$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json) Hash identifier: nK5ZTdANXcR0UhjweMli4OVEhlz7iTTLL8PuZ8fXoNI= Subject key identifier: 2C:D5:37:57:9D:92:37:31:64:DA:FE:A9:D9:D5:D6:63:40:6B:F4:0F Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft Manifest number: 0C23 Signing time: Mon 16 Jun 2025 18:37:13 +0000 Manifest this update: Mon 16 Jun 2025 18:37:12 +0000 Manifest next update: Mon 23 Jun 2025 18:37:12 +0000 Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: SldBxgBESYyXDsCLqh9d00H6KPXypeFZoPgOGuQPLkM=) 2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: Cjl2Pm+bCZ4QUEFMoQa/76zBHtfWqc+OXt4GAiijv7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: Jun 16 18:37:12 2025 GMT Not After : Jun 23 18:37:12 2025 GMT Subject: CN=68506459-36fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:5f:94:dc:e5:a7:76:ff:69:23:17:4a:3e: 19:0a:07:1a:22:54:f9:a7:76:12:ef:0c:ab:d2:2e: ba:38:b0:fa:5f:b6:9b:4d:82:70:ac:8b:e9:89:2c: e3:1f:d0:16:e9:7e:22:04:4a:70:27:a7:dd:87:ef: 7a:bd:bb:09:a9:43:33:aa:12:11:31:9f:6e:47:28: a0:f3:64:93:04:ff:64:2c:25:db:93:9b:cd:35:c9: 5a:20:c4:ff:8b:54:a1:e5:48:9d:7a:e8:00:4d:6a: df:d4:91:97:2d:28:30:e4:bb:72:00:de:0b:ca:48: db:da:0a:0e:48:06:12:0f:59:ac:02:44:24:a3:20: f7:b2:00:3e:20:ac:35:f5:da:fe:29:4b:97:41:ee: 86:28:69:2b:c6:2d:aa:37:4d:b3:f6:25:1d:e2:c3: df:98:4b:3b:3c:6c:7e:ae:4e:7c:2e:7e:b2:c8:0f: d9:aa:be:bc:36:fe:69:75:01:cf:e2:0e:d0:82:47: 30:c1:c0:9d:0a:31:ef:f3:e7:8d:20:1a:10:a5:c2: 41:62:a8:c5:9f:3c:39:13:51:85:05:5f:93:a9:14: a8:1e:4d:ce:06:8e:69:19:76:61:68:cc:ef:33:6a: b0:63:bc:2e:6a:74:62:cd:f8:1b:49:0a:f1:91:fc: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:37:57:9D:92:37:31:64:DA:FE:A9:D9:D5:D6:63:40:6B:F4:0F X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c2:4e:14:e2:97:13:29:22:cc:90:dd:5a:68:48:14:70:27: 73:a5:71:26:75:f2:d9:80:4c:28:8f:00:14:54:30:fc:c9:8e: 51:71:a1:13:fa:80:8c:f0:cb:f1:b0:52:53:01:52:49:1e:e8: be:e8:96:bb:56:b5:ca:2d:64:2a:c9:27:26:16:5e:37:e9:91: 15:18:a9:4c:16:b0:e5:e9:81:6b:96:5f:d8:b9:92:97:f6:58: ad:01:d8:f6:3a:e8:aa:44:9b:9f:59:6e:1c:a0:e5:af:64:27: 39:a2:30:e5:46:da:6e:38:55:2d:f4:5e:6c:f9:e2:01:c0:2c: 3d:a2:49:4f:a8:02:96:e4:7d:73:e5:8c:f0:d9:36:cd:08:b9: 0e:6c:bc:0e:0b:f7:81:f0:be:53:3d:5a:80:5b:7d:60:ba:bf: f8:e5:dc:3d:bd:c0:1d:85:b3:8d:e3:62:af:96:da:a7:38:42: 7d:e2:a4:67:31:b3:bf:59:93:3b:94:a0:94:cb:32:a1:ba:8f: 7b:b8:4a:19:9f:eb:13:a1:bc:12:0f:5a:60:04:05:4f:42:85: 6f:ab:67:d8:a0:44:c2:d6:d9:dd:56:df:90:82:98:b3:53:be: b3:a4:89:81:a7:59:c4:51:fd:08:95:69:fd:4a:2e:88:b8:98: ff:bc:24:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUwNjE2MTgzNzEyWhcNMjUwNjIzMTgzNzEyWjAYMRYwFAYD VQQDEw02ODUwNjQ1OS0zNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwxflNzlp3b/aSMXSj4ZCgcaIlT5p3YS7wyr0i66OLD6X7abTYJwrIvpiSzj H9AW6X4iBEpwJ6fdh+96vbsJqUMzqhIRMZ9uRyig82STBP9kLCXbk5vNNclaIMT/ i1Sh5UideugATWrf1JGXLSgw5LtyAN4Lykjb2goOSAYSD1msAkQkoyD3sgA+IKw1 9dr+KUuXQe6GKGkrxi2qN02z9iUd4sPfmEs7PGx+rk58Ln6yyA/Zqr68Nv5pdQHP 4g7QgkcwwcCdCjHv8+eNIBoQpcJBYqjFnzw5E1GFBV+TqRSoHk3OBo5pGXZhaMzv M2qwY7wuanRizfgbSQrxkfy1eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzVN1ed kjcxZNr+qdnV1mNAa/QPMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApwk4U4pcTKSLMkN1aaEgUcCdzpXEmdfLZgEwojwAUVDD8yY5RcaET +oCM8MvxsFJTAVJJHui+6Ja7VrXKLWQqyScmFl436ZEVGKlMFrDl6YFrll/YuZKX 9litAdj2OuiqRJufWW4coOWvZCc5ojDlRtpuOFUt9F5s+eIBwCw9oklPqAKW5H1z 5Yzw2TbNCLkObLwOC/eB8L5TPVqAW31gur/45dw9vcAdhbON42KvltqnOEJ94qRn MbO/WZM7lKCUyzKhuo97uEoZn+sTobwSD1pgBAVPQoVvq2fYoETC1tndVt+Qgpiz U76zpImBp1nEUf0IlWn9Si6IuJj/vCRK -----END CERTIFICATE-----Generated at Tue Jun 17 11:45:54 2025 by rpki-client