$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: S9pFzr43e51e/l1I+1lJZX7AgUQ/jtWfyhfdrmGp1EE= Subject key identifier: F9:16:23:88:DA:9B:32:4C:5D:76:64:10:4F:B2:0A:76:2E:BB:A4:1B Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01CA Signing time: Sat 31 May 2025 02:42:44 +0000 Manifest this update: Sat 31 May 2025 02:42:43 +0000 Manifest next update: Sat 07 Jun 2025 02:42:43 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: zVqoowWULpR4on3gkf5/hMASVeUD25skUWYKx7wFXjA=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: May 31 02:42:43 2025 GMT Not After : Jun 7 02:42:43 2025 GMT Subject: CN=683a6ca3-c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:e4:a0:02:e9:ef:4b:6b:83:9a:e7:55:ed: 41:93:af:ac:89:4d:5c:18:91:0b:e6:ee:5f:ca:d4: e5:03:27:fe:1c:96:5e:f2:28:d7:18:9b:97:d4:ac: 1b:63:ff:12:06:5c:d6:33:00:4d:05:d8:5a:42:8b: 7a:dd:f4:9a:15:82:42:c8:63:35:2f:3d:d6:85:a2: 0b:8f:42:81:c0:07:3a:56:0c:c5:cc:93:1e:b7:dc: 74:5f:d9:9b:bd:ba:30:e0:30:38:1f:0e:9f:9e:e6: c3:5a:49:af:ce:05:4a:09:e0:f0:11:7b:fa:7a:5b: 7a:5a:56:55:7d:5a:2e:dc:0a:6b:9e:99:1a:6a:9d: f4:7c:23:a5:44:2a:83:8e:2f:96:b1:24:a9:55:a3: 6d:43:a2:ab:7c:8f:c3:7d:86:c2:af:53:99:ce:fa: 43:b5:fd:eb:75:2d:bd:78:99:94:fe:40:30:57:a5: c3:68:af:11:fe:dc:1a:3b:e7:fb:31:19:49:7f:37: 32:ef:97:52:28:c1:04:1f:1d:93:d0:95:de:04:9f: b2:18:ff:e6:5b:21:6d:47:18:10:75:8b:2e:e5:09: 4e:62:15:e1:7e:e7:8c:d0:6d:f6:2a:b0:e1:73:94: c0:7d:2e:78:aa:47:0d:b1:38:07:69:34:0a:5e:6b: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:16:23:88:DA:9B:32:4C:5D:76:64:10:4F:B2:0A:76:2E:BB:A4:1B X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:06:03:bc:5b:ce:76:1f:29:82:4f:e3:b8:a8:8b:dd:ba:99: 1a:07:36:c0:45:71:36:d3:cb:fd:10:29:91:cf:27:6d:21:ca: 77:17:88:52:6c:86:fb:0e:6a:4d:a9:00:87:7b:6f:1f:b1:7d: 68:0c:ff:41:13:ce:8c:cb:8a:b1:7e:25:a8:c9:39:9a:55:86: 4e:1c:9a:76:9c:d1:0b:55:9c:83:af:ec:6a:62:23:e8:9b:38: d9:25:6b:40:20:5d:3d:45:d0:31:a7:d3:8b:b0:f0:64:dd:47: a9:2a:1e:60:b9:8b:58:36:8c:42:f8:8a:21:d1:eb:94:66:25: b0:20:ce:8b:97:98:f2:6b:22:18:12:65:89:a9:c4:eb:6a:7a: aa:ff:86:39:ac:ad:7f:80:cf:f2:eb:c3:21:9b:a0:37:84:d1: 12:3c:79:b6:71:a2:8e:bd:07:ea:85:46:7a:90:ad:ee:cd:ec: b6:3e:72:df:05:17:25:8e:a8:61:03:aa:1b:df:0c:ed:7e:c5: 52:79:61:6b:6b:78:c2:86:2c:2a:29:3b:f8:4d:e9:de:6b:15: 8b:a0:0b:76:5f:c9:1a:43:60:52:dc:a8:a3:6b:61:8e:45:ad: 97:fd:14:d9:0e:ff:16:31:4b:21:5c:3d:c9:23:aa:72:79:09: 14:a5:e9:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwNTMxMDI0MjQzWhcNMjUwNjA3MDI0MjQzWjAYMRYwFAYD VQQDEw02ODNhNmNhMy1jMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6LkoALp70trg5rnVe1Bk6+siU1cGJEL5u5fytTlAyf+HJZe8ijXGJuX1Kwb Y/8SBlzWMwBNBdhaQot63fSaFYJCyGM1Lz3WhaILj0KBwAc6VgzFzJMet9x0X9mb vbow4DA4Hw6fnubDWkmvzgVKCeDwEXv6elt6WlZVfVou3Aprnpkaap30fCOlRCqD ji+WsSSpVaNtQ6KrfI/DfYbCr1OZzvpDtf3rdS29eJmU/kAwV6XDaK8R/twaO+f7 MRlJfzcy75dSKMEEHx2T0JXeBJ+yGP/mWyFtRxgQdYsu5QlOYhXhfueM0G32KrDh c5TAfS54qkcNsTgHaTQKXmu9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkWI4ja mzJMXXZkEE+yCnYuu6QbMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+BgO8W852HymCT+O4qIvdupkaBzbARXE208v9ECmRzydtIcp3F4hS bIb7DmpNqQCHe28fsX1oDP9BE86My4qxfiWoyTmaVYZOHJp2nNELVZyDr+xqYiPo mzjZJWtAIF09RdAxp9OLsPBk3UepKh5guYtYNoxC+Ioh0euUZiWwIM6Ll5jyayIY EmWJqcTranqq/4Y5rK1/gM/y68Mhm6A3hNESPHm2caKOvQfqhUZ6kK3uzey2PnLf BRcljqhhA6ob3wztfsVSeWFra3jChiwqKTv4TeneaxWLoAt2X8kaQ2BS3Kija2GO Ra2X/RTZDv8WMUshXD3JI6pyeQkUpel4 -----END CERTIFICATE-----Generated at Sat May 31 16:57:51 2025 by rpki-client