6f:8c:d2:9f:70:f5:e5:7f: a0:17:0a:b5:0f:eb:46:ae:94:4d:e2:22:3e:0e:f9: ea:4e:a7:38:0f:3c:2c:fa:73:b3:6f:a0:b4:5b:45: 70:b9:33:50:6e:b0:bd:78:b1:ac:59:d4:9b:51:83: f7:5d:f7:0f:36:20:dc:d4:4a:3d:5b:7a:5b:ff:41: b5:c9:49:20:96:3b:ef:26:b1:8d:65:7c:ea:11:7c: aa:86:98:28:03:72:67:6f:8a:68:b9:d1:f0:b1:fc: 4e:9d:4f:fa:5e:1a:ff:a6:6a:20:01:f2:7d:58:de: 24:f7:de:53:d0:ea:98:5f:02:af:0d:5b:e0:32:0d: e8:a5:d4:40:1b:d6:ab:33:2e:ea:81:46:75:d1:20: 99:9e:2f:8f:14:9b:be:ed:88:dc:fc:5b:02:e0:6a: ba:16:73:0e:3a:cc:a7:fd:b5:d1:04:9a:dc:bb:51: dd:37:6e:fa:7c:b1:37:90:23:f2:8f:2d:c2:08:d0: 31:bc:03:69:e0:6f:45:ef:44:58:04:22:b0:e3:8b: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F4:52:69:AD:D2:F3:58:B4:FF:09:94:53:85:7E:07:0C:50:EE:CA X509v3 Authority Key Identifier: keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:35:56:fb:ac:a2:03:cd:12:87:ee:40:0a:3a:99:4f:2f:b7: 6f:fd:1d:b8:5a:dd:f3:b2:15:c3:74:52:a3:83:91:91:4a:71: 61:72:4b:a9:0b:a0:b1:ea:54:09:d6:22:23:7e:6d:9a:cd:38: fd:8e:f8:b4:4d:7e:8e:6b:e1:a7:7d:97:23:dd:f0:63:5f:58: 5d:2f:46:61:82:2a:17:27:97:86:70:a5:4a:9b:10:63:19:53: 41:42:54:42:73:33:27:40:b2:58:b9:49:db:91:b6:06:7a:79: a0:c1:99:17:5f:bc:84:73:c2:38:2a:e5:1f:6e:dc:e8:ad:12: 97:0d:77:12:9f:e0:79:69:54:c1:57:14:4e:d8:c0:87:0b:35: 24:7c:ea:a3:00:00:0c:7e:a0:c8:38:37:90:46:fb:ec:6b:24: af:d8:d0:0f:00:1f:19:e2:1a:d2:95:53:c7:78:ca:3a:1a:1a: 70:4b:32:52:38:b0:8a:ad:bc:ac:12:f5:41:50:c5:0e:79:89: 0b:89:07:80:4e:d0:4d:3d:a8:43:46:51:57:78:b1:9b:f8:0e: 58:09:8d:d2:69:f1:9e:ed:7a:8d:32:2d:9f:8a:aa:57:57:8d: 0d:87:e1:a4:ce:bd:df:9d:76:ac:d4:c0:9d:86:89:e8:91:92: c3:de:2e:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC MDZEQTg2M0QwHhcNMjUwNjEyMjMwNzI3WhcNMjUwNjE5MjMwNzI2WjAYMRYwFAYD VQQDEw02ODRiNWRhZi04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2tfLZIkj0etXVx/9Tf5ydbY4wPB8vo+rrBzx1ZBK+XU9EI7RaUFIYLQtIpx NoOvgIkVb4zSn3D15X+gFwq1D+tGrpRN4iI+DvnqTqc4Dzws+nOzb6C0W0VwuTNQ brC9eLGsWdSbUYP3XfcPNiDc1Eo9W3pb/0G1yUkgljvvJrGNZXzqEXyqhpgoA3Jn b4poudHwsfxOnU/6Xhr/pmogAfJ9WN4k995T0OqYXwKvDVvgMg3opdRAG9arMy7q gUZ10SCZni+PFJu+7Yjc/FsC4Gq6FnMOOsyn/bXRBJrcu1HdN276fLE3kCPyjy3C CNAxvANp4G9F70RYBCKw44tyoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj0Ummt 0vNYtP8JlFOFfgcMUO7KMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx YTFhU3l2a3FKVlN3YmFoajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqNVb7rKIDzRKH7kAKOplPL7dv/R24Wt3zshXDdFKjg5GRSnFhckup C6Cx6lQJ1iIjfm2azTj9jvi0TX6Oa+GnfZcj3fBjX1hdL0ZhgioXJ5eGcKVKmxBj GVNBQlRCczMnQLJYuUnbkbYGenmgwZkXX7yEc8I4KuUfbtzorRKXDXcSn+B5aVTB VxRO2MCHCzUkfOqjAAAMfqDIODeQRvvsaySv2NAPAB8Z4hrSlVPHeMo6GhpwSzJS OLCKrbysEvVBUMUOeYkLiQeATtBNPahDRlFXeLGb+A5YCY3SafGe7XqNMi2fiqpX V40Nh+Gkzr3fnXas1MCdhonokZLD3i4Y -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:37 2025 by rpki-client