$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: 1WXlHlKpdwcgILJsL+mzYjpMv6zRXTw1ByUjNBFMcUk= Subject key identifier: 06:B0:3E:13:E6:06:37:3E:7D:2B:30:BC:38:0E:C1:C3:60:CA:1C:FC Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0E2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0E24 Signing time: Fri 30 May 2025 17:58:27 +0000 Manifest this update: Fri 30 May 2025 17:58:26 +0000 Manifest next update: Fri 06 Jun 2025 17:58:26 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: 6R5EfxeMAye9wpziYO8EVyFtfEGHiQpmp31WPiloO+I=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3628 (0xe2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: May 30 17:58:26 2025 GMT Not After : Jun 6 17:58:26 2025 GMT Subject: CN=6839f1c2-b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c0:50:9e:4a:9b:ee:6a:7b:e6:3e:f8:10:72: 5e:ac:8f:35:a0:a1:6d:e3:4b:2f:41:48:81:04:4c: f3:a6:5d:1c:36:51:00:2f:00:b3:16:7e:f1:0c:c4: 16:a9:d3:90:99:a5:b9:54:e2:6f:68:fd:7d:56:f5: 1e:1c:cc:af:7b:f9:b9:a7:4f:77:f9:1f:08:06:1a: 20:79:e6:82:2b:70:92:42:2f:44:56:47:92:ee:2a: 38:40:56:bf:c3:2b:4e:60:7a:06:91:bd:e2:a9:c5: e8:d1:42:76:19:63:65:9d:d4:53:f9:3a:b7:d4:74: 2f:34:c3:fe:1c:ba:5f:d7:8f:23:6e:3b:e7:4d:74: 6c:e8:18:88:3a:48:ab:38:e2:ac:d4:d4:e3:a6:e8: eb:42:ce:24:71:c2:2f:01:81:9a:03:63:5f:0a:1a: dc:6d:ff:4b:65:aa:5d:94:54:ee:95:8d:3f:77:f4: a5:00:8a:9f:57:45:37:ef:07:f2:2c:f7:91:b1:22: 05:7d:19:d6:3e:a0:73:a9:c2:6b:17:2e:ec:a4:2e: 68:9e:67:71:c0:71:b1:e3:6f:f9:09:8f:6f:35:56: 04:f1:e4:ed:ec:a9:34:c1:73:ce:be:53:42:67:fa: 71:eb:4c:74:4e:53:ec:aa:a8:9c:f5:b3:0e:d6:c8: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B0:3E:13:E6:06:37:3E:7D:2B:30:BC:38:0E:C1:C3:60:CA:1C:FC X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d2:46:fe:11:28:f5:95:43:24:fc:44:62:4f:6f:15:dd:d2: cc:a5:7f:20:7b:80:29:48:78:88:70:d5:fc:17:f5:cb:a3:64: ad:a5:3c:f7:f3:fd:1b:38:74:c3:5b:df:18:24:68:f4:8e:40: 71:9d:f2:62:c5:2e:a3:93:f2:bf:7a:cd:28:bf:e4:61:50:34: 8d:bf:2a:a9:b8:1f:bb:8d:ea:33:8e:cd:89:73:21:a1:cc:d0: ba:e7:ec:a8:a2:13:76:92:15:46:43:92:39:33:e7:bf:70:3d: 41:c4:fb:2f:08:00:37:48:da:40:dd:e0:e3:15:51:2e:d3:25: f3:1d:83:16:dc:ed:77:3e:f0:f4:cc:9d:5f:c8:49:32:d0:2f: d5:d2:cf:f7:d6:ba:42:a0:db:98:ee:ba:d5:d0:e0:cf:25:48: 58:54:be:c2:78:dd:bb:50:c5:a5:af:0e:6a:e6:6f:36:1a:95: f3:2a:8e:71:7a:5d:d7:c3:33:52:8e:3d:09:98:ec:9d:55:2e: 83:34:af:65:69:6c:02:d4:d6:6c:9a:23:6b:4d:fc:f7:ed:0a: 03:16:03:4e:f7:14:60:90:df:95:ff:af:39:10:82:70:63:5a: be:54:fc:e6:ae:ca:e6:ba:fa:38:84:90:38:72:95:57:2d:c9: 7f:eb:81:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjUwNTMwMTc1ODI2WhcNMjUwNjA2MTc1ODI2WjAYMRYwFAYD VQQDEw02ODM5ZjFjMi1iNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cBQnkqb7mp75j74EHJerI81oKFt40svQUiBBEzzpl0cNlEALwCzFn7xDMQW qdOQmaW5VOJvaP19VvUeHMyve/m5p093+R8IBhogeeaCK3CSQi9EVkeS7io4QFa/ wytOYHoGkb3iqcXo0UJ2GWNlndRT+Tq31HQvNMP+HLpf148jbjvnTXRs6BiIOkir OOKs1NTjpujrQs4kccIvAYGaA2NfChrcbf9LZapdlFTulY0/d/SlAIqfV0U37wfy LPeRsSIFfRnWPqBzqcJrFy7spC5onmdxwHGx42/5CY9vNVYE8eTt7Kk0wXPOvlNC Z/px60x0TlPsqqic9bMO1sj5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAawPhPm Bjc+fSswvDgOwcNgyhz8MB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU0kb+ESj1lUMk/ERiT28V3dLMpX8ge4ApSHiIcNX8F/XLo2StpTz3 8/0bOHTDW98YJGj0jkBxnfJixS6jk/K/es0ov+RhUDSNvyqpuB+7jeozjs2JcyGh zNC65+yoohN2khVGQ5I5M+e/cD1BxPsvCAA3SNpA3eDjFVEu0yXzHYMW3O13PvD0 zJ1fyEky0C/V0s/31rpCoNuY7rrV0ODPJUhYVL7CeN27UMWlrw5q5m82GpXzKo5x el3XwzNSjj0JmOydVS6DNK9laWwC1NZsmiNrTfz37QoDFgNO9xRgkN+V/685EIJw Y1q+VPzmrsrmuvo4hJA4cpVXLcl/64Hl -----END CERTIFICATE-----Generated at Sat May 31 17:53:08 2025 by rpki-client