$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: uFL0bbhptbQeNWceir8XMRY9zMD5IJz9qqMG1mRe3HE= Subject key identifier: A0:44:64:AA:0A:0A:AA:B5:92:D1:0A:1F:5D:5F:F2:93:8F:E1:82:8C Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 0189 Signing time: Fri 25 Apr 2025 02:42:50 +0000 Manifest this update: Fri 25 Apr 2025 02:42:49 +0000 Manifest next update: Fri 02 May 2025 02:42:49 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: H5JNX14YKtyhffYkkV1dyu33ceZhMmphy3JehuvrPss=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: ZbC1fIWVYM0VLVl8rd4V+PKdCpSrgSM3tfi0uNsU2b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Apr 25 02:42:49 2025 GMT Not After : May 2 02:42:49 2025 GMT Subject: CN=680af6aa-82af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:91:4d:ef:a2:2f:03:76:5b:67:b4:4d:6f: 89:94:3d:05:fd:ee:de:2e:f6:28:6e:25:ed:d3:12: 0e:dc:5f:bf:90:61:5d:60:74:a3:9d:cb:48:dc:e9: 6f:8e:f1:f4:d3:33:d2:f6:a6:5d:66:20:2a:f0:b3: 49:8d:4b:97:c8:74:89:ef:ca:cb:73:a1:0b:80:e7: fc:74:74:a6:be:c8:24:27:21:49:f3:23:5f:c2:df: 5d:db:37:d5:3a:2f:be:53:29:0a:88:e9:02:0e:51: e4:22:92:44:10:2e:eb:af:bd:f9:aa:eb:14:05:36: 48:8c:15:33:32:74:76:ec:35:3e:18:18:57:bf:90: 00:2c:28:7f:24:9e:84:9f:62:45:de:ef:12:c1:9e: 2d:23:46:cf:42:bf:e2:f9:48:d4:40:54:90:cc:66: 9f:96:14:e6:1d:a0:39:2f:be:8b:db:e7:2e:28:6c: f0:33:57:9a:ae:89:c4:0a:4c:cd:56:72:01:3d:4e: 20:c8:0e:bc:42:ea:68:13:cb:83:bb:0f:49:f8:2d: a1:7f:29:45:14:5f:64:27:f0:50:17:8b:37:dd:ed: ae:15:57:46:8b:c6:fb:72:a6:12:e6:5d:4b:d9:f6: b9:ad:2b:50:78:45:d0:f9:b6:1e:07:8a:2f:43:e0: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:44:64:AA:0A:0A:AA:B5:92:D1:0A:1F:5D:5F:F2:93:8F:E1:82:8C X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6f:b9:f6:b8:0f:e2:49:d6:fb:0c:5d:36:1e:d8:07:cd:6f: 7d:5b:6b:07:19:80:d1:35:d6:cf:50:97:aa:53:03:4b:ea:95: 6c:fd:5c:54:25:da:28:bd:dd:02:11:2e:1a:a6:08:37:36:c9: 77:c2:c5:32:aa:ed:03:2f:66:06:a3:ba:26:08:0e:13:d3:3a: 56:e5:dd:88:bb:e2:e7:8d:b9:cc:2e:39:64:63:09:0d:ec:1c: a4:bb:c1:de:ce:ab:bc:ac:d0:ce:51:3e:c5:fe:53:ad:9a:93: 8a:0c:43:4a:5d:81:fe:ce:11:c4:5d:6e:cb:d2:42:a3:e2:09: d9:33:10:e6:c7:44:39:f0:7c:45:51:cc:92:e8:3a:67:eb:8f: 73:3b:62:57:cb:83:70:4b:f5:57:e9:0f:01:19:f4:2c:a0:49: 32:ee:bc:76:87:7b:a3:d9:e9:08:f0:80:e5:b1:ef:cc:86:ac: 8e:65:63:c4:70:1f:36:45:22:21:13:06:ee:55:b8:fa:48:53: 31:74:61:b4:83:58:07:a2:14:ef:a0:69:1f:c1:ed:f8:2e:57: 00:f3:4c:34:92:8e:04:d0:46:f6:68:f1:df:7d:95:5e:26:d0: 58:c1:55:87:cc:7c:6f:88:e8:24:bb:3c:c8:3b:aa:84:0f:9f: 8a:5e:34:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjUwNDI1MDI0MjQ5WhcNMjUwNTAyMDI0MjQ5WjAYMRYwFAYD VQQDEw02ODBhZjZhYS04MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuISRTe+iLwN2W2e0TW+JlD0F/e7eLvYobiXt0xIO3F+/kGFdYHSjnctI3Olv jvH00zPS9qZdZiAq8LNJjUuXyHSJ78rLc6ELgOf8dHSmvsgkJyFJ8yNfwt9d2zfV Oi++UykKiOkCDlHkIpJEEC7rr735qusUBTZIjBUzMnR27DU+GBhXv5AALCh/JJ6E n2JF3u8SwZ4tI0bPQr/i+UjUQFSQzGaflhTmHaA5L76L2+cuKGzwM1earonECkzN VnIBPU4gyA68QupoE8uDuw9J+C2hfylFFF9kJ/BQF4s33e2uFVdGi8b7cqYS5l1L 2fa5rStQeEXQ+bYeB4ovQ+DGYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBEZKoK Cqq1ktEKH11f8pOP4YKMMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9b7n2uA/iSdb7DF02HtgHzW99W2sHGYDRNdbPUJeqUwNL6pVs/VxU Jdoovd0CES4apgg3Nsl3wsUyqu0DL2YGo7omCA4T0zpW5d2Iu+LnjbnMLjlkYwkN 7Byku8Hezqu8rNDOUT7F/lOtmpOKDENKXYH+zhHEXW7L0kKj4gnZMxDmx0Q58HxF UcyS6Dpn649zO2JXy4NwS/VX6Q8BGfQsoEky7rx2h3uj2ekI8IDlse/MhqyOZWPE cB82RSIhEwbuVbj6SFMxdGG0g1gHohTvoGkfwe34LlcA80w0ko4E0Eb2aPHffZVe JtBYwVWHzHxviOgkuzzIO6qED5+KXjT/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:59:48 2025 by rpki-client