$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: BMbDBry2uBNvY0dV95+uoCqvyAEkP1J2yLw4WZ8kRBs= Subject key identifier: 97:B9:BE:5A:EE:C2:FD:DF:CC:60:72:5A:0E:77:B3:EF:46:90:8F:8D Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0E25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0E0A Signing time: Fri 30 May 2025 18:00:51 +0000 Manifest this update: Fri 30 May 2025 18:00:51 +0000 Manifest next update: Fri 06 Jun 2025 18:00:51 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: quApxHd9I0uhhW6tGlvl8PXZEBGqgpebznB2DBkPHWc=) 2: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: RzHUUv/miUNX3icVSP0eFdue2uGb59/3arKmFqnz2Fc=) 3: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: fXxSo682fkgrV8puX+aCaQZxmTNLL+rJcYQD485NwzM=) 4: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: s3xebHa/jipF1DOC4szye5Ddv89P0OTkiIBe/5lBHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: May 30 18:00:51 2025 GMT Not After : Jun 6 18:00:51 2025 GMT Subject: CN=6839f253-ef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:76:5b:66:c8:f7:95:56:b9:d8:c0:a3:e3: e0:bc:70:57:28:ab:45:e8:03:07:a3:b1:b6:8a:e5: 5e:3a:8c:f2:41:0c:db:5c:a3:ac:01:ce:b3:a5:d2: 22:4a:5c:e1:ed:50:8e:28:eb:1f:31:49:00:46:d4: 32:78:50:2f:4e:4b:f4:0a:20:1a:76:fe:36:8b:2f: 99:8c:32:11:52:1d:1e:f1:f2:c2:a9:97:9a:9c:75: 46:0e:77:03:6a:4f:2a:f7:40:a1:da:46:fa:f7:7d: c1:b9:e7:07:69:f2:d9:e4:f4:5b:1b:a1:e3:84:90: a4:27:d5:b5:3a:04:5a:74:15:ba:81:10:96:2c:48: 13:2e:1e:97:a3:0b:13:97:ce:a1:69:13:63:5c:0d: 4c:d2:47:3e:07:6b:09:9c:af:44:61:7f:b3:63:8f: 1d:e1:3d:62:b0:24:e6:ac:8b:a5:c8:f3:0a:0b:b2: 20:ac:d2:d7:22:7d:2b:b5:de:d1:33:0f:18:9c:c0: 47:bd:63:4b:07:d2:0c:47:1c:ae:9d:f5:03:f4:fc: 0b:32:8b:aa:1d:6f:13:f5:e2:5b:b8:11:0e:40:38: dc:77:dd:7d:ab:21:64:ed:91:bb:94:77:05:71:b5: 6c:cc:aa:8c:8e:c3:0d:2b:0d:0b:f4:7b:fd:8b:93: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B9:BE:5A:EE:C2:FD:DF:CC:60:72:5A:0E:77:B3:EF:46:90:8F:8D X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:67:ca:c0:5b:23:5a:57:b9:8b:35:9c:cd:d5:bb:5d:fb:3e: 19:23:a8:b6:07:6e:cc:ab:50:5b:e8:02:6e:2c:cd:e4:fa:3a: cd:f8:d4:6c:4a:11:2c:cb:db:fe:30:13:60:fe:3e:f4:84:51: 31:d0:3b:4e:33:ae:67:72:05:29:46:55:7c:be:f9:a8:2e:30: 12:80:99:64:22:d9:10:d3:ee:51:ba:ac:b7:cf:b9:c0:41:0e: 6d:f3:76:71:d3:2c:0d:24:7e:6f:c4:42:fb:28:db:02:d2:93: d1:08:3b:53:56:ef:22:98:64:6f:f3:1a:4f:fe:8e:96:6c:e4: ed:78:3e:95:58:e5:6c:9a:ec:c7:26:2f:26:e5:45:07:a7:cb: e9:c6:fd:63:92:61:8e:95:95:bd:10:3c:83:e1:84:fc:91:16: 57:48:1b:e9:20:6c:a5:89:9f:78:38:45:06:2b:6f:23:bc:6b: fe:00:6b:63:03:85:70:95:17:80:34:10:0f:fb:d9:11:00:7e: 94:43:67:5a:8c:16:48:9a:a4:0d:65:c7:98:2a:2d:da:c3:61: b5:f7:38:7b:9e:be:30:22:37:6c:23:01:d1:d0:97:0a:7e:ac: 2e:4d:c9:2c:3e:f0:e2:58:91:c0:12:bc:77:22:80:68:45:93: f6:9a:d6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjUwNTMwMTgwMDUxWhcNMjUwNjA2MTgwMDUxWjAYMRYwFAYD VQQDEw02ODM5ZjI1My1lZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArst2W2bI95VWudjAo+PgvHBXKKtF6AMHo7G2iuVeOozyQQzbXKOsAc6zpdIi Slzh7VCOKOsfMUkARtQyeFAvTkv0CiAadv42iy+ZjDIRUh0e8fLCqZeanHVGDncD ak8q90Ch2kb6933BuecHafLZ5PRbG6HjhJCkJ9W1OgRadBW6gRCWLEgTLh6XowsT l86haRNjXA1M0kc+B2sJnK9EYX+zY48d4T1isCTmrIulyPMKC7IgrNLXIn0rtd7R Mw8YnMBHvWNLB9IMRxyunfUD9PwLMouqHW8T9eJbuBEOQDjcd919qyFk7ZG7lHcF cbVszKqMjsMNKw0L9Hv9i5NNPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe5vlru wv3fzGByWg53s+9GkI+NMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZ8rAWyNaV7mLNZzN1btd+z4ZI6i2B27Mq1Bb6AJuLM3k+jrN+NRs ShEsy9v+MBNg/j70hFEx0DtOM65ncgUpRlV8vvmoLjASgJlkItkQ0+5Ruqy3z7nA QQ5t83Zx0ywNJH5vxEL7KNsC0pPRCDtTVu8imGRv8xpP/o6WbOTteD6VWOVsmuzH Ji8m5UUHp8vpxv1jkmGOlZW9EDyD4YT8kRZXSBvpIGyliZ94OEUGK28jvGv+AGtj A4VwlReANBAP+9kRAH6UQ2dajBZImqQNZceYKi3aw2G19zh7nr4wIjdsIwHR0JcK fqwuTcksPvDiWJHAErx3IoBoRZP2mtYB -----END CERTIFICATE-----Generated at Sat May 31 17:46:27 2025 by rpki-client