$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: 3R2CUCPlo5Z284otEaK49zHA0peQs/F1eRLfFB1wwrc= Subject key identifier: C5:F3:86:7A:8E:5C:0E:F5:43:AA:09:39:EE:BC:FB:CE:42:C7:A9:78 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: 0174 Signing time: Fri 25 Apr 2025 02:55:13 +0000 Manifest this update: Fri 25 Apr 2025 02:55:12 +0000 Manifest next update: Fri 02 May 2025 02:55:12 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: LdLnxvl+BFubsQNPHjIfnaDP0acDu9ZO+mHAoEdozx0=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: LOMVrGcpqBkYXud2B+9+0rUhLbtH2Vrj6cMlX58bV+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Apr 25 02:55:12 2025 GMT Not After : May 2 02:55:12 2025 GMT Subject: CN=680af990-d391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:be:14:12:20:e2:c5:b4:cc:a0:53:3d:2c: aa:da:16:0b:b5:c0:e4:3c:37:f6:33:65:33:86:46: 5e:6f:0d:30:31:00:a2:38:98:07:4e:10:39:9d:d0: 9c:d7:fa:11:50:6b:37:62:a7:22:7d:ae:27:47:4e: 5e:4c:2e:ab:23:e9:de:6b:91:52:98:44:cd:0c:b5: 2e:ad:25:69:0f:fb:ec:7f:29:ff:86:ec:83:b8:fb: f5:16:70:07:3b:a1:3b:f5:d5:54:b9:b8:46:dd:b0: 02:99:c2:8c:2e:b0:83:a5:87:cc:1a:0a:0e:f0:68: a1:e2:14:f7:9d:16:19:4c:49:bb:f4:d0:8c:56:cd: e5:bd:82:40:f3:66:4b:87:13:15:37:b0:90:d7:0f: 8d:0c:ee:72:0a:d9:bf:81:9f:1c:62:bb:7c:4b:34: 1f:67:b0:64:07:96:e3:fe:7b:bf:20:88:cb:cf:0b: 05:be:be:e6:73:b2:f3:f5:af:80:e7:09:e6:c7:10: 3d:8f:af:3e:7b:e0:7f:11:1b:46:ec:73:0a:56:93: 25:cc:94:03:12:70:bd:30:9e:b5:ba:85:11:e1:dd: d9:99:54:b0:fc:9d:22:bf:07:d7:d9:d9:16:27:42: dd:3c:7d:c9:40:9a:ff:02:e2:21:8e:93:c0:19:8a: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:86:7A:8E:5C:0E:F5:43:AA:09:39:EE:BC:FB:CE:42:C7:A9:78 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:ba:43:cd:7e:3a:43:6a:0f:9f:21:27:e4:37:33:1d:f3: 33:72:13:65:fb:a8:a8:6d:9c:18:29:03:51:cd:1c:be:7f:04: d4:1e:f7:dd:fc:03:0a:69:f9:e3:95:d3:6c:73:f5:f7:70:04: a9:a6:af:a5:01:65:df:31:78:03:a6:17:c3:10:c6:8d:b0:fd: c5:00:36:97:b0:b4:e3:06:1e:c5:5c:66:68:1e:f3:ae:78:35: 68:6b:3d:8e:a1:ab:23:ac:46:cc:b7:26:5f:84:0b:77:44:f4: a6:38:93:54:e1:53:1d:42:8a:ad:43:5e:bd:e8:05:38:df:8a: d9:e0:ec:8d:2b:3b:62:1d:e3:7f:a7:f5:50:32:50:d9:b1:33: 15:4f:c6:de:49:6b:d5:49:e3:24:82:fb:74:c8:d0:e2:5e:af: 96:a8:56:6d:25:4f:79:ec:e2:25:76:0e:e4:64:32:5d:8a:f8: 60:a6:ad:e6:76:68:65:be:e4:a9:a7:ea:b7:18:d4:61:ad:06: a7:03:b0:65:df:2e:03:ce:96:6b:b2:7b:c0:ce:28:55:68:7d: 2f:d5:87:c3:c7:75:4b:dd:03:2f:95:90:6d:4b:67:e4:0a:43: 8f:8c:81:ad:55:fe:7e:81:14:6a:c1:85:77:12:bc:57:ab:88: 84:b3:64:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjUwNDI1MDI1NTEyWhcNMjUwNTAyMDI1NTEyWjAYMRYwFAYD VQQDEw02ODBhZjk5MC1kMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnS+FBIg4sW0zKBTPSyq2hYLtcDkPDf2M2UzhkZebw0wMQCiOJgHThA5ndCc 1/oRUGs3Yqcifa4nR05eTC6rI+nea5FSmETNDLUurSVpD/vsfyn/huyDuPv1FnAH O6E79dVUubhG3bACmcKMLrCDpYfMGgoO8Gih4hT3nRYZTEm79NCMVs3lvYJA82ZL hxMVN7CQ1w+NDO5yCtm/gZ8cYrt8SzQfZ7BkB5bj/nu/IIjLzwsFvr7mc7Lz9a+A 5wnmxxA9j68+e+B/ERtG7HMKVpMlzJQDEnC9MJ61uoUR4d3ZmVSw/J0ivwfX2dkW J0LdPH3JQJr/AuIhjpPAGYrdDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXzhnqO XA71Q6oJOe68+85Cx6l4MB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkgLpDzX46Q2oPnyEn5DczHfMzchNl+6iobZwYKQNRzRy+fwTUHvfd /AMKafnjldNsc/X3cASppq+lAWXfMXgDphfDEMaNsP3FADaXsLTjBh7FXGZoHvOu eDVoaz2OoasjrEbMtyZfhAt3RPSmOJNU4VMdQoqtQ1696AU434rZ4OyNKztiHeN/ p/VQMlDZsTMVT8beSWvVSeMkgvt0yNDiXq+WqFZtJU957OIldg7kZDJdivhgpq3m dmhlvuSpp+q3GNRhrQanA7Bl3y4DzpZrsnvAzihVaH0v1YfDx3VL3QMvlZBtS2fk CkOPjIGtVf5+gRRqwYV3ErxXq4iEs2T+ -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:58 2025 by rpki-client