$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: /0se9rmeZQMXDcTyDFxludMTWc3IqcRLqU080RYx3Uc= Subject key identifier: 41:FA:43:F9:84:4B:58:21:C1:EA:9C:87:F2:C8:35:19:6B:51:5F:A0 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0A21 Signing time: Thu 24 Apr 2025 19:41:57 +0000 Manifest this update: Thu 24 Apr 2025 19:41:57 +0000 Manifest next update: Thu 01 May 2025 19:41:57 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: DvntELKjHOtnHqmZnWm8CYMF25VGrIBkajXAjK7llK0=) 2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: Apr 24 19:41:57 2025 GMT Not After : May 1 19:41:57 2025 GMT Subject: CN=680a9405-6a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:df:ad:51:34:3c:b4:4d:1e:c5:82:99:0a: f1:df:45:a6:a8:ae:50:b9:e9:64:9b:eb:8d:b5:d4: cf:e5:19:db:e5:ee:a2:b8:c9:49:a6:dd:22:f1:66: 2f:aa:8c:52:fa:b0:91:b2:72:21:a5:c2:e5:a6:a4: b5:e1:31:87:6e:d4:ad:5c:fa:34:48:54:4c:f7:93: 8b:35:da:94:2d:2b:68:5f:38:e1:00:c5:30:56:83: bc:0a:95:33:bc:1a:86:85:ce:84:9b:13:fc:6a:be: 8b:8a:75:61:74:6c:28:9f:12:a9:a5:eb:7f:07:d9: 92:36:38:b0:86:e9:09:d5:12:d4:60:5f:bf:a3:4d: 2f:b6:58:5d:81:a6:e6:eb:1c:25:07:15:82:a9:f1: d8:ab:5b:40:a7:f1:c5:e8:da:2c:e1:04:c5:f5:24: e2:2d:4e:54:5b:f5:2b:55:3e:db:09:b6:33:19:05: 71:69:f3:b5:e9:8e:ee:6e:3c:19:e4:8a:9e:19:2c: f5:47:68:5e:a3:7d:f9:17:95:17:61:de:75:80:01: 27:a1:e9:e4:c8:26:ab:1b:fc:72:12:51:ac:70:b6: 25:4d:23:42:84:63:60:30:e5:e4:78:e6:21:2b:51: 99:53:41:05:61:f8:4d:b9:eb:61:22:75:d1:8a:67: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:43:F9:84:4B:58:21:C1:EA:9C:87:F2:C8:35:19:6B:51:5F:A0 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8c:2a:6f:73:9b:e1:53:5d:8a:59:d0:34:79:72:00:fe:14: 2a:79:6f:09:8b:08:a4:1b:e9:f5:fd:f9:9d:d6:51:2a:65:5a: ab:eb:0f:3a:77:48:d7:50:d2:78:2b:97:62:01:47:01:31:ef: 5c:e0:0c:76:55:3d:a2:c2:ec:a2:6b:80:d0:92:ed:ad:cf:24: a2:21:9c:c1:f3:7f:64:27:41:09:39:1e:34:3b:06:03:a3:1c: cb:80:9e:46:2d:14:f6:dc:4f:32:cc:c6:bb:39:57:71:6c:70: e7:d7:b9:4a:b3:b9:71:51:a8:f2:1e:d3:16:dc:13:11:ff:23: 96:8a:74:47:e4:82:98:fb:45:20:82:57:fc:5f:5b:1f:30:63: ce:2f:9e:f3:7b:21:be:8b:2b:af:04:50:de:d8:96:c7:02:10: 08:b2:58:7e:9b:e7:63:09:eb:f7:ea:59:07:73:40:06:70:0c: c6:32:91:5c:7b:eb:b4:1a:89:bb:af:ad:b3:94:5e:d3:b2:f5: 30:95:d8:00:a4:00:d4:be:ed:ec:40:a1:45:d3:c9:bf:77:c7: cf:d5:6a:b1:9a:78:04:78:ca:f0:20:a3:17:0f:a3:cd:ea:28: e2:ec:d1:2a:01:42:51:55:a2:cd:1b:1f:f7:69:4b:f8:b4:15: 46:03:4f:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjUwNDI0MTk0MTU3WhcNMjUwNTAxMTk0MTU3WjAYMRYwFAYD VQQDEw02ODBhOTQwNS02YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lDfrVE0PLRNHsWCmQrx30WmqK5Quelkm+uNtdTP5Rnb5e6iuMlJpt0i8WYv qoxS+rCRsnIhpcLlpqS14TGHbtStXPo0SFRM95OLNdqULStoXzjhAMUwVoO8CpUz vBqGhc6EmxP8ar6LinVhdGwonxKppet/B9mSNjiwhukJ1RLUYF+/o00vtlhdgabm 6xwlBxWCqfHYq1tAp/HF6Nos4QTF9STiLU5UW/UrVT7bCbYzGQVxafO16Y7ubjwZ 5IqeGSz1R2heo335F5UXYd51gAEnoenkyCarG/xyElGscLYlTSNChGNgMOXkeOYh K1GZU0EFYfhNuethInXRimeedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH6Q/mE S1ghweqch/LINRlrUV+gMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgjCpvc5vhU12KWdA0eXIA/hQqeW8JiwikG+n1/fmd1lEqZVqr6w86 d0jXUNJ4K5diAUcBMe9c4Ax2VT2iwuyia4DQku2tzySiIZzB839kJ0EJOR40OwYD oxzLgJ5GLRT23E8yzMa7OVdxbHDn17lKs7lxUajyHtMW3BMR/yOWinRH5IKY+0Ug glf8X1sfMGPOL57zeyG+iyuvBFDe2JbHAhAIslh+m+djCev36lkHc0AGcAzGMpFc e+u0Gom7r62zlF7TsvUwldgApADUvu3sQKFF08m/d8fP1WqxmngEeMrwIKMXD6PN 6iji7NEqAUJRVaLNGx/3aUv4tBVGA096 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:26 2025 by rpki-client