$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: SxDz4NYtCrjSnHGrI/O90Ibybp8vjAweworPtgHWeko= Subject key identifier: AC:51:1C:2B:F4:54:E5:62:DF:D5:38:3E:FE:88:74:2F:7A:22:28:BF Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01F5 Signing time: Sat 23 Aug 2025 02:39:16 +0000 Manifest this update: Sat 23 Aug 2025 02:39:15 +0000 Manifest next update: Sat 30 Aug 2025 02:39:15 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: QQyNLH9zI+ssAdIaJM47cugkTsLLWgjZIxvjPVnrCCU=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Aug 23 02:39:15 2025 GMT Not After : Aug 30 02:39:15 2025 GMT Subject: CN=68a929d3-d292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:2d:fc:a8:a3:66:a2:b1:25:ce:be:52:3c: 21:f9:b9:5b:b3:76:0c:45:ce:fc:0c:c9:72:23:24: 05:eb:4f:49:de:e6:55:e4:5b:75:d9:d8:07:9e:74: 78:cd:25:62:96:39:16:b1:2f:83:36:d5:0d:a1:3a: 0d:4e:72:19:22:3c:10:b2:ab:01:03:ad:6a:11:22: 04:df:03:3e:cb:a8:ba:ee:ea:d4:46:91:08:1b:5c: 57:8b:b0:3c:84:0a:37:54:ad:bf:ba:c3:f3:82:4c: d1:d5:92:cf:08:02:7a:6f:a8:d6:78:4d:3d:77:b5: dc:2f:73:21:a2:98:8e:d7:a2:ec:13:f3:ee:3d:93: 67:bf:c4:27:0e:b4:50:c8:a2:2a:83:2a:64:68:6a: f2:59:5b:58:a4:f0:d9:b7:7b:a1:99:95:8d:43:11: 02:7f:cd:a4:e9:a6:27:77:5f:87:c0:ee:7f:de:dd: 43:d5:6d:01:a0:a6:27:ae:14:37:bd:52:11:29:84: 60:4c:c3:5c:70:f1:96:7a:a4:e9:79:b1:ef:6e:e7: 7b:50:f2:16:bc:87:d5:8e:3d:0c:45:84:4f:35:57: 6b:82:90:ac:ca:bf:93:ef:35:f2:89:73:e0:72:4f: a0:38:93:d1:ad:33:98:dd:d9:92:d6:73:e0:f8:48: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:51:1C:2B:F4:54:E5:62:DF:D5:38:3E:FE:88:74:2F:7A:22:28:BF X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3a:c0:c1:c8:3f:02:17:53:95:57:d0:61:dd:e3:2c:b3:ae: 56:79:a0:f1:2b:f6:f0:d6:30:00:a6:9c:70:c4:d0:87:17:7b: fd:2b:f7:db:30:e6:74:bd:cb:02:b3:ef:a9:49:ae:76:2e:d2: aa:8d:84:6a:4d:f6:1c:dc:6e:91:b7:97:20:11:e1:70:93:31: eb:e8:a8:f9:3f:24:2d:5b:56:00:05:db:80:6a:e2:26:d5:1e: 08:aa:0b:06:fd:a5:e4:dd:f1:83:83:de:15:37:ee:0d:66:fe: 01:e6:25:e0:60:83:de:04:b7:c3:3b:82:9c:a5:76:b1:e9:44: a4:05:b8:5f:9c:cb:6e:e5:45:62:19:bf:de:d0:ef:29:56:1c: d3:5a:ca:a0:c3:ad:0b:4f:4f:38:46:03:cb:a2:d5:b7:a7:41: c9:3f:d1:23:5a:d0:fe:41:5e:00:94:f2:3a:4b:f7:d3:3d:3c: 75:60:c9:96:04:e6:41:82:1e:50:74:c6:2c:08:08:2a:01:7d: e6:af:91:70:bf:3d:a9:63:95:a1:b9:01:b6:c0:33:6b:9c:51: 5e:82:e6:d5:ab:90:90:15:8b:a7:89:a5:b6:56:7a:e1:a3:38: e1:16:e7:55:87:c5:b9:80:37:1f:1c:7a:98:c5:7c:88:67:7e: 6f:f8:e1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwODIzMDIzOTE1WhcNMjUwODMwMDIzOTE1WjAYMRYwFAYD VQQDEw02OGE5MjlkMy1kMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yst/KijZqKxJc6+Ujwh+blbs3YMRc78DMlyIyQF609J3uZV5Ft12dgHnnR4 zSViljkWsS+DNtUNoToNTnIZIjwQsqsBA61qESIE3wM+y6i67urURpEIG1xXi7A8 hAo3VK2/usPzgkzR1ZLPCAJ6b6jWeE09d7XcL3MhopiO16LsE/PuPZNnv8QnDrRQ yKIqgypkaGryWVtYpPDZt3uhmZWNQxECf82k6aYnd1+HwO5/3t1D1W0BoKYnrhQ3 vVIRKYRgTMNccPGWeqTpebHvbud7UPIWvIfVjj0MRYRPNVdrgpCsyr+T7zXyiXPg ck+gOJPRrTOY3dmS1nPg+EjnvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxRHCv0 VOVi39U4Pv6IdC96Iii/MB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiOsDByD8CF1OVV9Bh3eMss65WeaDxK/bw1jAAppxwxNCHF3v9K/fb MOZ0vcsCs++pSa52LtKqjYRqTfYc3G6Rt5cgEeFwkzHr6Kj5PyQtW1YABduAauIm 1R4IqgsG/aXk3fGDg94VN+4NZv4B5iXgYIPeBLfDO4KcpXax6USkBbhfnMtu5UVi Gb/e0O8pVhzTWsqgw60LT084RgPLotW3p0HJP9EjWtD+QV4AlPI6S/fTPTx1YMmW BOZBgh5QdMYsCAgqAX3mr5Fwvz2pY5WhuQG2wDNrnFFegubVq5CQFYuniaW2Vnrh ozjhFudVh8W5gDcfHHqYxXyIZ35v+OEN -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:55 2025 by rpki-client