$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft File: PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json) Hash identifier: 3JGqJbkISO5Fv+Voea5e8WjdZjGXJHR9KgV5nNnDdyg= Subject key identifier: 3D:EF:E1:82:68:C6:82:A4:59:EC:DA:9D:35:6C:A7:B8:E6:EB:17:03 Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 Certificate issuer: /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft Manifest number: 56 Signing time: Fri 25 Apr 2025 06:12:20 +0000 Manifest this update: Fri 25 Apr 2025 06:12:19 +0000 Manifest next update: Fri 02 May 2025 06:12:19 +0000 Files and hashes: 1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: 99YyU4o4IA5nr5din0ND3O2kQ5fKrd8xpeiH/jVxJp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Validity Not Before: Apr 25 06:12:19 2025 GMT Not After : May 2 06:12:19 2025 GMT Subject: CN=680b27c4-1202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:cb:ed:d0:6a:89:b4:7f:d8:16:c9:1b:0d: 9c:23:a2:c3:f1:bf:4f:c3:a6:2a:49:dc:cb:6e:c2: 80:8d:a5:ba:0a:f4:0e:cc:22:00:ed:b4:f7:62:c0: 9f:7b:6e:a6:88:ef:72:7e:75:61:c3:b6:da:e9:c3: 85:0b:58:28:b5:2e:b3:1a:9f:03:45:a9:78:97:c4: a3:a6:31:00:cc:c2:00:a7:85:a1:29:07:44:ee:54: a3:c2:2c:66:26:b3:37:f5:59:87:96:56:31:f8:7c: 7e:c4:b0:da:91:86:0a:b7:54:14:d4:a5:2a:80:5c: 85:e9:a1:ca:98:a6:68:cb:f8:22:8c:cb:4e:f1:2b: da:2c:bc:c1:bd:48:52:ec:92:48:9f:21:3d:8b:74: ea:ca:8a:c7:07:79:03:45:ff:14:18:3a:56:c8:de: b9:b7:c9:f4:eb:5d:0d:12:54:4a:2b:92:8f:0a:a6: 20:c2:36:48:c4:ce:5d:4a:ea:16:bc:a3:c1:d2:83: 5e:05:d3:26:8a:3f:98:a7:a4:0a:47:5c:de:cf:23: da:cb:ba:4a:10:5b:f8:28:7b:e7:5c:51:3a:19:87: 31:ce:f7:8a:6b:8b:3b:7b:40:43:57:13:50:b0:1d: ba:12:fb:9f:c2:71:5c:5f:4c:1a:5a:ea:ae:2c:de: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EF:E1:82:68:C6:82:A4:59:EC:DA:9D:35:6C:A7:B8:E6:EB:17:03 X509v3 Authority Key Identifier: keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:80:28:b4:bb:7d:d0:18:da:a3:0a:96:82:03:87:aa:06: 07:ee:4b:20:6d:a2:64:e5:22:ef:47:57:d0:34:3f:b4:64:df: 0b:e6:44:a9:4a:72:7b:b3:71:e0:39:86:8e:7d:d3:2b:a7:83: b4:9b:87:c3:99:42:55:c1:b5:c5:8a:7b:e2:50:aa:6e:c5:ea: c8:b8:2c:89:0d:82:45:b1:62:1b:ea:69:b7:64:2c:60:6e:67: 58:63:41:1c:6d:ce:be:ff:28:89:16:4e:f0:91:74:3e:ff:8d: c0:51:26:15:75:56:4f:f8:6a:65:c4:06:68:6c:1e:69:ea:a6: 83:0e:b5:ca:76:a8:b9:c0:63:c6:2e:9b:7a:42:f6:c4:e2:4c: c9:2b:df:8e:75:ac:2d:5a:48:f1:60:64:19:ff:ae:81:cc:f8: 71:2c:35:75:a5:15:eb:87:a2:83:43:86:f1:ca:f1:92:ff:ee: f9:53:dc:5d:75:83:ef:3f:9c:29:9d:36:4e:4a:7d:2d:87:c9: 0c:1f:73:0e:bf:8a:69:2d:88:fe:3a:2a:04:ca:80:19:d8:c7: 97:3b:f2:c6:ab:5a:d3:d8:a9:e8:0d:cc:9e:44:57:d2:54:00: b9:14:b5:a6:83:49:b1:ae:b5:5d:c8:90:f2:58:a0:be:d2:3d: 5d:37:e0:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoM0RFQThCMUJCODcyREQxMjZDQTY0N0NDMzc1QzIwNzYw MjQwQzM4NTAeFw0yNTA0MjUwNjEyMTlaFw0yNTA1MDIwNjEyMTlaMBgxFjAUBgNV BAMTDTY4MGIyN2M0LTEyMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb2Mvt0GqJtH/YFskbDZwjosPxv0/DpipJ3MtuwoCNpboK9A7MIgDttPdiwJ97 bqaI73J+dWHDttrpw4ULWCi1LrManwNFqXiXxKOmMQDMwgCnhaEpB0TuVKPCLGYm szf1WYeWVjH4fH7EsNqRhgq3VBTUpSqAXIXpocqYpmjL+CKMy07xK9osvMG9SFLs kkifIT2LdOrKiscHeQNF/xQYOlbI3rm3yfTrXQ0SVEorko8KpiDCNkjEzl1K6ha8 o8HSg14F0yaKP5inpApHXN7PI9rLukoQW/goe+dcUToZhzHO94prizt7QENXE1Cw HboS+5/CcVxfTBpa6q4s3o5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPe/hgmjG gqRZ7NqdNWynuObrFwMwHwYDVR0jBBgwFoAUPeqLG7hy3RJspkfMN1wgdgJAw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzM0OERFMUNFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JKc3BrZk1OMXdnZGdKQXc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGVxTEc3aHkzUkpzcGtmTU4xd2dkZ0pBdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JK c3BrZk1OMXdnZGdKQXc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNugCi0u33QGNqjCpaCA4eqBgfuSyBtomTlIu9HV9A0P7Rk3wvmRKlK cnuzceA5ho590yung7Sbh8OZQlXBtcWKe+JQqm7F6si4LIkNgkWxYhvqabdkLGBu Z1hjQRxtzr7/KIkWTvCRdD7/jcBRJhV1Vk/4amXEBmhsHmnqpoMOtcp2qLnAY8Yu m3pC9sTiTMkr3451rC1aSPFgZBn/roHM+HEsNXWlFeuHooNDhvHK8ZL/7vlT3F11 g+8/nCmdNk5KfS2HyQwfcw6/imktiP46KgTKgBnYx5c78sarWtPYqegNzJ5EV9JU ALkUtaaDSbGutV3IkPJYoL7SPV034E4= -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:54 2025 by rpki-client