$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: 9gLy3ZPyosMSj3AmopSNj8SmcJUPf9VQ/X2G4Ioiba8= Subject key identifier: C2:D6:2F:C2:F8:AF:23:9A:7F:50:F9:A1:71:4E:95:77:CA:B4:8B:D9 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: C3 Signing time: Tue 03 Jun 2025 05:39:33 +0000 Manifest this update: Tue 03 Jun 2025 05:39:33 +0000 Manifest next update: Tue 10 Jun 2025 05:39:33 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: rru5ccAuOes0YdGKyqnGsECnTyqPyPgE8HaYzKhncHs=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Jun 3 05:39:33 2025 GMT Not After : Jun 10 05:39:33 2025 GMT Subject: CN=683e8a95-6567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:61:be:7c:e6:ec:92:d8:39:55:73:b8:94: 35:ba:29:60:22:e3:d6:19:06:43:7d:f2:94:f3:98: fb:51:e4:d0:cc:a0:98:9c:35:e4:dc:2e:cf:b3:d0: 51:7c:62:6b:f1:a1:cf:dc:61:55:60:a9:aa:aa:e3: db:a3:3e:58:be:79:6f:e0:f1:ba:6d:e5:48:1b:a3: 4c:f8:33:a0:84:83:1a:69:48:b3:2a:95:17:f9:cf: 33:70:49:11:d5:0b:f1:66:26:41:7f:b5:1a:e5:75: d6:af:0a:c0:30:c9:02:7c:8d:ef:d7:5c:7e:61:57: 64:db:cc:dd:44:ae:64:9c:eb:56:7f:d8:ee:59:ac: 39:a4:ee:39:20:08:db:c8:1e:e1:b3:6b:d4:29:65: 84:4f:02:3f:f2:40:c2:6e:09:19:d7:ab:14:25:c2: 26:2f:3c:31:55:74:d6:25:0b:37:88:74:eb:5a:cd: 2b:91:0d:68:31:a0:5d:b1:c4:c9:d6:4d:fb:0a:fa: 1f:68:24:14:29:c5:96:56:2f:97:70:78:1d:48:a0: 75:69:78:43:22:96:f4:a8:30:20:64:5b:18:0a:63: fe:51:02:ad:32:f6:57:4a:89:0e:72:f9:53:6d:6b: 1e:4c:24:8d:e9:f9:06:fa:ed:ba:b8:33:b3:05:29: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:2F:C2:F8:AF:23:9A:7F:50:F9:A1:71:4E:95:77:CA:B4:8B:D9 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7a:7b:01:43:82:5e:8e:50:46:0b:74:50:c4:90:f7:c4:d8: fa:d8:a7:76:f0:60:78:b7:8e:2b:f0:7a:b9:25:d2:06:fe:f5: 16:04:cb:4f:6f:56:a0:6a:7f:be:1b:72:c0:a2:66:a8:99:62: 23:f3:ba:3b:cb:9b:95:24:e7:92:9b:57:f3:5b:ab:c0:1c:65: ee:bc:44:57:52:ce:6f:6d:d0:56:6c:e1:4f:8e:14:54:29:90: 31:7f:1f:15:b5:fe:33:bc:63:e1:3b:ae:86:78:0e:9b:99:2d: 7b:bb:4d:06:7e:ff:8f:f5:83:0b:b2:0b:a9:f7:de:a4:c9:18: bb:ff:cc:1e:97:38:fa:b0:d2:f9:af:1c:67:59:30:fa:9c:4b: a6:15:cc:8c:d1:e6:25:9c:e0:d0:6b:de:14:12:5f:51:1d:c6: f9:d7:0d:84:0e:ab:7a:4c:c3:75:9b:34:f4:e2:64:bb:45:78: e9:70:b6:8c:b4:e4:d5:fe:0f:73:0b:53:7a:c9:4e:5d:48:1a: 55:f2:f2:10:13:f1:74:ef:cc:d8:47:ef:3f:15:0f:fd:e0:8d: 1d:df:a8:dd:64:dd:ea:69:24:e2:dd:06:e1:4b:db:92:b3:fc: 1a:40:c7:eb:e5:70:11:0b:27:54:a8:22:0f:69:4e:4e:80:0b: 12:12:14:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNjAzMDUzOTMzWhcNMjUwNjEwMDUzOTMzWjAYMRYwFAYD VQQDEw02ODNlOGE5NS02NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Kphvnzm7JLYOVVzuJQ1uilgIuPWGQZDffKU85j7UeTQzKCYnDXk3C7Ps9BR fGJr8aHP3GFVYKmqquPboz5Yvnlv4PG6beVIG6NM+DOghIMaaUizKpUX+c8zcEkR 1QvxZiZBf7Ua5XXWrwrAMMkCfI3v11x+YVdk28zdRK5knOtWf9juWaw5pO45IAjb yB7hs2vUKWWETwI/8kDCbgkZ16sUJcImLzwxVXTWJQs3iHTrWs0rkQ1oMaBdscTJ 1k37CvofaCQUKcWWVi+XcHgdSKB1aXhDIpb0qDAgZFsYCmP+UQKtMvZXSokOcvlT bWseTCSN6fkG+u26uDOzBSlxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLWL8L4 ryOaf1D5oXFOlXfKtIvZMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyensBQ4JejlBGC3RQxJD3xNj62Kd28GB4t44r8Hq5JdIG/vUWBMtP b1agan++G3LAomaomWIj87o7y5uVJOeSm1fzW6vAHGXuvERXUs5vbdBWbOFPjhRU KZAxfx8Vtf4zvGPhO66GeA6bmS17u00Gfv+P9YMLsgup996kyRi7/8welzj6sNL5 rxxnWTD6nEumFcyM0eYlnODQa94UEl9RHcb51w2EDqt6TMN1mzT04mS7RXjpcLaM tOTV/g9zC1N6yU5dSBpV8vIQE/F078zYR+8/FQ/94I0d36jdZN3qaSTi3QbhS9uS s/waQMfr5XARCydUqCIPaU5OgAsSEhTr -----END CERTIFICATE-----Generated at Wed Jun 4 12:20:39 2025 by rpki-client