$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json) Hash identifier: mrIgioUihN/rMOEzb5tgKFK814mRJgy0ho92OAU8B9Y= Subject key identifier: 12:18:7F:B5:65:E8:E8:08:27:89:80:32:0F:AC:B1:03:FB:81:73:9A Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft Manifest number: 0512 Signing time: Thu 24 Apr 2025 23:22:33 +0000 Manifest this update: Thu 24 Apr 2025 23:22:32 +0000 Manifest next update: Thu 01 May 2025 23:22:32 +0000 Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: 30vhGEdmVJsDIy9YF6HJZaGbTgA+3smJY5MMf5KKJ20=) 2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: GyNWMA5uS2CM++CZD9BiRxHkePo3mscOl1IpeulPgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Validity Not Before: Apr 24 23:22:32 2025 GMT Not After : May 1 23:22:32 2025 GMT Subject: CN=680ac7b9-5a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:e9:e8:b6:0c:e3:5e:b3:74:c2:21:76:82: 39:b1:f0:89:df:2e:42:f9:7f:63:57:2e:94:bd:f9: 9d:9c:fb:b2:d1:33:ca:96:0d:3a:ee:d3:1d:99:a4: 3a:f5:de:d3:b5:60:fe:3f:04:7e:98:a7:7f:40:cd: 56:13:c2:5f:18:d8:52:01:9e:21:05:73:0c:21:f3: b0:0b:ce:7f:e8:1a:6f:44:f6:53:40:ba:ef:56:93: 1f:c1:49:77:28:5e:e4:82:50:1f:8c:8f:d5:4f:b2: 16:44:d9:35:29:79:ba:32:5e:43:e0:c5:60:5a:08: f5:ac:ac:f4:b3:62:d6:b8:ec:df:e3:dd:40:63:ba: 68:1b:8b:5d:04:57:8c:a2:f4:b8:b0:ff:ed:e6:e7: 19:68:9a:80:fb:ae:8e:11:0b:27:07:8e:25:cb:7c: fb:5f:33:03:8e:f3:f0:ce:5b:ad:64:42:1f:ac:57: 2c:0b:7e:fd:cf:70:07:83:e0:a4:41:de:ea:2a:93: 0e:dc:11:f4:20:37:72:ed:b7:64:05:ec:cf:7d:d9: e1:dd:92:08:90:a3:dc:35:5b:c5:ec:78:e9:84:ce: 61:19:08:ac:59:78:2d:91:89:3d:45:24:9b:a2:eb: c7:5d:7a:e5:ef:2f:f2:29:9b:e9:c6:f6:82:2a:ce: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:7F:B5:65:E8:E8:08:27:89:80:32:0F:AC:B1:03:FB:81:73:9A X509v3 Authority Key Identifier: keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:af:72:65:a5:eb:5a:d3:e3:8c:e0:ba:af:d4:69:6b:cb: d9:7e:28:5d:56:4e:3d:9c:72:4c:d2:72:04:bf:a8:a3:d9:10: cb:ff:30:cf:ce:3c:3a:49:eb:4c:a8:77:26:08:b7:23:25:74: 22:cb:ea:cd:05:5d:e8:60:95:31:a6:61:cf:ec:61:ce:92:c7: d5:04:a0:3b:59:3d:a7:2b:cf:65:de:17:96:33:00:0e:bf:e4: 5c:4a:46:cf:64:a9:3c:60:41:3e:cb:08:8c:76:90:72:e5:5d: 8b:22:d6:bc:49:cd:bb:c7:30:f3:14:38:37:1e:78:56:7e:dc: ff:78:b3:91:27:03:7f:d8:e5:1f:56:d8:c9:18:c0:95:ec:34: 70:eb:33:76:3f:be:81:21:ef:18:4b:23:a4:78:df:3f:14:18: 3f:2d:61:0d:2c:cf:4d:cf:1f:eb:1e:d6:1e:79:d6:75:85:75: ac:e3:b8:2e:8a:af:cd:63:f5:06:48:12:c1:70:ae:4d:0e:6b: 67:dd:cb:05:7f:01:f1:24:73:61:d4:95:84:60:b2:d5:8a:dd: 08:88:ac:8f:87:21:ca:07:6e:66:31:c0:a7:b9:47:2f:7b:a6: c6:b3:76:06:f8:b4:4b:e9:35:75:4f:89:47:ca:76:8d:16:8a: 3d:df:15:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC MDZEQTg2M0QwHhcNMjUwNDI0MjMyMjMyWhcNMjUwNTAxMjMyMjMyWjAYMRYwFAYD VQQDEw02ODBhYzdiOS01YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoDp6LYM416zdMIhdoI5sfCJ3y5C+X9jVy6UvfmdnPuy0TPKlg067tMdmaQ6 9d7TtWD+PwR+mKd/QM1WE8JfGNhSAZ4hBXMMIfOwC85/6BpvRPZTQLrvVpMfwUl3 KF7kglAfjI/VT7IWRNk1KXm6Ml5D4MVgWgj1rKz0s2LWuOzf491AY7poG4tdBFeM ovS4sP/t5ucZaJqA+66OEQsnB44ly3z7XzMDjvPwzlutZEIfrFcsC379z3AHg+Ck Qd7qKpMO3BH0IDdy7bdkBezPfdnh3ZIIkKPcNVvF7HjphM5hGQisWXgtkYk9RSSb ouvHXXrl7y/yKZvpxvaCKs4y/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIYf7Vl 6OgIJ4mAMg+ssQP7gXOaMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx YTFhU3l2a3FKVlN3YmFoajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9q9yZaXrWtPjjOC6r9Rpa8vZfihdVk49nHJM0nIEv6ij2RDL/zDP zjw6SetMqHcmCLcjJXQiy+rNBV3oYJUxpmHP7GHOksfVBKA7WT2nK89l3heWMwAO v+RcSkbPZKk8YEE+ywiMdpBy5V2LIta8Sc27xzDzFDg3HnhWftz/eLORJwN/2OUf VtjJGMCV7DRw6zN2P76BIe8YSyOkeN8/FBg/LWENLM9Nzx/rHtYeedZ1hXWs47gu iq/NY/UGSBLBcK5NDmtn3csFfwHxJHNh1JWEYLLVit0IiKyPhyHKB25mMcCnuUcv e6bGs3YG+LRL6TV1T4lHynaNFoo93xX8 -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:44 2025 by rpki-client