$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: xSeV1xS+I1ggJkuz2UIa+R6Ny8yHGBveWTImU3FCDMY= Subject key identifier: F3:2E:C8:18:85:6E:97:17:8F:AA:88:AC:20:F6:8C:79:7F:02:96:1E Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 0380 Signing time: Fri 25 Apr 2025 00:37:28 +0000 Manifest this update: Fri 25 Apr 2025 00:37:28 +0000 Manifest next update: Fri 02 May 2025 00:37:28 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: xQNwk6jh45JPSSeUKi43WjA7SIuRmc4EbNIKjM9HLec=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Apr 25 00:37:28 2025 GMT Not After : May 2 00:37:28 2025 GMT Subject: CN=680ad948-c189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:47:18:2b:6f:3f:f3:92:5d:ce:7b:6a:50: 55:28:d0:90:f5:b1:2e:c0:ba:9e:5d:4e:61:84:db: 27:37:3f:a2:cd:3f:a8:1f:85:fc:2b:7c:0e:75:11: d1:d0:8c:ab:08:92:78:21:89:ff:da:50:c5:8d:af: 4b:d8:26:5a:a5:00:72:fb:35:7c:0e:cc:bb:67:b2: 32:ac:f6:e3:2e:99:eb:85:18:87:6b:be:f2:a8:89: 0c:92:e5:b6:c7:dc:6d:76:38:0e:ed:cd:6c:a4:c1: 1b:8c:c1:73:04:c3:aa:74:6d:9b:a1:53:cb:1c:5b: a5:8a:7c:1d:08:84:7a:ac:57:06:62:b8:b7:99:0d: b2:55:c1:13:0a:eb:4f:6e:dc:38:aa:37:9f:62:75: e4:86:37:e0:b9:1e:dd:75:ab:18:93:0a:58:0b:93: 43:ea:6b:b6:b2:19:8d:35:46:41:9c:b5:83:69:c1: 40:f2:60:c2:0c:47:ee:87:17:5f:ce:f5:db:9c:41: d9:03:56:8b:9a:43:4f:04:a3:dc:28:4b:b8:25:48: 84:f2:1b:99:3e:85:89:ba:c2:25:7e:ff:31:84:f6: 96:c0:e9:ba:20:b0:eb:11:ff:d2:ce:4b:57:90:24: 06:50:a3:e9:6f:6d:a6:2e:1a:82:f4:d9:f7:4c:00: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:C8:18:85:6E:97:17:8F:AA:88:AC:20:F6:8C:79:7F:02:96:1E X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:39:97:bb:3b:19:8d:a6:29:28:00:c5:77:12:ac:74:20:10: 57:af:ae:c1:e7:98:58:de:4f:f2:ee:dc:8a:4d:a6:6c:dc:12: d0:f9:86:db:65:6c:d2:6d:51:9e:a4:6b:41:43:23:8b:85:83: f2:c1:99:ab:37:93:d7:36:c0:70:04:42:84:70:dd:bf:58:af: 0d:47:b1:c5:61:12:af:4c:27:8a:d3:c8:f6:b8:42:58:8e:47: 2a:ce:4d:dc:28:1e:02:d3:0e:83:d3:82:b8:d2:24:a3:af:a5: 65:db:e7:c4:3e:b9:38:91:6d:5d:96:6f:42:48:a9:0e:ce:fd: 9e:96:25:3a:73:b5:38:54:7e:96:3b:49:e3:45:61:09:b3:9e: 4c:38:0a:f7:b6:9d:6c:64:b1:32:cc:31:f3:e5:05:ba:aa:b4: 1f:df:90:80:10:ed:6f:91:2e:3e:8e:a6:aa:2b:17:23:06:14: e3:45:cd:df:f8:c6:c5:2f:a7:b5:e2:23:1b:88:62:02:05:d6: 42:2e:6b:25:0a:5e:b0:19:d0:af:35:26:a9:25:64:19:67:23: 33:55:9d:c7:6e:5e:e1:e4:a3:dc:49:e4:3f:00:bf:23:0f:12: a6:a6:3d:7a:fc:ed:c3:b0:6e:77:a2:2b:41:f7:08:e2:52:e1: 5d:45:ea:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUwNDI1MDAzNzI4WhcNMjUwNTAyMDAzNzI4WjAYMRYwFAYD VQQDEw02ODBhZDk0OC1jMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmahHGCtvP/OSXc57alBVKNCQ9bEuwLqeXU5hhNsnNz+izT+oH4X8K3wOdRHR 0IyrCJJ4IYn/2lDFja9L2CZapQBy+zV8Dsy7Z7IyrPbjLpnrhRiHa77yqIkMkuW2 x9xtdjgO7c1spMEbjMFzBMOqdG2boVPLHFulinwdCIR6rFcGYri3mQ2yVcETCutP btw4qjefYnXkhjfguR7ddasYkwpYC5ND6mu2shmNNUZBnLWDacFA8mDCDEfuhxdf zvXbnEHZA1aLmkNPBKPcKEu4JUiE8huZPoWJusIlfv8xhPaWwOm6ILDrEf/SzktX kCQGUKPpb22mLhqC9Nn3TAC/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMuyBiF bpcXj6qIrCD2jHl/ApYeMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNOZe7OxmNpikoAMV3Eqx0IBBXr67B55hY3k/y7tyKTaZs3BLQ+Ybb ZWzSbVGepGtBQyOLhYPywZmrN5PXNsBwBEKEcN2/WK8NR7HFYRKvTCeK08j2uEJY jkcqzk3cKB4C0w6D04K40iSjr6Vl2+fEPrk4kW1dlm9CSKkOzv2eliU6c7U4VH6W O0njRWEJs55MOAr3tp1sZLEyzDHz5QW6qrQf35CAEO1vkS4+jqaqKxcjBhTjRc3f +MbFL6e14iMbiGICBdZCLmslCl6wGdCvNSapJWQZZyMzVZ3Hbl7h5KPcSeQ/AL8j DxKmpj16/O3DsG53oitB9wjiUuFdRepw -----END CERTIFICATE-----Generated at Sat Apr 26 05:37:11 2025 by rpki-client