$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json) Hash identifier: Z1I5Dde8MROMrxiUNxx1ialBtfmnv/HYY1jsCxHC+bU= Subject key identifier: DC:24:DE:C3:B2:31:61:A7:AC:01:E4:C3:46:11:29:D8:F0:5E:60:36 Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft Manifest number: 0C07 Signing time: Thu 24 Apr 2025 18:40:14 +0000 Manifest this update: Thu 24 Apr 2025 18:40:13 +0000 Manifest next update: Thu 01 May 2025 18:40:13 +0000 Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: JOYfd2T2E0Bjn8bBMA+hdBb/u1GCT06l/c/dqikVj6Q=) 2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: +1WLQRV04Ed2oW4QFm7/7ippf8dDjkisALZjf/MJ6Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: Apr 24 18:40:13 2025 GMT Not After : May 1 18:40:13 2025 GMT Subject: CN=680a858e-e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:c6:4a:22:58:d5:a4:7c:9e:e8:70:b3:3f: 28:a9:6e:1c:15:23:00:5e:69:1a:29:12:c0:18:8a: 23:e4:fd:de:3b:64:d9:6b:4b:34:bb:8a:1c:42:f8: 0a:85:8b:ce:55:5d:f4:6e:81:d8:1a:a1:bb:23:4c: 88:40:6f:2d:a8:03:2b:5d:03:cd:6d:98:6b:e0:a7: b9:91:d0:05:9c:f1:7d:52:5f:83:62:47:21:91:61: 65:99:51:8d:de:f2:f2:42:2f:7d:d8:ad:7b:8e:5e: 5c:1b:8f:28:36:0d:6a:d1:d7:f6:46:b6:f5:65:49: 36:37:fe:e3:e8:a2:d1:0b:39:5b:ab:cd:88:8f:35: d7:f4:4d:40:10:c7:a2:b8:37:ee:42:0f:4c:9e:df: f6:73:11:96:1a:1e:f2:82:54:af:25:2d:cd:44:e3: 88:75:ee:78:f9:1f:16:43:e3:88:e3:0f:f8:66:6d: 9a:18:41:20:63:75:3e:3d:9a:0c:0b:d4:92:63:71: 26:d0:9a:29:08:cd:2e:c6:1c:1e:bc:5a:13:e2:e3: 48:d7:b2:11:6b:bd:6d:74:9e:a2:9c:4a:03:9f:3d: c0:94:65:dc:0f:f2:f3:14:c4:ea:e2:ea:9a:21:e5: 60:0f:9c:18:b1:8f:d3:9a:65:2e:29:32:ed:8d:ca: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:DE:C3:B2:31:61:A7:AC:01:E4:C3:46:11:29:D8:F0:5E:60:36 X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:e9:30:26:f3:6a:8e:93:06:df:1a:f8:1e:c1:ee:53:9d: e3:1e:2c:95:9d:b4:3f:46:e2:49:fd:df:ba:e1:39:a1:40:d8: 5b:77:49:f8:bf:99:be:38:ce:e6:d0:c0:7c:59:aa:5c:2b:c0: 3a:f7:09:00:81:83:a9:a9:75:92:29:05:73:b1:f4:5c:3d:1b: d4:c8:6b:77:cb:6a:e0:1a:46:ec:45:99:d6:25:26:70:be:5a: 5b:11:c5:f5:d2:46:2e:a5:2c:1c:a4:4b:66:45:36:59:c4:e5: aa:74:f4:00:43:9d:8d:83:ee:4b:a7:6a:be:95:4b:6a:a5:6c: 6c:3b:8e:d8:9d:1d:6e:7f:b4:48:ff:7d:d4:9d:a7:4c:53:28: 89:d5:ed:d5:4a:ec:e5:89:74:3f:b3:70:38:37:99:e4:e8:bb: 80:0a:d9:c5:67:ad:62:a8:69:27:16:15:4c:6f:ef:92:b6:73: 4c:33:3a:09:96:1a:1c:ba:02:5b:63:5c:92:5e:dd:45:a0:97: 47:67:a1:18:25:b2:f2:96:45:64:b7:87:5d:30:ce:53:1e:04: 2b:ce:72:c4:c0:f0:f2:c4:13:af:60:b2:85:6a:9b:63:e6:17: 25:5b:97:be:78:f1:68:59:65:3e:2e:e9:b2:40:fe:3d:41:25: 1c:38:ab:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUwNDI0MTg0MDEzWhcNMjUwNTAxMTg0MDEzWjAYMRYwFAYD VQQDEw02ODBhODU4ZS1lNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJbGSiJY1aR8nuhwsz8oqW4cFSMAXmkaKRLAGIoj5P3eO2TZa0s0u4ocQvgK hYvOVV30boHYGqG7I0yIQG8tqAMrXQPNbZhr4Ke5kdAFnPF9Ul+DYkchkWFlmVGN 3vLyQi992K17jl5cG48oNg1q0df2Rrb1ZUk2N/7j6KLRCzlbq82IjzXX9E1AEMei uDfuQg9Mnt/2cxGWGh7yglSvJS3NROOIde54+R8WQ+OI4w/4Zm2aGEEgY3U+PZoM C9SSY3Em0JopCM0uxhwevFoT4uNI17IRa71tdJ6inEoDnz3AlGXcD/LzFMTq4uqa IeVgD5wYsY/TmmUuKTLtjcqXcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwk3sOy MWGnrAHkw0YRKdjwXmA2MB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi8OkwJvNqjpMG3xr4HsHuU53jHiyVnbQ/RuJJ/d+64TmhQNhbd0n4 v5m+OM7m0MB8WapcK8A69wkAgYOpqXWSKQVzsfRcPRvUyGt3y2rgGkbsRZnWJSZw vlpbEcX10kYupSwcpEtmRTZZxOWqdPQAQ52Ng+5Lp2q+lUtqpWxsO47YnR1uf7RI /33UnadMUyiJ1e3VSuzliXQ/s3A4N5nk6LuACtnFZ61iqGknFhVMb++StnNMMzoJ lhocugJbY1ySXt1FoJdHZ6EYJbLylkVkt4ddMM5THgQrznLEwPDyxBOvYLKFaptj 5hclW5e+ePFoWWU+LumyQP49QSUcOKsh -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:38 2025 by rpki-client