$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: ZK5USX9uPCtKh/2+I4K4lziuf5k/IfgE+/pMTEWaSUY= Subject key identifier: 97:31:39:73:D3:6D:2C:60:9C:9C:E5:A0:42:26:7D:AD:8A:3C:E9:AD Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1517 Signing time: Fri 30 May 2025 17:00:35 +0000 Manifest this update: Fri 30 May 2025 17:00:35 +0000 Manifest next update: Fri 06 Jun 2025 17:00:35 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: 0OL/3MiD0iqFw36DtcIpSn3sGl+19pdvQSm595yaeVQ=) 2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5426 (0x1532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: May 30 17:00:35 2025 GMT Not After : Jun 6 17:00:35 2025 GMT Subject: CN=6839e433-ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:46:36:38:11:d0:32:57:9e:e0:92:59:cb: f3:55:35:2a:22:9e:c8:6c:a7:32:49:8f:71:ed:a8: d2:a7:3e:9f:51:31:43:e1:49:4b:9d:52:9e:1b:ae: 71:fe:81:e4:4e:50:a7:b2:f6:df:92:38:d3:c7:e9: b9:93:13:66:7a:33:af:5a:09:5c:b3:1d:f8:34:cc: 01:f4:8a:7c:24:77:60:66:8a:5f:55:3b:50:df:44: dc:8f:db:64:d1:7c:01:15:06:f8:85:26:10:03:e7: bc:81:a7:cd:b1:bb:99:9f:30:6c:bd:b6:9e:65:e2: 0b:ca:b2:5f:43:92:c4:45:64:32:b6:2e:bb:a1:74: df:e4:dc:85:3f:28:19:cb:1a:c2:5c:76:4a:a6:94: df:f0:93:3c:aa:7c:e5:e1:b7:54:d3:91:c9:36:0d: aa:db:36:f1:02:40:00:c8:c1:82:cf:04:27:03:a9: 65:16:43:ce:af:3a:1e:92:b5:87:17:d0:05:f1:eb: cd:e4:30:14:0e:23:ce:7a:b6:87:7f:6a:04:e7:79: 0a:da:21:45:57:17:39:44:41:e3:1a:c2:2b:4b:9c: 3e:9b:f9:9f:bb:2b:7c:4b:10:ac:59:97:e0:bc:a6: b7:49:65:bf:c0:84:ed:0e:11:96:70:99:9d:f9:72: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:39:73:D3:6D:2C:60:9C:9C:E5:A0:42:26:7D:AD:8A:3C:E9:AD X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a2:26:ba:3b:85:cc:ba:ec:00:cb:85:11:32:9d:32:72:cd: e6:75:7b:2f:7b:8e:fe:e9:02:f8:8e:f4:8e:93:0d:eb:af:6b: ef:46:5a:52:45:6e:24:a9:de:f9:71:3d:42:be:80:46:22:f1: a4:15:4a:52:1e:88:90:90:42:2f:5b:5a:92:aa:0a:21:95:f2: 1d:23:63:62:ea:ce:3e:e9:78:e3:d6:c5:3a:79:46:23:92:ba: e3:34:6b:4e:c9:dc:77:37:bb:ab:9f:db:93:4a:8b:e0:25:bc: 0e:d2:d8:97:82:95:c4:94:c3:87:74:93:6f:e4:f3:1e:3b:61: 6a:e3:03:61:1c:8e:75:31:33:87:0a:00:4f:57:e5:a0:e2:fe: 41:77:4c:93:ea:f5:4e:98:47:fd:4a:9b:04:01:c6:c0:10:21: e9:4e:d4:7d:97:ba:8e:87:1b:9b:e7:f2:3b:6f:7f:44:9b:70: 3f:71:ce:03:30:30:83:97:19:5d:d8:86:1e:bf:15:0f:2e:5f: 8b:ad:01:e1:6b:4f:2a:74:99:4b:d1:01:63:a6:76:09:e4:ac: 76:9e:8d:77:52:67:a7:02:c7:91:52:0f:42:eb:2d:5c:2b:8d: ce:90:da:89:03:32:c0:a3:de:03:16:15:7c:e8:dd:6a:25:97: 4f:69:ba:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNTMwMTcwMDM1WhcNMjUwNjA2MTcwMDM1WjAYMRYwFAYD VQQDEw02ODM5ZTQzMy1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4JGNjgR0DJXnuCSWcvzVTUqIp7IbKcySY9x7ajSpz6fUTFD4UlLnVKeG65x /oHkTlCnsvbfkjjTx+m5kxNmejOvWglcsx34NMwB9Ip8JHdgZopfVTtQ30Tcj9tk 0XwBFQb4hSYQA+e8gafNsbuZnzBsvbaeZeILyrJfQ5LERWQyti67oXTf5NyFPygZ yxrCXHZKppTf8JM8qnzl4bdU05HJNg2q2zbxAkAAyMGCzwQnA6llFkPOrzoekrWH F9AF8evN5DAUDiPOeraHf2oE53kK2iFFVxc5REHjGsIrS5w+m/mfuyt8SxCsWZfg vKa3SWW/wITtDhGWcJmd+XKSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcxOXPT bSxgnJzloEImfa2KPOmtMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHoia6O4XMuuwAy4URMp0ycs3mdXsve47+6QL4jvSOkw3rr2vvRlpS RW4kqd75cT1CvoBGIvGkFUpSHoiQkEIvW1qSqgohlfIdI2Ni6s4+6Xjj1sU6eUYj krrjNGtOydx3N7urn9uTSovgJbwO0tiXgpXElMOHdJNv5PMeO2Fq4wNhHI51MTOH CgBPV+Wg4v5Bd0yT6vVOmEf9SpsEAcbAECHpTtR9l7qOhxub5/I7b39Em3A/cc4D MDCDlxld2IYevxUPLl+LrQHha08qdJlL0QFjpnYJ5Kx2no13UmenAseRUg9C6y1c K43OkNqJAzLAo94DFhV86N1qJZdPabrU -----END CERTIFICATE-----Generated at Sat May 31 16:55:06 2025 by rpki-client