$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: OW5RTixEoQx3LHtL/qdf0Q33KeKRndIJNUs6z9Ce8U8= Subject key identifier: 55:42:30:4F:D9:99:00:BE:44:5E:1A:2F:5D:86:48:5A:AA:5E:D1:DE Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 01C3 Signing time: Sat 31 May 2025 02:42:50 +0000 Manifest this update: Sat 31 May 2025 02:42:50 +0000 Manifest next update: Sat 07 Jun 2025 02:42:50 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: h3kEMtLV/QPGs7Knfh+EUDSWDNSscy7hHi/aZxHC80c=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: May 31 02:42:50 2025 GMT Not After : Jun 7 02:42:50 2025 GMT Subject: CN=683a6caa-ab4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:63:05:ee:93:25:93:20:51:9b:05:1b:b7: 4d:1c:bc:a6:0a:ce:e4:95:bc:49:03:49:3a:44:b6: e6:ae:7b:e7:2b:33:37:6a:96:76:f8:d8:54:ad:31: c1:08:4a:11:8f:1a:2b:a9:7d:72:fe:a1:eb:c9:67: d0:c5:cd:a3:8a:6a:6a:a5:72:a8:42:74:5f:08:1f: 86:22:68:80:80:fe:63:a8:3d:e8:5a:96:eb:89:60: aa:75:69:db:64:e4:26:35:2d:9d:ba:dd:23:dc:f9: 16:5e:01:86:d7:18:e7:de:7a:5b:57:0f:94:7c:9f: c0:63:7b:cf:25:0e:d0:80:05:17:b6:7b:4d:23:d7: f5:f8:1f:02:52:1c:0b:9e:f6:49:03:9f:da:c3:55: a8:40:90:82:f3:07:b0:8d:59:b0:9e:44:a8:9e:f5: 37:de:52:02:24:3c:2d:3c:16:ee:b8:a4:c4:90:9c: bb:4a:a0:e3:14:34:2c:92:da:4b:3a:cb:79:ba:1c: fa:a1:a2:53:03:ce:41:57:c5:44:0a:d5:ed:7c:4d: 19:06:fe:26:cb:66:fe:79:8e:a3:98:b6:f1:8f:73: f0:88:ef:42:6c:c6:32:e6:5e:33:1f:f7:14:1e:ee: b8:7e:8b:40:e1:2f:ef:1b:49:9d:5a:5f:74:2e:2a: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:30:4F:D9:99:00:BE:44:5E:1A:2F:5D:86:48:5A:AA:5E:D1:DE X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:3c:6d:f2:0d:79:d9:a9:4e:aa:1a:66:68:58:78:7d:2a:94: 6e:ba:4b:cc:a1:54:a4:e1:1b:cf:2a:4b:8c:3d:78:2b:f3:7e: d6:25:da:dd:6e:3b:b4:c6:19:24:6c:e0:bb:53:39:ef:8a:5e: 8a:b6:91:6b:e4:ad:7e:76:4a:04:fa:fb:92:78:31:ad:1a:9c: ed:6b:f3:5b:d7:73:30:65:6d:18:76:76:30:c0:31:b5:11:ad: 42:a1:23:59:1a:23:a4:75:e0:87:5b:3c:b7:83:82:fb:f8:36: 71:09:42:0a:1c:49:25:10:df:46:6d:2f:9d:1f:df:be:63:ed: 99:fc:74:1c:18:13:d3:29:ad:e6:be:a2:47:f6:fd:3a:61:1d: 88:7b:d6:85:ca:ae:fe:9b:5c:29:00:e3:19:63:49:ba:4a:85: 15:51:bb:dc:cf:c1:4b:5b:d1:fa:e9:87:ce:ee:e4:77:1d:a4: c4:07:67:5b:07:93:ca:bc:66:fa:91:47:df:c5:e2:b1:11:78: 63:40:f2:47:2c:34:89:90:3e:41:92:d7:65:fe:ad:a9:fe:79: be:a0:af:53:28:e2:5d:a9:c0:f7:b0:05:63:1f:7d:5f:b8:18: 99:b3:0a:75:55:b7:58:e2:46:86:ec:e0:a6:9f:94:49:20:0a: 76:cc:30:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjUwNTMxMDI0MjUwWhcNMjUwNjA3MDI0MjUwWjAYMRYwFAYD VQQDEw02ODNhNmNhYS1hYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudhjBe6TJZMgUZsFG7dNHLymCs7klbxJA0k6RLbmrnvnKzM3apZ2+NhUrTHB CEoRjxorqX1y/qHryWfQxc2jimpqpXKoQnRfCB+GImiAgP5jqD3oWpbriWCqdWnb ZOQmNS2dut0j3PkWXgGG1xjn3npbVw+UfJ/AY3vPJQ7QgAUXtntNI9f1+B8CUhwL nvZJA5/aw1WoQJCC8wewjVmwnkSonvU33lICJDwtPBbuuKTEkJy7SqDjFDQsktpL Ost5uhz6oaJTA85BV8VECtXtfE0ZBv4my2b+eY6jmLbxj3PwiO9CbMYy5l4zH/cU Hu64fotA4S/vG0mdWl90LioZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVCME/Z mQC+RF4aL12GSFqqXtHeMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5PG3yDXnZqU6qGmZoWHh9KpRuukvMoVSk4RvPKkuMPXgr837WJdrd bju0xhkkbOC7Uznvil6KtpFr5K1+dkoE+vuSeDGtGpzta/Nb13MwZW0YdnYwwDG1 Ea1CoSNZGiOkdeCHWzy3g4L7+DZxCUIKHEklEN9GbS+dH9++Y+2Z/HQcGBPTKa3m vqJH9v06YR2Ie9aFyq7+m1wpAOMZY0m6SoUVUbvcz8FLW9H66YfO7uR3HaTEB2db B5PKvGb6kUffxeKxEXhjQPJHLDSJkD5Bktdl/q2p/nm+oK9TKOJdqcD3sAVjH31f uBiZswp1VbdY4kaG7OCmn5RJIAp2zDDN -----END CERTIFICATE-----Generated at Sat May 31 16:38:49 2025 by rpki-client