$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: XXiahZ1tYWdNqlApM+RvGztz/fjUFEL3fHaZOFHwMSo= Subject key identifier: F1:90:EB:0A:3C:D7:C4:A9:F9:C6:A4:00:5E:38:1F:BA:90:86:4F:91 Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 06E0 Signing time: Thu 24 Apr 2025 21:49:21 +0000 Manifest this update: Thu 24 Apr 2025 21:49:21 +0000 Manifest next update: Thu 01 May 2025 21:49:21 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: c37DcMgWP1pdSbFKAj/gLK/Uh0JYTO2Q2rty3tSWkFU=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: Apr 24 21:49:21 2025 GMT Not After : May 1 21:49:21 2025 GMT Subject: CN=680ab1e1-e7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:31:92:fb:47:fd:7f:19:c6:92:2a:eb:82: 0c:4f:a7:e5:3f:e2:0f:0d:0a:a4:fa:94:07:f8:c7: 4f:97:96:8d:1b:1d:f9:0d:1b:b7:74:37:62:01:31: 5e:35:8a:19:82:f7:3e:d2:e9:ca:07:b7:31:b3:25: b1:51:b7:21:bf:16:7c:bb:a0:af:b9:dc:c5:64:40: f0:53:d3:51:94:fb:b2:5b:04:a2:f7:8f:32:5c:bc: c3:2b:80:16:e7:85:2d:ed:a7:26:da:63:b2:8c:ee: d3:bc:17:e9:e4:cd:ad:6c:08:fe:aa:50:9d:71:8f: 9b:97:96:d3:98:b5:f4:e5:9b:e0:60:8d:76:7f:62: f8:a4:c2:3b:8f:35:ce:11:c3:db:26:bc:c6:ad:f2: a7:0b:13:33:ff:b8:20:ef:c4:87:ac:0b:20:4e:d9: ce:1c:20:ce:47:db:de:6c:89:33:a9:55:54:b7:24: c7:7f:fc:bd:99:5f:7d:1b:ec:43:96:3f:12:54:a3: 94:7c:3a:f4:f4:3c:c1:b1:1a:6d:36:be:ba:fd:02: 15:6f:c5:5f:16:01:6c:fa:a8:b6:4f:6a:9c:02:63: e0:d8:61:b9:36:34:4f:e4:68:c7:b4:f4:54:78:6b: 87:98:86:ef:c3:8d:e7:7b:b8:d4:36:c2:b4:0e:8b: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:90:EB:0A:3C:D7:C4:A9:F9:C6:A4:00:5E:38:1F:BA:90:86:4F:91 X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:23:81:8f:15:5b:21:33:06:d3:20:87:be:fe:01:98:9e: 73:e2:04:30:d2:52:06:79:32:c6:42:14:d8:d7:4a:5f:26:02: 61:9d:1a:56:ad:b3:8d:ea:ab:a0:68:06:2c:73:2e:95:97:71: bd:26:e7:06:07:23:44:ee:9b:b7:2d:41:e2:26:5a:f8:37:40: 3a:21:52:48:b5:ee:5c:b2:d4:00:13:88:b7:a3:27:20:c2:91: 80:d2:3e:ee:47:fc:09:a7:af:34:e6:54:eb:a8:7e:19:d7:82: ed:28:bc:c3:ab:0e:2e:6c:b0:63:fe:68:e1:54:7e:ea:70:fa: e8:ee:0e:2c:dd:c9:ca:b9:57:03:a7:6e:cf:71:92:a6:93:76: b3:38:c4:5f:36:c0:05:07:d1:82:c5:ea:11:fb:52:8e:4b:b3: b6:87:a0:c7:7f:7c:e6:6f:f1:f4:b9:db:c4:b2:bd:7a:3c:04: a5:e4:f4:14:55:73:38:43:cd:20:b9:9d:05:8f:28:83:0a:85: 9d:bb:04:63:7b:c9:e4:36:1f:79:69:f2:61:80:52:39:6b:80: 11:d4:1c:d4:94:ac:b4:ba:1f:9b:d0:ed:9a:c8:eb:92:7b:46: ef:69:73:c5:c3:29:35:08:44:91:ab:bb:79:f1:05:7e:f2:c5: 4f:69:87:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjUwNDI0MjE0OTIxWhcNMjUwNTAxMjE0OTIxWjAYMRYwFAYD VQQDEw02ODBhYjFlMS1lN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gAxkvtH/X8ZxpIq64IMT6flP+IPDQqk+pQH+MdPl5aNGx35DRu3dDdiATFe NYoZgvc+0unKB7cxsyWxUbchvxZ8u6CvudzFZEDwU9NRlPuyWwSi948yXLzDK4AW 54Ut7acm2mOyjO7TvBfp5M2tbAj+qlCdcY+bl5bTmLX05ZvgYI12f2L4pMI7jzXO EcPbJrzGrfKnCxMz/7gg78SHrAsgTtnOHCDOR9vebIkzqVVUtyTHf/y9mV99G+xD lj8SVKOUfDr09DzBsRptNr66/QIVb8VfFgFs+qi2T2qcAmPg2GG5NjRP5GjHtPRU eGuHmIbvw43ne7jUNsK0DouVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGQ6wo8 18Sp+cakAF44H7qQhk+RMB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfBSOBjxVbITMG0yCHvv4BmJ5z4gQw0lIGeTLGQhTY10pfJgJhnRpW rbON6qugaAYscy6Vl3G9JucGByNE7pu3LUHiJlr4N0A6IVJIte5cstQAE4i3oycg wpGA0j7uR/wJp6805lTrqH4Z14LtKLzDqw4ubLBj/mjhVH7qcPro7g4s3cnKuVcD p27PcZKmk3azOMRfNsAFB9GCxeoR+1KOS7O2h6DHf3zmb/H0udvEsr16PASl5PQU VXM4Q80guZ0FjyiDCoWduwRje8nkNh95afJhgFI5a4AR1BzUlKy0uh+b0O2ayOuS e0bvaXPFwyk1CESRq7t58QV+8sVPaYfa -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:36 2025 by rpki-client