$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: NSnoolipCNm6IaHt4fBYADwJ4rYHVOOKP/GfFzcYE0Y= Subject key identifier: E8:17:88:5A:82:D6:A2:57:F9:3F:C0:4E:CC:DB:98:A2:B4:4E:4A:12 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E33 Signing time: Fri 30 May 2025 17:57:26 +0000 Manifest this update: Fri 30 May 2025 17:57:25 +0000 Manifest next update: Fri 06 Jun 2025 17:57:25 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: sYROFIPZejD7uOGEUEkr9yD4lYiuZFmLGHBW0hU3Aa8=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: May 30 17:57:25 2025 GMT Not After : Jun 6 17:57:25 2025 GMT Subject: CN=6839f186-b93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:f3:61:88:86:cf:d3:f8:96:7b:55:5f:1a: 19:63:25:b8:73:1b:01:db:c4:e5:1d:de:41:33:08: c9:bb:84:dd:e8:46:8e:4e:13:9d:b0:90:ea:0c:dd: 1a:6a:fd:da:d9:bb:f6:9e:19:9d:e4:72:9c:07:c5: fa:b9:a3:1a:14:65:bc:de:79:ac:94:41:9e:5e:6f: 85:0a:5d:03:1a:9e:cc:3d:c6:8c:91:1b:92:39:f6: 01:70:af:c5:56:05:a3:94:f4:dc:2b:09:28:5f:83: c2:a5:53:97:33:c4:b8:1e:9e:cd:37:b3:9d:1a:31: 44:33:65:ce:be:f2:5e:f4:4d:b2:b6:d2:af:a4:7c: 25:36:42:63:2a:8d:3a:c5:2f:87:88:45:40:db:ba: 67:7e:05:2b:dc:f9:a2:cd:9a:4c:dd:2e:c3:67:c1: c0:69:01:b7:92:d9:65:3f:7a:b1:30:b2:e0:98:cd: 3a:3d:11:a2:72:d0:b9:85:41:dd:1a:4b:c3:41:9b: 69:34:e1:4c:90:ab:9b:3e:31:4e:e9:22:6c:09:7a: 34:85:f2:8c:33:10:66:c8:5e:17:0f:08:89:b5:eb: f6:47:3a:86:cf:61:0a:09:47:5e:bd:49:63:8a:02: 14:50:60:66:13:41:6b:08:da:40:12:45:34:35:eb: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:88:5A:82:D6:A2:57:F9:3F:C0:4E:CC:DB:98:A2:B4:4E:4A:12 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b6:8d:b3:2a:f0:9d:7d:a8:a4:04:ac:c1:ae:36:18:2b:1d: 7b:d4:3c:bc:d7:37:39:d3:c5:d5:93:96:c3:9b:de:9d:8a:2e: 87:8c:fa:d6:12:98:a7:11:5d:cb:54:88:d5:c4:d6:5b:2f:79: 39:15:f5:13:fc:d1:fe:65:bd:f7:a0:dd:dc:50:9e:9a:fa:64: 08:72:e6:ad:34:79:77:7f:c3:3b:2b:50:06:e6:f5:cd:9d:be: ff:fb:c6:56:b4:23:47:a2:6f:c5:dc:63:0e:f8:8b:94:d0:37: 25:2e:31:cf:d2:a9:3c:e3:a8:04:b7:e5:38:dc:53:54:e7:3e: 57:cd:65:e0:5c:a1:fb:63:08:bb:c4:48:6f:65:62:5f:25:2d: fb:20:c9:db:3c:36:e3:0e:16:a9:4e:b2:d8:dc:5c:1f:96:8d: 31:60:23:2f:ae:bb:69:f9:9b:e9:ab:6d:00:c4:ba:8f:84:6a: 3a:ea:c5:5b:ad:05:f6:48:5e:46:c1:96:ec:a2:a8:2e:8e:f8: c5:0f:ad:34:d5:12:66:1e:bf:9d:01:49:a7:e6:34:4d:c9:08: 64:3a:7e:a6:ab:76:f0:bc:2a:71:89:f2:37:7e:27:c1:54:5a: 2c:b5:b0:44:d3:d0:7a:81:41:31:05:0a:fb:e4:4a:1e:4f:fd: eb:7c:9e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwNTMwMTc1NzI1WhcNMjUwNjA2MTc1NzI1WjAYMRYwFAYD VQQDEw02ODM5ZjE4Ni1iOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf/zYYiGz9P4lntVXxoZYyW4cxsB28TlHd5BMwjJu4Td6EaOThOdsJDqDN0a av3a2bv2nhmd5HKcB8X6uaMaFGW83nmslEGeXm+FCl0DGp7MPcaMkRuSOfYBcK/F VgWjlPTcKwkoX4PCpVOXM8S4Hp7NN7OdGjFEM2XOvvJe9E2yttKvpHwlNkJjKo06 xS+HiEVA27pnfgUr3PmizZpM3S7DZ8HAaQG3ktllP3qxMLLgmM06PRGictC5hUHd GkvDQZtpNOFMkKubPjFO6SJsCXo0hfKMMxBmyF4XDwiJtev2RzqGz2EKCUdevUlj igIUUGBmE0FrCNpAEkU0NesD+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgXiFqC 1qJX+T/ATszbmKK0TkoSMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+to2zKvCdfaikBKzBrjYYKx171Dy81zc508XVk5bDm96dii6HjPrW EpinEV3LVIjVxNZbL3k5FfUT/NH+Zb33oN3cUJ6a+mQIcuatNHl3f8M7K1AG5vXN nb7/+8ZWtCNHom/F3GMO+IuU0DclLjHP0qk846gEt+U43FNU5z5XzWXgXKH7Ywi7 xEhvZWJfJS37IMnbPDbjDhapTrLY3Fwflo0xYCMvrrtp+Zvpq20AxLqPhGo66sVb rQX2SF5GwZbsoqgujvjFD6001RJmHr+dAUmn5jRNyQhkOn6mq3bwvCpxifI3fifB VFostbBE09B6gUExBQr75EoeT/3rfJ4L -----END CERTIFICATE-----Generated at Sat May 31 17:47:17 2025 by rpki-client