$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: mQGWvZaWOAtbFXJPset3w/jsaCO4vvPDAbtq6JuOHq0= Subject key identifier: 5C:F2:DA:B4:DD:04:89:81:DB:0A:A0:85:46:1D:95:9C:7A:03:E6:27 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01AB Signing time: Sat 29 Mar 2025 02:51:08 +0000 Manifest this update: Sat 29 Mar 2025 02:51:08 +0000 Manifest next update: Sat 05 Apr 2025 02:51:08 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: 9aKVCX+ZCxkNNG4rwySAFMFH3+0BqCeoPuiQfjQJ4rM=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC Validity Not Before: Mar 29 02:51:08 2025 GMT Not After : Apr 5 02:51:08 2025 GMT Subject: CN=67e7601c-b1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:08:90:8a:56:fa:bc:22:af:a5:d0:d8:dd: 76:5c:4c:1b:d1:48:58:29:71:43:21:2a:b4:5a:27: ac:34:41:08:86:5c:21:67:43:1f:87:a6:30:c1:50: c7:ab:5c:65:3e:ce:89:60:00:d8:2f:7c:ff:d3:9e: 63:f4:e0:49:fe:9b:08:88:e2:42:19:4d:83:84:03: f1:01:21:b7:c6:b0:39:d4:de:f9:6f:d5:8a:21:0a: d9:75:3a:18:be:e0:ef:1d:51:13:71:e2:65:59:a6: be:5d:ec:43:9f:cb:d3:22:68:b2:29:16:f7:ca:f6: f9:4d:ce:77:ce:49:eb:41:f6:66:04:55:28:cb:73: 9d:40:a8:f9:b5:58:0f:92:fd:9c:1e:b4:d6:de:99: aa:af:90:a5:59:25:3e:b8:e1:9e:c6:81:7a:ad:ec: 31:89:75:81:5c:63:23:8f:ea:49:4a:bf:aa:de:1c: 84:19:0a:5e:e7:94:bc:1e:31:a3:79:02:de:7c:16: 7f:37:9a:2c:b4:d8:6c:84:29:66:f8:82:ec:14:fe: e8:ee:f2:0e:f3:b1:aa:58:1b:77:a1:d7:d2:ab:41: 51:f4:cf:ca:b7:34:66:34:22:d4:3b:54:88:31:a5: d2:e5:d4:66:44:cb:87:7e:27:4d:5e:7d:6c:83:91: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F2:DA:B4:DD:04:89:81:DB:0A:A0:85:46:1D:95:9C:7A:03:E6:27 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ad:48:66:36:fe:5d:52:6c:36:24:21:19:55:df:21:fc:a7: 5e:13:fb:26:f1:60:cb:12:5e:63:10:86:23:8d:1b:3f:d3:37: 03:ca:84:23:04:bd:6e:95:f8:a7:c8:b4:1a:75:cd:b0:a0:eb: 02:5a:04:08:ac:fb:59:ff:5c:35:29:09:bf:03:66:3c:48:f5: 01:91:e1:40:3b:4a:bb:26:07:99:54:56:6c:73:20:9d:5f:9e: b4:8a:5f:55:9a:15:54:4e:54:5f:2f:bd:af:96:29:59:40:6c: 15:d0:ff:40:d2:ad:1c:9e:e4:4e:f3:91:1c:6c:53:58:97:80: f0:7b:d2:d0:e7:67:c0:44:82:c3:30:2c:80:0a:45:73:ef:d5: ec:69:0f:f1:25:26:ee:55:16:9d:b8:8d:63:b7:b8:55:37:31: 68:2d:fc:dd:ae:33:c1:e1:e3:79:cd:34:34:f4:ec:18:97:fa: b1:5e:37:fe:0a:1c:1a:f0:c0:34:67:c8:3a:11:a3:fd:e0:93: be:2c:63:a4:2a:8b:21:5f:d3:b3:eb:de:e7:3d:0e:b9:4f:d1: 53:a3:73:10:ae:0d:c9:c2:13:2f:b6:50:df:96:4e:00:fe:91: 42:11:6e:70:7b:5b:1d:af:a1:eb:41:df:2a:31:30:eb:16:d2: 46:d6:50:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwMzI5MDI1MTA4WhcNMjUwNDA1MDI1MTA4WjAYMRYwFAYD VQQDEw02N2U3NjAxYy1iMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DMIkIpW+rwir6XQ2N12XEwb0UhYKXFDISq0WiesNEEIhlwhZ0Mfh6YwwVDH q1xlPs6JYADYL3z/055j9OBJ/psIiOJCGU2DhAPxASG3xrA51N75b9WKIQrZdToY vuDvHVETceJlWaa+XexDn8vTImiyKRb3yvb5Tc53zknrQfZmBFUoy3OdQKj5tVgP kv2cHrTW3pmqr5ClWSU+uOGexoF6rewxiXWBXGMjj+pJSr+q3hyEGQpe55S8HjGj eQLefBZ/N5ostNhshClm+ILsFP7o7vIO87GqWBt3odfSq0FR9M/KtzRmNCLUO1SI MaXS5dRmRMuHfidNXn1sg5ELbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzy2rTd BImB2wqghUYdlZx6A+YnMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDArUhmNv5dUmw2JCEZVd8h/KdeE/sm8WDLEl5jEIYjjRs/0zcDyoQj BL1ulfinyLQadc2woOsCWgQIrPtZ/1w1KQm/A2Y8SPUBkeFAO0q7JgeZVFZscyCd X560il9VmhVUTlRfL72vlilZQGwV0P9A0q0cnuRO85EcbFNYl4Dwe9LQ52fARILD MCyACkVz79XsaQ/xJSbuVRaduI1jt7hVNzFoLfzdrjPB4eN5zTQ09OwYl/qxXjf+ Chwa8MA0Z8g6EaP94JO+LGOkKoshX9Oz697nPQ65T9FTo3MQrg3JwhMvtlDflk4A /pFCEW5we1sdr6HrQd8qMTDrFtJG1lB5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:01 2025 by rpki-client