$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: bIQHTU2tN1VNQfcz99UGg2k1kabER9AGzTCCYz7CyxQ= Subject key identifier: 29:74:29:D3:95:21:6B:E8:F8:E8:15:4D:4F:F9:4A:06:9D:CD:F5:74 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 05DA Signing time: Fri 30 May 2025 23:10:57 +0000 Manifest this update: Fri 30 May 2025 23:10:56 +0000 Manifest next update: Fri 06 Jun 2025 23:10:56 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: xdADErHTluMwuYoi2pNI88AxFiPY4UgfKpfk8U1z3oI=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: May 30 23:10:56 2025 GMT Not After : Jun 6 23:10:56 2025 GMT Subject: CN=683a3b01-1b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:09:03:43:9f:4b:c1:f8:74:72:1e:6b:2e:4e: b2:f8:d8:95:20:00:1e:8d:72:e1:05:1f:48:17:34: 03:03:f6:a2:b7:ca:c5:bd:2b:59:59:b3:e4:b7:4d: 70:89:fc:4b:00:5b:a4:0e:24:e6:42:55:46:11:d7: 81:2f:66:a3:90:c4:9d:6f:b3:d2:bd:0c:3a:ed:36: 68:dd:c2:49:26:1e:b4:b4:f6:e5:e1:bd:a7:35:4d: 3e:0a:ac:7e:d4:cf:cd:eb:7d:52:e4:bc:ec:ec:92: 0c:c7:db:32:0d:78:6f:02:f4:13:31:8d:fb:97:27: 03:66:9b:c0:9e:3e:da:de:29:94:aa:46:13:48:b1: db:40:ed:11:a4:7f:4a:9a:28:af:c5:93:06:7e:c8: 02:54:cf:71:59:a7:01:df:3a:e5:68:14:8e:26:dc: 95:33:be:22:ab:b0:27:bd:c7:e5:1f:b9:0c:09:9e: 22:31:5f:86:4d:b7:38:4f:e5:e4:59:88:fd:38:11: b4:be:8a:b1:3b:01:8c:53:69:60:e7:d4:35:8b:ab: 87:02:eb:03:fa:38:da:70:3b:7c:80:73:50:a9:6e: 6e:08:b6:c2:11:da:85:77:7c:c6:55:60:b0:48:c6: 82:2b:01:f4:9c:ed:06:c9:ed:da:33:62:84:87:29: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:29:D3:95:21:6B:E8:F8:E8:15:4D:4F:F9:4A:06:9D:CD:F5:74 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0b:fc:13:91:52:8b:d6:ef:19:de:99:37:07:11:34:22:c1: 56:5a:73:1e:9e:ff:71:1f:41:06:f2:fa:60:3d:42:68:f9:70: f0:21:27:f8:f8:9f:08:fa:e5:9f:5c:9a:38:57:a9:56:98:f2: 06:21:16:c6:4e:77:ca:94:22:06:31:d9:28:1c:3f:aa:6f:67: 0f:25:0f:0b:fc:9a:f9:c7:0d:21:a9:f3:bb:64:8e:d0:41:6b: 29:3a:df:71:91:33:82:8f:4f:9b:01:6e:6f:91:38:97:8e:e6: b7:b9:fa:7e:d9:d9:37:3f:51:24:74:86:45:2d:fa:c9:66:04: 85:60:9e:4b:ae:98:93:eb:7c:90:8a:70:57:37:10:b3:e9:95: 78:b9:8a:4d:16:79:83:51:35:c1:4d:80:15:49:ab:06:63:97: 0d:99:2b:ee:84:a0:90:44:95:02:2c:ed:94:eb:f0:16:02:bd: 3b:97:0c:72:4a:41:3b:1f:a2:1b:4d:ea:75:b5:31:bf:f8:74: 38:a1:47:c0:2f:d2:d3:d0:0d:8a:da:92:da:f1:4c:bb:11:7b: 33:f0:c0:bb:2b:93:9c:71:9b:a5:72:da:bd:88:68:98:0e:2c: 7c:c5:aa:38:99:e1:90:34:43:c5:84:38:e1:f2:5a:36:65:18: e4:9f:3b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUwNTMwMjMxMDU2WhcNMjUwNjA2MjMxMDU2WjAYMRYwFAYD VQQDEw02ODNhM2IwMS0xYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QkDQ59Lwfh0ch5rLk6y+NiVIAAejXLhBR9IFzQDA/ait8rFvStZWbPkt01w ifxLAFukDiTmQlVGEdeBL2ajkMSdb7PSvQw67TZo3cJJJh60tPbl4b2nNU0+Cqx+ 1M/N631S5Lzs7JIMx9syDXhvAvQTMY37lycDZpvAnj7a3imUqkYTSLHbQO0RpH9K miivxZMGfsgCVM9xWacB3zrlaBSOJtyVM74iq7AnvcflH7kMCZ4iMV+GTbc4T+Xk WYj9OBG0voqxOwGMU2lg59Q1i6uHAusD+jjacDt8gHNQqW5uCLbCEdqFd3zGVWCw SMaCKwH0nO0Gye3aM2KEhykJQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl0KdOV IWvo+OgVTU/5SgadzfV0MB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOC/wTkVKL1u8Z3pk3BxE0IsFWWnMenv9xH0EG8vpgPUJo+XDwISf4 +J8I+uWfXJo4V6lWmPIGIRbGTnfKlCIGMdkoHD+qb2cPJQ8L/Jr5xw0hqfO7ZI7Q QWspOt9xkTOCj0+bAW5vkTiXjua3ufp+2dk3P1EkdIZFLfrJZgSFYJ5LrpiT63yQ inBXNxCz6ZV4uYpNFnmDUTXBTYAVSasGY5cNmSvuhKCQRJUCLO2U6/AWAr07lwxy SkE7H6IbTep1tTG/+HQ4oUfAL9LT0A2K2pLa8Uy7EXsz8MC7K5OccZulctq9iGiY Dix8xao4meGQNEPFhDjh8lo2ZRjknzuU -----END CERTIFICATE-----Generated at Sat May 31 15:26:37 2025 by rpki-client