$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: oUX1BIMb1LJ/Q4nrEnC73UA2yvA9HvHw9uT/+PyPDZE= Subject key identifier: D3:37:0E:6C:5A:D5:14:F2:DD:5B:49:FD:49:86:0A:D3:1E:CF:8B:6B Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 01A2 Signing time: Sun 15 Jun 2025 02:32:58 +0000 Manifest this update: Sun 15 Jun 2025 02:32:57 +0000 Manifest next update: Sun 22 Jun 2025 02:32:57 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: zuS6ZFDq3ocnCEiYcQE2G3yOZzCB5U+MaaOuRipjjVw=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: ZbC1fIWVYM0VLVl8rd4V+PKdCpSrgSM3tfi0uNsU2b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Jun 15 02:32:57 2025 GMT Not After : Jun 22 02:32:57 2025 GMT Subject: CN=684e30d9-b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:af:76:75:01:28:7c:a6:4d:bf:e1:3d:1f:5a: fa:09:67:48:f5:e1:9b:09:28:18:ce:b4:ae:8e:7d: dc:83:f1:e7:54:38:01:71:ff:04:32:6c:e8:59:d7: 4e:b0:90:0a:cd:65:7f:1a:21:f7:44:66:c1:95:a7: 22:c1:00:d7:ea:a6:dc:0e:31:99:58:fd:69:65:e2: 29:27:67:36:d4:da:b9:ef:47:75:dd:41:16:6f:86: 95:84:63:13:e4:45:5b:2e:c3:1f:fd:8b:6f:5c:95: 30:81:16:03:d1:2a:4c:0c:d0:51:0b:7e:0e:4d:71: c3:f0:7d:a4:f6:af:b5:3c:1a:4e:cf:73:4a:b1:0c: 01:be:50:a4:32:2a:f5:62:ef:c9:e6:85:86:45:c4: ec:08:d5:7f:80:b0:db:39:8d:19:dd:8e:96:29:71: 49:ba:89:ce:9b:e8:49:6a:55:64:76:80:aa:b4:2c: 73:bd:8e:6f:19:e8:95:fe:2e:6a:02:de:e6:0e:d9: 75:84:79:ae:43:e8:49:04:34:32:a2:89:4a:fe:87: 14:08:ab:ef:5c:12:0e:17:79:56:a8:1c:3b:2b:7a: ee:d4:58:c2:72:a9:03:07:a7:e6:17:de:0a:f7:9f: 40:64:e0:a3:cd:44:56:1a:8b:d6:50:f6:44:11:c5: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:0E:6C:5A:D5:14:F2:DD:5B:49:FD:49:86:0A:D3:1E:CF:8B:6B X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:15:e4:45:f0:58:b5:eb:cb:57:31:bd:23:8d:a8:b4:c8:6b: 1d:0a:6d:51:86:16:3b:c5:b8:9d:cd:1e:dc:bd:fd:8a:a1:1c: 84:41:06:78:81:3c:d2:c0:30:5c:64:a7:b8:b8:d7:79:aa:ef: 31:54:e9:57:bb:c1:be:02:f2:5f:36:e9:2c:23:6a:bb:b3:7f: 16:b2:05:7b:94:e4:fb:fb:67:de:14:6c:2b:81:27:dc:2b:5b: 70:93:c2:c8:05:e4:07:84:72:f7:04:45:6e:aa:32:37:2f:7b: 55:b4:ff:14:9c:62:2f:d2:89:f6:3f:41:d1:d8:14:27:e0:3b: 61:56:66:b0:da:90:70:f3:f9:c4:c5:9b:aa:10:4a:a8:a8:a4: 47:f1:ac:fc:87:78:c5:8f:70:1c:74:6b:16:75:ce:40:00:4e: fc:19:57:ba:94:61:f4:ba:4e:c9:05:dd:4f:ac:77:f2:d6:9f: 84:34:ac:7d:ed:31:50:61:34:76:a3:e3:ad:a1:68:10:0a:2c: 34:c3:7e:cc:a4:ee:58:a4:2b:da:89:40:39:b9:5d:d8:d4:14: b7:83:0e:c9:49:9e:c0:9b:b3:17:e9:53:0b:1a:f1:e4:3c:4d: 6b:2f:c5:11:3c:52:5f:2a:d7:dc:8e:ab:21:d3:bf:06:df:77: eb:a0:6b:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjUwNjE1MDIzMjU3WhcNMjUwNjIyMDIzMjU3WjAYMRYwFAYD VQQDEw02ODRlMzBkOS1iOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8K92dQEofKZNv+E9H1r6CWdI9eGbCSgYzrSujn3cg/HnVDgBcf8EMmzoWddO sJAKzWV/GiH3RGbBlaciwQDX6qbcDjGZWP1pZeIpJ2c21Nq570d13UEWb4aVhGMT 5EVbLsMf/YtvXJUwgRYD0SpMDNBRC34OTXHD8H2k9q+1PBpOz3NKsQwBvlCkMir1 Yu/J5oWGRcTsCNV/gLDbOY0Z3Y6WKXFJuonOm+hJalVkdoCqtCxzvY5vGeiV/i5q At7mDtl1hHmuQ+hJBDQyoolK/ocUCKvvXBIOF3lWqBw7K3ru1FjCcqkDB6fmF94K 959AZOCjzURWGovWUPZEEcXd0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM3Dmxa 1RTy3VtJ/UmGCtMez4trMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQFeRF8Fi168tXMb0jjai0yGsdCm1RhhY7xbidzR7cvf2KoRyEQQZ4 gTzSwDBcZKe4uNd5qu8xVOlXu8G+AvJfNuksI2q7s38WsgV7lOT7+2feFGwrgSfc K1twk8LIBeQHhHL3BEVuqjI3L3tVtP8UnGIv0on2P0HR2BQn4DthVmaw2pBw8/nE xZuqEEqoqKRH8az8h3jFj3AcdGsWdc5AAE78GVe6lGH0uk7JBd1PrHfy1p+ENKx9 7TFQYTR2o+OtoWgQCiw0w37MpO5YpCvaiUA5uV3Y1BS3gw7JSZ7Am7MX6VMLGvHk PE1rL8URPFJfKtfcjqsh078G33froGtp -----END CERTIFICATE-----Generated at Mon Jun 16 14:40:52 2025 by rpki-client