$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: 8xQcuGR832ybrIJ7UbKP3fnTOi7sOh/V+gGNFyBLJeE= Subject key identifier: 17:DA:5F:00:8A:3F:15:F8:93:51:FC:A5:1C:DA:8E:91:8D:6B:AF:BD Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:19:59 +0000 Manifest this update: Fri 25 Apr 2025 06:19:59 +0000 Manifest next update: Fri 02 May 2025 06:19:59 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: 7oYSkNXxA8fajonB9jKSYBnnNXGMCe3fRDK3uLsEID0=) 2: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=) 3: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Apr 25 06:19:59 2025 GMT Not After : May 2 06:19:59 2025 GMT Subject: CN=680b298f-b931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:1e:72:0f:02:87:5c:94:9e:50:b0:6b:f6: 85:d0:78:3d:e6:b4:f4:5a:9c:0f:b6:a5:ff:b4:23: a8:a2:d2:2d:d6:7f:30:4d:5d:78:5c:77:aa:ac:8c: 50:a5:c0:ac:d5:19:f1:45:d7:4a:b8:bb:64:c5:05: 44:11:6a:79:91:2a:c7:8a:24:d4:2c:1e:68:d9:34: 7d:c1:53:ce:c7:12:ee:25:ee:43:70:c8:08:a2:36: 03:e0:aa:c6:be:b1:44:e9:0b:5d:7a:2c:40:6b:27: 3c:c9:c9:b8:eb:74:6c:c9:49:24:d9:2c:ae:23:ae: 0e:d8:01:26:4a:89:0a:6c:dc:df:37:5f:17:43:42: f2:c0:1d:4a:1e:27:c8:86:a8:cc:65:e4:28:3d:da: 36:51:81:50:67:50:0f:68:07:42:e7:f3:2d:03:97: c8:18:0e:c0:45:ed:5d:5f:ae:23:19:0c:49:e1:f7: 0a:95:aa:f8:13:91:2e:71:46:a4:f0:a1:07:79:2e: 7e:28:92:0a:42:ec:7c:9c:e6:b9:33:65:eb:9a:b6: 24:ac:6f:82:d6:82:58:14:e7:f9:68:38:6f:fb:69: 85:9c:85:ea:37:4e:51:ce:a4:8f:27:5e:4b:70:09: bf:f5:28:26:b2:37:80:b7:33:dc:ee:c4:0b:35:39: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:5F:00:8A:3F:15:F8:93:51:FC:A5:1C:DA:8E:91:8D:6B:AF:BD X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f1:21:ff:43:b7:91:2f:1b:1b:fd:48:d2:1c:67:5d:38:c2: 4f:fd:7d:b4:90:75:be:ec:76:ea:c3:33:51:6b:30:1f:4b:e4: 99:2e:65:a7:84:93:14:81:41:e7:50:f7:57:76:80:58:3b:00: ae:2b:e1:22:de:4c:e8:c3:37:90:c8:73:b5:65:16:ca:25:01: 1d:46:b3:65:25:48:5a:5c:1d:6e:d4:61:81:9a:c4:27:f3:7d: 60:0e:72:0c:f7:85:a6:1d:00:52:42:5e:ca:97:a2:90:3d:8c: ec:47:73:2d:67:a0:70:21:6a:aa:7f:66:36:ff:d6:a4:8e:ff: 8b:e9:3e:6a:fd:e5:fa:4c:02:b2:fe:09:94:d4:1c:87:2b:d0: 2d:31:ab:b1:8a:8d:a1:b1:ee:70:0c:83:34:92:42:b6:6b:2d: 12:5b:2e:aa:96:3e:86:51:6e:af:62:5e:32:d1:cb:81:c2:14: 91:bd:96:1c:f8:b9:b6:b4:a0:2a:5a:2f:61:49:d4:66:20:2d: fc:e9:b1:f2:a0:ba:75:83:b0:21:2a:be:39:2b:3a:8f:cd:bd: ce:80:8a:3b:1f:80:bf:8b:50:cc:f3:01:65:1b:4b:67:46:d3: 72:2d:35:77:5d:b8:ef:98:fa:a9:60:6e:d5:8c:a0:9e:38:4d: f4:f8:53:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx QjgyMUU1NDAeFw0yNTA0MjUwNjE5NTlaFw0yNTA1MDIwNjE5NTlaMBgxFjAUBgNV BAMTDTY4MGIyOThmLWI5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0Zx5yDwKHXJSeULBr9oXQeD3mtPRanA+2pf+0I6ii0i3WfzBNXXhcd6qsjFCl wKzVGfFF10q4u2TFBUQRanmRKseKJNQsHmjZNH3BU87HEu4l7kNwyAiiNgPgqsa+ sUTpC116LEBrJzzJybjrdGzJSSTZLK4jrg7YASZKiQps3N83XxdDQvLAHUoeJ8iG qMxl5Cg92jZRgVBnUA9oB0Ln8y0Dl8gYDsBF7V1friMZDEnh9wqVqvgTkS5xRqTw oQd5Ln4okgpC7Hyc5rkzZeuatiSsb4LWglgU5/loOG/7aYWcheo3TlHOpI8nXktw Cb/1KCayN4C3M9zuxAs1Oc4DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9pfAIo/ FfiTUfylHNqOkY1rr70wHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODlCLzFCQ0Q0M0I2QjExMTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcw eUhvckprLWRiQ3h1Q0hsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfxIf9Dt5EvGxv9SNIcZ104wk/9fbSQdb7sdurDM1FrMB9L5JkuZaeE kxSBQedQ91d2gFg7AK4r4SLeTOjDN5DIc7VlFsolAR1Gs2UlSFpcHW7UYYGaxCfz fWAOcgz3haYdAFJCXsqXopA9jOxHcy1noHAhaqp/Zjb/1qSO/4vpPmr95fpMArL+ CZTUHIcr0C0xq7GKjaGx7nAMgzSSQrZrLRJbLqqWPoZRbq9iXjLRy4HCFJG9lhz4 uba0oCpaL2FJ1GYgLfzpsfKgunWDsCEqvjkrOo/Nvc6AijsfgL+LUMzzAWUbS2dG 03ItNXdduO+Y+qlgbtWMoJ44TfT4U+o= -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:51 2025 by rpki-client