$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: ShJT+o/yKmoY680FUnhbfvUyFnpCxlABiBJUV9GyWPI= Subject key identifier: 57:61:AB:A4:6F:8F:B8:0C:3E:40:1A:9A:41:69:5F:D8:34:4A:26:0B Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 6A Signing time: Fri 25 Apr 2025 05:53:54 +0000 Manifest this update: Fri 25 Apr 2025 05:53:53 +0000 Manifest next update: Fri 02 May 2025 05:53:53 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: au65/ocm2hCqlcJMkKc4HI/oK2jeLrl4UM8whK7zgZM=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: ieIL/C2PsSajQ+T9x9NCeatLKXOzRnjbWOmpv4r/01g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Apr 25 05:53:53 2025 GMT Not After : May 2 05:53:53 2025 GMT Subject: CN=680b2372-a67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:37:c4:94:6b:84:87:f8:03:81:bb:fb:37: a6:6f:9a:f2:a4:4b:c5:b7:4c:11:0f:04:aa:61:08: ff:85:5f:92:f4:b2:5a:d0:60:3e:ae:88:28:f5:d5: 27:ec:09:c9:de:93:38:b5:f7:2d:9f:23:c0:04:b8: cb:1b:b6:e8:e3:11:a4:64:05:c4:05:5a:f6:c4:03: d6:d3:07:8e:39:ca:dc:56:2d:f8:0d:70:0d:f9:0c: 16:20:f0:24:60:33:25:c7:67:af:24:f4:8a:cc:35: a4:f0:01:fc:29:a3:98:13:85:3d:c5:38:a0:d2:c8: d3:44:ff:f3:60:f9:08:e3:8c:4b:a3:d1:ff:c9:ec: 5a:1a:20:10:54:d4:52:3c:ad:97:cc:92:5c:33:43: 4d:51:dc:05:06:82:e1:d3:89:88:0f:da:80:29:24: 94:5a:a6:55:7e:7c:4a:20:03:2b:8f:af:6d:2a:fd: eb:94:85:2f:ce:32:ab:46:22:53:48:22:35:3f:20: fd:65:a9:56:eb:90:9c:97:ac:d7:72:db:83:b2:f7: 45:9f:97:4e:7f:49:ae:2f:91:9d:9d:db:a8:15:6f: 43:ac:4a:0e:b2:e0:9b:ad:aa:0e:26:19:d4:0a:55: 0e:46:c0:43:41:6e:bf:b1:5e:66:76:9a:97:6c:21: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:61:AB:A4:6F:8F:B8:0C:3E:40:1A:9A:41:69:5F:D8:34:4A:26:0B X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:49:b2:6d:81:3a:b0:07:0a:6f:78:1f:77:0b:58:1e:16:12: 92:12:13:26:e0:d5:c4:0c:a0:5b:dd:00:c0:04:8a:6a:0f:5e: 38:57:c5:f7:32:db:9c:64:d3:79:e0:9e:96:8b:b9:a9:70:f4: 4e:0a:8b:0a:12:db:77:ba:b1:31:f1:86:bd:ce:05:2e:df:7a: 24:0a:46:0a:01:b0:4c:05:46:1c:ae:90:b2:fe:29:04:54:7d: 31:e9:ba:57:d1:3b:68:27:de:ce:7a:39:2e:96:4d:d0:cb:02: 29:4d:33:fa:ba:fd:b8:95:78:a0:55:5b:01:7d:6c:96:67:e6: 61:f7:23:2d:0a:51:c3:97:2f:69:eb:f2:18:42:e1:86:39:94: 8d:31:32:dc:29:24:02:23:61:63:fa:83:af:fb:a6:80:87:94: e0:c3:30:ad:2e:fe:e2:17:f0:27:39:f2:9b:56:e7:8e:88:aa: 64:27:4a:f3:1a:d3:d0:d5:52:13:c4:8c:fb:9b:8a:14:f7:83: 09:43:25:5f:aa:9b:07:f6:bd:38:ba:dd:75:8e:ec:9c:49:2b: f8:d8:22:02:1b:53:1e:89:9a:93:87:57:ef:01:36:b9:b9:c4: c5:f8:41:b5:23:a5:ce:88:6b:75:3a:97:ff:e3:b9:d9:01:37: f9:ae:e2:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEwQkE2MkE4NERB ODVGRTZFMDAeFw0yNTA0MjUwNTUzNTNaFw0yNTA1MDIwNTUzNTNaMBgxFjAUBgNV BAMTDTY4MGIyMzcyLWE2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9KTfElGuEh/gDgbv7N6ZvmvKkS8W3TBEPBKphCP+FX5L0slrQYD6uiCj11Sfs Ccnekzi19y2fI8AEuMsbtujjEaRkBcQFWvbEA9bTB445ytxWLfgNcA35DBYg8CRg MyXHZ68k9IrMNaTwAfwpo5gThT3FOKDSyNNE//Ng+QjjjEuj0f/J7FoaIBBU1FI8 rZfMklwzQ01R3AUGguHTiYgP2oApJJRaplV+fEogAyuPr20q/euUhS/OMqtGIlNI IjU/IP1lqVbrkJyXrNdy24Oy90Wfl05/Sa4vkZ2d26gVb0OsSg6y4Jutqg4mGdQK VQ5GwENBbr+xXmZ2mpdsIXXBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV2GrpG+P uAw+QBqaQWlf2DRKJgswHwYDVR0jBBgwFoAUPLSpAEGL6dzcXgSgumKoTahf5uAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzg5Qzc4RjcwODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUExTcEFFR0w2ZHpjWGdTZ3VtS29UYWhmNXVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6 Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdJsm2BOrAHCm94H3cLWB4WEpISEybg1cQMoFvdAMAEimoPXjhXxfcy 25xk03ngnpaLualw9E4KiwoS23e6sTHxhr3OBS7feiQKRgoBsEwFRhyukLL+KQRU fTHpulfRO2gn3s56OS6WTdDLAilNM/q6/biVeKBVWwF9bJZn5mH3Iy0KUcOXL2nr 8hhC4YY5lI0xMtwpJAIjYWP6g6/7poCHlODDMK0u/uIX8Cc58ptW546IqmQnSvMa 09DVUhPEjPubihT3gwlDJV+qmwf2vTi63XWO7JxJK/jYIgIbUx6JmpOHV+8BNrm5 xMX4QbUjpc6Ia3U6l//judkBN/mu4sM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:35 2025 by rpki-client