$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: 1TBQ7o1elHXtnKvafzleiesZaE6xdJ5tMbg/vwfmAGg= Subject key identifier: E4:B8:71:F4:A7:28:33:5D:1A:0C:47:8B:19:48:3D:C8:1C:5F:33:32 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: D3 Signing time: Tue 03 Jun 2025 05:31:42 +0000 Manifest this update: Tue 03 Jun 2025 05:31:42 +0000 Manifest next update: Tue 10 Jun 2025 05:31:42 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: 1Lez/8wzLSdB58YxH9yQaQyNMzhNu+5o5S8E6koibN0=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Jun 3 05:31:42 2025 GMT Not After : Jun 10 05:31:42 2025 GMT Subject: CN=683e88be-826c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:4f:12:7c:69:0f:04:6b:0a:98:46:be:fd: 4f:aa:93:b0:86:21:3b:e3:ab:80:67:fd:62:d8:9b: 20:45:0b:52:e9:80:67:43:28:9f:3a:fd:ce:58:69: 65:61:a1:94:89:6a:95:ac:a3:bb:6a:17:1e:15:b8: 18:94:67:54:6b:44:5d:76:26:b3:c0:da:8e:79:df: a6:b9:aa:cc:58:0b:dc:ef:ed:ac:d1:bd:ff:26:8d: ea:1a:25:c0:3f:25:70:cf:04:04:78:5f:78:20:4b: 01:7c:cf:1d:8a:b9:9e:06:50:97:26:42:28:aa:48: 55:e0:28:53:4d:49:f1:66:23:60:7e:a5:c1:46:11: 89:53:9c:d7:16:2b:fb:34:3d:ca:6d:31:10:f4:91: f5:17:4f:05:ef:ac:c3:b3:89:c5:80:9c:54:f1:8b: 04:d8:33:5e:df:db:61:d7:cb:b5:9f:09:7e:e3:be: 51:35:cf:3e:2a:fa:72:51:e0:39:20:05:db:dc:45: 33:09:ca:ea:7e:1b:4f:ab:cc:0e:8c:a4:0a:ee:41: ed:3e:d1:07:d6:ee:02:c0:7e:55:3b:23:41:fc:e7: 1e:b7:d1:11:fe:ae:9b:d7:10:df:c3:66:0c:18:cd: b1:6f:51:51:74:54:94:d3:35:68:89:62:e5:a9:d1: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B8:71:F4:A7:28:33:5D:1A:0C:47:8B:19:48:3D:C8:1C:5F:33:32 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:73:92:ad:30:b4:18:b9:9b:dd:e3:a6:6e:af:da:17:c3:d0: c1:36:6b:79:2f:ab:77:33:53:7d:68:c7:c8:fe:83:8b:36:52: 4e:0f:2b:c7:8a:af:cf:6d:a8:9a:db:14:80:78:34:e8:23:ca: 94:ce:45:54:13:0a:c5:12:e0:b8:a3:3a:de:8c:22:ca:3d:04: 5d:cb:17:bc:bf:90:f3:86:e2:6a:0e:c6:d0:71:df:fa:2a:a9: 6c:d1:19:cc:95:c6:56:b6:8f:93:2a:6a:68:a3:04:c5:4a:31: 41:f1:da:78:57:e2:f1:22:23:61:05:b7:4b:7a:21:a1:78:bc: d7:30:ea:04:e4:84:75:6e:c4:12:4c:79:3a:05:67:5a:8a:85: 5d:f2:89:58:a6:ef:db:1d:59:0f:d9:73:78:f2:a1:88:36:3b: ac:36:44:2e:d9:af:9e:8f:81:20:0b:aa:68:d3:28:79:e4:26: e1:0d:44:18:1e:fa:17:47:1f:3c:6a:f6:6e:41:fd:bd:c2:4f: 65:e1:b3:74:8e:b8:2f:cb:80:68:5d:59:e0:bc:11:49:7f:73: 4f:e2:f6:02:ab:48:9a:17:c2:69:07:ed:1e:96:a7:34:9b:61: 84:3b:23:b5:33:7a:3b:5e:58:e6:23:4a:db:7f:4e:59:01:1a: c4:71:55:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwNjAzMDUzMTQyWhcNMjUwNjEwMDUzMTQyWjAYMRYwFAYD VQQDEw02ODNlODhiZS04MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwVPEnxpDwRrCphGvv1PqpOwhiE746uAZ/1i2JsgRQtS6YBnQyifOv3OWGll YaGUiWqVrKO7ahceFbgYlGdUa0RddiazwNqOed+muarMWAvc7+2s0b3/Jo3qGiXA PyVwzwQEeF94IEsBfM8dirmeBlCXJkIoqkhV4ChTTUnxZiNgfqXBRhGJU5zXFiv7 ND3KbTEQ9JH1F08F76zDs4nFgJxU8YsE2DNe39th18u1nwl+475RNc8+KvpyUeA5 IAXb3EUzCcrqfhtPq8wOjKQK7kHtPtEH1u4CwH5VOyNB/Ocet9ER/q6b1xDfw2YM GM2xb1FRdFSU0zVoiWLlqdFDowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS4cfSn KDNdGgxHixlIPcgcXzMyMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsc5KtMLQYuZvd46Zur9oXw9DBNmt5L6t3M1N9aMfI/oOLNlJODyvH iq/Pbaia2xSAeDToI8qUzkVUEwrFEuC4ozrejCLKPQRdyxe8v5DzhuJqDsbQcd/6 Kqls0RnMlcZWto+TKmpoowTFSjFB8dp4V+LxIiNhBbdLeiGheLzXMOoE5IR1bsQS THk6BWdaioVd8olYpu/bHVkP2XN48qGINjusNkQu2a+ej4EgC6po0yh55CbhDUQY HvoXRx88avZuQf29wk9l4bN0jrgvy4BoXVngvBFJf3NP4vYCq0iaF8JpB+0elqc0 m2GEOyO1M3o7XljmI0rbf05ZARrEcVUB -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:39 2025 by rpki-client