$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: 7GktrmyfqRFTij14cOW9UIQ2J4QV87umlTxQYXKoqG4= Subject key identifier: 1F:71:81:0D:33:D6:FA:3F:FC:49:DF:14:B4:C8:3C:8C:15:14:FD:21 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2CB4 Signing time: Wed 18 Jun 2025 15:29:26 +0000 Manifest this update: Wed 18 Jun 2025 15:29:26 +0000 Manifest next update: Wed 25 Jun 2025 15:29:26 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: QfkQMDXJ+YGJ6QvDuFSWKgiN4jpl89eTkev/J4O+jy0=) 2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=) 3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=) 4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: fo5MHUuRRZ0aet/6odghmGpOjhNAEkaCj7xDRNlqGJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11493 (0x2ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Jun 18 15:29:26 2025 GMT Not After : Jun 25 15:29:26 2025 GMT Subject: CN=6852db56-1f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:78:6a:a6:80:d2:9e:19:d2:6d:ae:28:b6: 81:29:f1:2f:28:7d:bd:ed:21:6d:39:d7:70:46:c1: 34:f2:a9:d6:73:08:9c:e5:9f:fc:c7:fa:98:a3:91: 15:92:f9:fa:d9:d4:3d:e4:3b:05:29:3b:ad:3f:9a: 16:05:96:0e:ca:a1:19:4b:5e:26:67:ac:02:dc:e7: ae:d9:5e:17:bd:c8:83:47:f6:f7:ce:28:e2:9f:4d: f7:44:a4:ef:d8:f3:8c:7e:90:94:d2:05:55:3e:fa: 57:ea:80:d6:3b:a3:61:f3:c5:cf:9f:8b:6d:8d:ce: da:95:7b:84:40:22:e3:94:d1:b8:7d:31:78:cc:5e: 56:2a:5e:49:31:34:0e:31:d2:62:1e:6e:e7:a3:91: 8a:1e:43:45:2d:68:52:a4:51:d8:a9:03:a6:ce:66: 93:b1:27:83:78:c7:b4:74:52:11:64:39:45:88:8b: e1:70:92:88:e7:57:2d:2f:ca:d7:42:99:74:8f:fe: 0f:f4:0a:4b:ac:bc:49:5f:24:cb:01:fe:0c:29:53: 79:c7:c5:c9:28:0a:bb:1a:9d:59:eb:32:75:c4:67: 52:7c:bc:62:90:95:ba:7a:ce:1d:ec:e0:9f:07:a7: 99:19:ca:1a:81:8b:d1:c0:36:31:54:3d:0b:7b:0d: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:81:0D:33:D6:FA:3F:FC:49:DF:14:B4:C8:3C:8C:15:14:FD:21 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:52:56:99:21:b9:0d:51:81:b6:f1:17:fa:77:ee:31:0b:db: a1:03:e6:b8:c2:0e:57:a8:6d:a4:45:eb:5c:db:2e:f6:d9:08: 0a:1a:3b:e0:5c:69:b8:7f:d5:a6:a1:6b:1f:af:03:0b:d6:9e: c7:92:c2:ee:20:a6:0e:bf:94:3a:d6:03:a6:3d:61:e0:0d:7a: d7:4a:9e:38:57:4e:2f:e4:ce:95:2d:f6:3b:92:45:5d:56:99: b4:63:7e:31:cc:f4:07:a5:c5:f1:d2:05:15:77:24:ec:7f:a4: e9:81:33:78:72:8d:56:73:cb:d7:e1:55:27:a4:bd:db:66:80: 26:52:9f:f4:7a:c9:5a:d4:67:88:86:59:78:0c:86:44:07:27: 06:9b:a0:d8:df:4e:1d:a8:9e:c2:27:71:72:e5:7d:4d:73:e5: 0c:36:34:c6:60:0b:bc:b6:bf:86:2f:c4:0a:3d:aa:4d:e4:b0: f0:e2:70:80:95:01:8c:2f:f1:86:37:68:c2:ca:9b:07:a7:49: 3b:5c:75:0a:0c:53:dd:71:f2:d3:7e:43:8c:c9:7c:46:b8:b3: dc:5b:df:23:ff:f2:57:1e:62:dd:f8:db:8e:09:f5:b8:35:87: 3c:50:7a:9f:37:f4:95:3f:36:5d:f3:30:aa:bf:05:0e:b2:f3: f7:69:c6:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjUwNjE4MTUyOTI2WhcNMjUwNjI1MTUyOTI2WjAYMRYwFAYD VQQDEw02ODUyZGI1Ni0xZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHl4aqaA0p4Z0m2uKLaBKfEvKH297SFtOddwRsE08qnWcwic5Z/8x/qYo5EV kvn62dQ95DsFKTutP5oWBZYOyqEZS14mZ6wC3Oeu2V4XvciDR/b3zijin033RKTv 2POMfpCU0gVVPvpX6oDWO6Nh88XPn4ttjc7alXuEQCLjlNG4fTF4zF5WKl5JMTQO MdJiHm7no5GKHkNFLWhSpFHYqQOmzmaTsSeDeMe0dFIRZDlFiIvhcJKI51ctL8rX Qpl0j/4P9ApLrLxJXyTLAf4MKVN5x8XJKAq7Gp1Z6zJ1xGdSfLxikJW6es4d7OCf B6eZGcoagYvRwDYxVD0Lew17XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9xgQ0z 1vo//EnfFLTIPIwVFP0hMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAUlaZIbkNUYG28Rf6d+4xC9uhA+a4wg5XqG2kRetc2y722QgKGjvg XGm4f9WmoWsfrwML1p7HksLuIKYOv5Q61gOmPWHgDXrXSp44V04v5M6VLfY7kkVd Vpm0Y34xzPQHpcXx0gUVdyTsf6TpgTN4co1Wc8vX4VUnpL3bZoAmUp/0esla1GeI hll4DIZEBycGm6DY304dqJ7CJ3Fy5X1Nc+UMNjTGYAu8tr+GL8QKPapN5LDw4nCA lQGML/GGN2jCypsHp0k7XHUKDFPdcfLTfkOMyXxGuLPcW98j//JXHmLd+NuOCfW4 NYc8UHqfN/SVPzZd8zCqvwUOsvP3acah -----END CERTIFICATE-----Generated at Thu Jun 19 03:00:14 2025 by rpki-client