$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json) Hash identifier: Eh1f7tItyuchjG3wJH5SX8w3oF9LuxCCFnxcvqiX5jU= Subject key identifier: C0:99:31:9E:94:38:A3:1A:92:36:5A:4E:D4:77:59:7B:D0:65:25:CB Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft Manifest number: 070E Signing time: Fri 30 May 2025 22:07:28 +0000 Manifest this update: Fri 30 May 2025 22:07:28 +0000 Manifest next update: Fri 06 Jun 2025 22:07:28 +0000 Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: y1vtCKCmzlctkPJcp+9h/BB2Uv7Lc72xraiMIjSq+ew=) 2: 7D3B257298C411EC97E3503CC4F9AE02.roa (hash: 6grT2T2iSHeWzKw66g5XN9FJCWiwh1LX3u2dZ5E6lG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: May 30 22:07:28 2025 GMT Not After : Jun 6 22:07:28 2025 GMT Subject: CN=683a2c20-84bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:77:7f:e1:f8:5b:5b:54:6b:2f:f2:49:04: cc:1e:2b:d1:26:6c:0e:f2:45:f1:fb:02:ef:d9:27: 38:ec:6d:47:72:e3:fc:cc:90:f9:69:c8:15:fa:c8: a7:9a:ae:6f:59:00:29:07:ea:ee:55:57:a4:87:8c: c8:df:c0:3b:77:f9:36:ed:2b:03:46:ec:1a:1e:f1: c8:34:3f:08:a0:5f:82:4f:1d:e4:24:4a:28:1f:3a: 8b:11:d0:23:8e:69:ec:3e:c1:a9:9b:ed:a1:ba:43: d1:1f:3f:35:20:ef:31:49:fd:e0:80:01:4a:92:da: 30:43:5a:5d:f2:96:85:84:b9:da:ec:98:83:1a:b0: 2f:4c:e1:4d:7d:3e:07:86:31:79:b6:a1:c5:ab:5e: ec:ca:c3:f7:17:4d:70:3b:ec:ca:a0:1f:d5:e8:67: e2:b5:d4:a8:8f:1b:71:e3:79:da:a2:f4:d8:38:f6: 76:02:01:48:f7:89:11:e2:27:32:f7:ac:fc:8d:63: 49:9f:42:a4:df:c1:bb:1d:02:e7:2e:5a:24:cd:d5: 54:64:bb:93:2e:a4:f9:27:8a:72:34:90:45:7d:0a: 15:ab:72:99:f8:b7:7b:1e:1d:3e:03:48:ec:13:e5: 94:6b:04:b3:ad:b5:f6:36:39:c4:83:80:4b:d0:52: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:99:31:9E:94:38:A3:1A:92:36:5A:4E:D4:77:59:7B:D0:65:25:CB X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0f:b4:e2:d1:08:39:6d:8e:9e:c7:b6:78:9a:87:7c:54:13: 3b:f9:9b:08:1a:a4:64:7d:28:76:3c:32:7a:bb:22:c5:48:f2: 65:5b:e5:02:9f:3d:6f:ff:7e:eb:3c:e1:95:1a:97:56:10:0b: a1:36:b3:dd:cc:20:4e:69:b5:7f:b4:93:00:ab:d6:ef:36:b4: 88:a7:bd:4c:e0:8e:17:82:4a:c6:69:72:43:45:19:c6:48:f4: 3b:de:44:6d:87:c6:e4:57:df:00:c5:0c:46:e7:2c:39:51:6e: d1:af:88:6d:f0:79:77:e6:56:37:7d:ef:0d:23:7a:a4:7e:05: 14:b5:1c:39:83:31:b5:02:29:eb:14:9e:7c:4f:b9:55:ea:ff: 57:3e:2d:af:bf:b0:d3:30:7a:90:79:ac:50:3e:75:a8:70:46: e3:cb:2d:79:3e:f4:af:13:79:87:58:ea:1c:ae:8d:90:e8:22: 96:bf:05:82:54:e3:bc:b7:30:28:15:9e:a5:61:8a:50:c7:72: 8b:d2:17:b5:d8:d6:78:ff:f2:d3:14:06:8a:32:9a:72:6f:0b: 15:aa:42:e2:f3:1c:20:d8:4f:08:1c:78:50:d0:2d:25:40:21: 8a:9d:6b:13:0a:cd:1d:b6:7c:aa:a4:0a:c1:e7:e9:55:67:f3: 74:e6:86:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjUwNTMwMjIwNzI4WhcNMjUwNjA2MjIwNzI4WjAYMRYwFAYD VQQDEw02ODNhMmMyMC04NGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMJ3f+H4W1tUay/ySQTMHivRJmwO8kXx+wLv2Sc47G1HcuP8zJD5acgV+sin mq5vWQApB+ruVVekh4zI38A7d/k27SsDRuwaHvHIND8IoF+CTx3kJEooHzqLEdAj jmnsPsGpm+2hukPRHz81IO8xSf3ggAFKktowQ1pd8paFhLna7JiDGrAvTOFNfT4H hjF5tqHFq17sysP3F01wO+zKoB/V6GfitdSojxtx43naovTYOPZ2AgFI94kR4icy 96z8jWNJn0Kk38G7HQLnLlokzdVUZLuTLqT5J4pyNJBFfQoVq3KZ+Ld7Hh0+A0js E+WUawSzrbX2NjnEg4BL0FK3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCZMZ6U OKMakjZaTtR3WXvQZSXLMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQxRC84QURFMzNGQzQxMkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFF WWFXY2lQcDJlOWlqYnNEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALD7Ti0Qg5bY6ex7Z4mod8VBM7+ZsIGqRkfSh2PDJ6uyLFSPJlW+UC nz1v/37rPOGVGpdWEAuhNrPdzCBOabV/tJMAq9bvNrSIp71M4I4XgkrGaXJDRRnG SPQ73kRth8bkV98AxQxG5yw5UW7Rr4ht8Hl35lY3fe8NI3qkfgUUtRw5gzG1Ainr FJ58T7lV6v9XPi2vv7DTMHqQeaxQPnWocEbjyy15PvSvE3mHWOocro2Q6CKWvwWC VOO8tzAoFZ6lYYpQx3KL0he12NZ4//LTFAaKMppybwsVqkLi8xwg2E8IHHhQ0C0l QCGKnWsTCs0dtnyqpArB5+lVZ/N05obp -----END CERTIFICATE-----Generated at Sat May 31 16:38:08 2025 by rpki-client