$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: V8HR0Ge+Fr/xbVK98SeXKjwFnql2VqpasHwH+bEulqs= Subject key identifier: B5:06:BF:D3:F2:7E:31:02:00:9C:C4:5D:8F:65:EC:AB:EE:34:20:58 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: FC Signing time: Tue 03 Jun 2025 04:53:57 +0000 Manifest this update: Tue 03 Jun 2025 04:53:56 +0000 Manifest next update: Tue 10 Jun 2025 04:53:56 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: ryBf0a+EFHDcvK0Ig6KzWs+Loyg3zwlwHGNHPtwK1PY=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jun 3 04:53:56 2025 GMT Not After : Jun 10 04:53:56 2025 GMT Subject: CN=683e7fe4-02e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:12:f6:73:a0:7e:94:6a:a7:bb:ea:01:d1: b5:46:ee:5a:79:01:60:a7:54:94:97:7c:08:bb:e1: 9b:c4:43:de:c7:09:03:8b:60:50:8d:7d:b8:0f:bf: 50:cb:16:b7:76:82:9f:75:67:ec:9d:d5:78:a4:c0: fd:90:b2:ac:4e:de:bf:f0:22:db:20:bf:09:65:5b: 7a:70:ec:0e:5e:20:33:ca:c9:9c:7f:4c:cb:3e:5e: 2b:fd:02:d7:c5:7b:a2:26:16:7e:64:02:be:71:cf: 70:c0:f7:09:40:c1:1d:d7:59:c1:b7:97:47:05:45: 6e:6b:a9:af:18:bf:61:67:86:41:27:52:36:34:43: 84:37:2d:94:92:c6:d4:be:c9:55:d7:31:4b:06:ea: d0:e9:96:de:95:27:c8:2f:24:58:dd:d4:67:bf:66: 8a:5c:d6:9b:b4:d7:54:2d:68:50:57:28:6a:d9:55: 07:57:6e:c3:82:3c:f0:83:a3:ec:50:af:96:ee:70: 19:79:a2:8f:46:19:ca:da:e4:c3:d8:a6:5f:31:4c: 6c:5d:48:8b:b1:c2:5c:f6:9b:04:c5:e7:4b:24:25: b7:e3:7d:33:b9:b0:7b:a2:ac:ce:a2:3a:44:07:6f: 40:b7:a0:52:32:e4:50:23:c3:75:99:08:b3:96:48: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:BF:D3:F2:7E:31:02:00:9C:C4:5D:8F:65:EC:AB:EE:34:20:58 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:96:50:53:18:d9:07:7e:a6:4d:6e:d9:32:74:7a:29:1d: ae:cb:6b:1f:69:53:17:54:5f:7f:15:ab:1b:5b:80:fa:ed:76: 64:81:a3:de:22:24:6c:d3:21:80:cd:17:bc:c0:f2:72:04:ef: 88:12:30:0b:a1:f5:e9:54:cb:7d:75:04:4c:7b:76:2a:04:c2: 75:4e:60:97:1e:4f:73:d4:6a:28:d4:0f:3c:20:1d:18:27:17: a6:5b:1c:69:0a:b6:2d:fc:05:41:be:cf:c5:63:b7:1d:1b:d9: 91:41:f9:c6:67:cd:15:72:b6:14:9d:bb:06:93:52:c5:d1:05: 11:0e:a0:da:f6:56:b3:1f:57:5a:89:29:ac:c1:e7:3f:df:7b: 30:89:b3:eb:34:47:55:85:23:c0:73:94:ad:01:bc:23:ae:0a: 39:cd:90:35:c3:73:fb:fb:78:90:fe:2d:70:e0:e0:16:16:f0: 62:1a:58:a6:2b:55:7c:98:81:10:09:16:9a:30:36:de:1f:38: 5b:a1:9d:a9:a9:d3:65:ee:47:b1:43:9e:69:41:bb:e9:28:9c: 67:a3:4f:68:61:ed:d5:04:d7:fd:65:d3:c0:1f:1e:9a:26:8d: c8:fd:ba:a5:68:5a:a2:3b:78:02:ff:bd:1a:df:07:cb:77:79: 28:9b:dd:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwNjAzMDQ1MzU2WhcNMjUwNjEwMDQ1MzU2WjAYMRYwFAYD VQQDEw02ODNlN2ZlNC0wMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nQS9nOgfpRqp7vqAdG1Ru5aeQFgp1SUl3wIu+GbxEPexwkDi2BQjX24D79Q yxa3doKfdWfsndV4pMD9kLKsTt6/8CLbIL8JZVt6cOwOXiAzysmcf0zLPl4r/QLX xXuiJhZ+ZAK+cc9wwPcJQMEd11nBt5dHBUVua6mvGL9hZ4ZBJ1I2NEOENy2UksbU vslV1zFLBurQ6ZbelSfILyRY3dRnv2aKXNabtNdULWhQVyhq2VUHV27Dgjzwg6Ps UK+W7nAZeaKPRhnK2uTD2KZfMUxsXUiLscJc9psExedLJCW3430zubB7oqzOojpE B29At6BSMuRQI8N1mQizlkg8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUGv9Py fjECAJzEXY9l7KvuNCBYMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzmJZQUxjZB36mTW7ZMnR6KR2uy2sfaVMXVF9/FasbW4D67XZkgaPe IiRs0yGAzRe8wPJyBO+IEjALofXpVMt9dQRMe3YqBMJ1TmCXHk9z1Goo1A88IB0Y JxemWxxpCrYt/AVBvs/FY7cdG9mRQfnGZ80VcrYUnbsGk1LF0QURDqDa9lazH1da iSmswec/33swibPrNEdVhSPAc5StAbwjrgo5zZA1w3P7+3iQ/i1w4OAWFvBiGlim K1V8mIEQCRaaMDbeHzhboZ2pqdNl7kexQ55pQbvpKJxno09oYe3VBNf9ZdPAHx6a Jo3I/bqlaFqiO3gC/70a3wfLd3kom91J -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:32 2025 by rpki-client