$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: CPSWFHGUqP/lhGXydbeevBWTNAkf/96gzETdB3duUag= Subject key identifier: 99:57:A0:5B:E7:CF:74:33:E6:22:AE:D5:F6:F5:7A:DB:46:6E:E2:65 Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: DE Signing time: Sat 31 May 2025 05:04:46 +0000 Manifest this update: Sat 31 May 2025 05:04:45 +0000 Manifest next update: Sat 07 Jun 2025 05:04:45 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: E9YDTfzFMDKTpyU9gfxQQjgmPE/Rot3WiTbllZEGbdA=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: May 31 05:04:45 2025 GMT Not After : Jun 7 05:04:45 2025 GMT Subject: CN=683a8ded-820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:e0:26:5a:8a:ce:22:db:cb:3d:74:1f:2b: c2:ec:d6:20:e1:7b:2d:87:d2:10:06:45:a1:85:42: cd:4b:00:9e:d7:65:d8:61:c1:1a:9d:0f:be:f3:b6: da:4f:50:81:83:37:d9:65:80:7e:a7:80:80:85:e3: ae:5f:86:cb:f2:a9:84:93:0b:3c:6a:88:ab:eb:de: 79:e2:1b:9b:c6:18:0f:6a:74:8d:e8:53:7e:3e:94: 03:3c:b8:82:8c:8a:51:ea:58:cb:92:1f:ae:e4:26: 16:20:6a:e8:62:c9:d7:09:44:b5:94:d7:07:3f:8f: 76:eb:f4:25:80:7d:df:85:73:23:83:a7:04:3b:5f: 47:30:fe:72:4f:01:78:d9:d0:00:09:fe:8a:a7:a8: 8f:32:3b:44:6f:ed:33:d4:70:44:b5:da:99:20:f6: b1:51:30:c6:cb:42:ad:cd:e2:07:d6:eb:8b:56:fb: a3:53:c7:5e:e1:3e:f0:58:7a:a1:6c:94:7f:f1:dd: 1d:89:b1:7d:d7:e9:9c:45:69:3f:dd:83:52:ae:bb: d0:3d:ac:5d:e6:bc:74:6e:b4:9b:aa:72:08:0a:63: 68:0c:27:a2:8a:cc:97:a0:cf:79:7d:0f:03:11:c7: 7f:7a:d6:b9:1a:69:be:b8:6d:a8:0b:7f:22:74:3c: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:A0:5B:E7:CF:74:33:E6:22:AE:D5:F6:F5:7A:DB:46:6E:E2:65 X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:b2:a7:fd:76:d9:d9:41:a1:4a:fd:f4:94:fb:01:b8:22: b2:c4:93:e7:45:75:73:02:1c:ae:67:34:8c:8c:82:8f:55:71: b9:25:26:c4:e2:04:5a:56:b2:a2:1a:61:bd:ad:a9:55:e5:7a: 82:44:b9:37:cb:a1:8f:16:20:75:24:db:41:a5:03:8b:6a:ef: bc:e6:33:38:00:1d:24:f7:09:c1:2d:aa:01:a1:38:be:65:59: 4f:38:62:0c:91:64:9e:89:ff:4e:39:65:df:06:95:78:6e:03: bf:1f:8f:67:67:55:75:55:a9:03:50:d1:cc:02:65:25:66:75: 07:31:60:eb:23:08:bd:52:03:76:f4:1a:05:15:ee:ca:60:bb: d1:20:6f:e2:75:1f:91:cb:80:f5:48:06:90:27:b0:a5:49:c4: ef:15:43:60:f0:5c:5c:cc:fa:fc:20:04:10:cb:4f:00:d3:d3: 97:c1:5d:b3:c4:88:08:90:ec:9c:dd:eb:f8:2c:b8:74:42:c5: 9b:4d:7b:02:2c:f5:51:e3:0f:4e:55:9d:d4:cd:22:7a:f9:eb: d3:81:dd:a5:d0:9f:a9:39:32:39:a7:42:17:75:43:07:58:5b: 5d:67:bd:52:eb:dd:05:b6:6f:05:c9:a0:bf:c9:79:44:f7:87: 37:b9:c3:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUwNTMxMDUwNDQ1WhcNMjUwNjA3MDUwNDQ1WjAYMRYwFAYD VQQDEw02ODNhOGRlZC04MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyvgJlqKziLbyz10HyvC7NYg4Xsth9IQBkWhhULNSwCe12XYYcEanQ++87ba T1CBgzfZZYB+p4CAheOuX4bL8qmEkws8aoir69554hubxhgPanSN6FN+PpQDPLiC jIpR6ljLkh+u5CYWIGroYsnXCUS1lNcHP4926/QlgH3fhXMjg6cEO19HMP5yTwF4 2dAACf6Kp6iPMjtEb+0z1HBEtdqZIPaxUTDGy0KtzeIH1uuLVvujU8de4T7wWHqh bJR/8d0dibF91+mcRWk/3YNSrrvQPaxd5rx0brSbqnIICmNoDCeiisyXoM95fQ8D Ecd/eta5Gmm+uG2oC38idDzSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlXoFvn z3Qz5iKu1fb1ettGbuJlMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhiLKn/XbZ2UGhSv30lPsBuCKyxJPnRXVzAhyuZzSMjIKPVXG5JSbE 4gRaVrKiGmG9ralV5XqCRLk3y6GPFiB1JNtBpQOLau+85jM4AB0k9wnBLaoBoTi+ ZVlPOGIMkWSeif9OOWXfBpV4bgO/H49nZ1V1VakDUNHMAmUlZnUHMWDrIwi9UgN2 9BoFFe7KYLvRIG/idR+Ry4D1SAaQJ7ClScTvFUNg8FxczPr8IAQQy08A09OXwV2z xIgIkOyc3ev4LLh0QsWbTXsCLPVR4w9OVZ3UzSJ6+evTgd2l0J+pOTI5p0IXdUMH WFtdZ71S690Ftm8FyaC/yXlE94c3ucPS -----END CERTIFICATE-----Generated at Sat May 31 17:42:42 2025 by rpki-client