$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: uqkZ2kA3G1risZYOP6ghHeWkmWUAA5hNQsCaAxB4RZs= Subject key identifier: 6B:A4:7D:98:7A:7C:9F:64:7B:FE:E3:EE:33:3F:B4:95:54:E4:15:FB Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01BC Signing time: Thu 01 May 2025 02:10:22 +0000 Manifest this update: Thu 01 May 2025 02:10:21 +0000 Manifest next update: Thu 08 May 2025 02:10:21 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: x7NsJBLeeN3Knos763X/dzzng4oT40zAz+rkey5JEZ4=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: May 1 02:10:21 2025 GMT Not After : May 8 02:10:21 2025 GMT Subject: CN=6812d80d-810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:98:5c:ce:81:2c:6b:3b:47:45:4e:d9:c7: 7e:fb:c7:23:86:f1:cf:de:f0:88:8e:9a:c9:d5:37: f7:7a:43:0f:4c:ca:5d:5d:a4:bd:e0:46:c2:4c:c2: 42:b5:22:bc:4c:3c:85:15:c2:e8:7a:51:63:cf:fb: 11:2d:a3:d5:a5:d4:45:8c:43:be:bc:20:6b:e7:fd: 5b:c2:60:ea:c3:a4:01:a7:fb:6a:41:57:7a:be:c5: 17:83:da:b2:02:a4:69:cd:7d:ad:7d:b8:d6:d5:29: 4b:a5:82:c0:b4:32:ae:55:8f:e7:5f:bd:be:49:9f: 87:c6:62:03:e0:8c:33:ed:d3:53:df:f0:4b:72:48: 24:e7:5d:51:1b:24:58:be:75:bc:de:0e:2f:f1:40: 82:59:72:77:01:38:17:83:89:0e:43:4b:40:9b:b3: a6:c3:4c:05:ba:01:eb:0e:69:ee:15:38:b6:23:73: 8a:5d:96:53:86:2f:0b:0b:6f:bf:2b:b4:f2:63:7b: 09:6b:60:c0:7d:aa:27:02:5f:b6:ce:06:fe:d1:00: a2:96:b2:bf:47:06:b9:a3:b9:44:75:d1:51:02:fb: b4:47:4f:02:cf:3d:74:7b:75:2d:a1:d9:15:a0:19: 96:18:1f:56:2d:64:d0:de:69:92:2e:f1:14:93:84: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A4:7D:98:7A:7C:9F:64:7B:FE:E3:EE:33:3F:B4:95:54:E4:15:FB X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:34:b2:b0:5f:f2:cf:53:cc:93:05:81:21:79:ed:e4:98:4c: 90:24:0c:5a:fb:ab:4c:16:2d:e9:df:bb:02:e8:c6:56:9a:46: 27:eb:f9:3e:09:b0:fe:48:9c:38:b5:48:36:2c:f0:81:69:58: d5:95:fc:0c:b3:2a:8c:1b:91:01:56:34:1b:b9:cd:4e:f2:fa: 89:ec:9f:00:94:07:86:f5:f6:bf:48:2f:96:f6:66:5d:4e:ee: d3:ad:da:59:de:f6:92:e8:0f:07:1a:c0:b7:c1:c5:8b:12:27: 5e:41:6f:bb:b2:5b:a6:3a:8a:e8:d4:db:33:3d:a5:6c:73:03: 4e:7e:ba:2f:a5:fe:33:2a:b5:e3:5d:66:cf:d1:78:a8:ca:ee: 19:fb:46:f7:9d:f3:ad:c0:c7:ff:df:b7:36:93:f9:01:b0:81: 57:3d:d6:60:0d:e1:d6:ec:fb:42:01:65:f7:f2:9a:2f:ef:de: a2:15:e5:4c:8c:7d:8d:67:6c:44:56:c2:e7:fd:8d:65:01:56: 95:06:0e:42:c5:35:fd:db:65:bc:bc:5d:21:0f:12:5a:2d:46: 30:cd:ef:37:8d:fc:a2:40:c2:16:c8:0a:44:0c:01:6b:a9:9b: b1:09:3f:d0:2c:16:00:99:c2:c6:02:c4:1f:78:43:e2:70:50: af:ca:d9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwNTAxMDIxMDIxWhcNMjUwNTA4MDIxMDIxWjAYMRYwFAYD VQQDEw02ODEyZDgwZC04MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PKYXM6BLGs7R0VO2cd++8cjhvHP3vCIjprJ1Tf3ekMPTMpdXaS94EbCTMJC tSK8TDyFFcLoelFjz/sRLaPVpdRFjEO+vCBr5/1bwmDqw6QBp/tqQVd6vsUXg9qy AqRpzX2tfbjW1SlLpYLAtDKuVY/nX72+SZ+HxmID4Iwz7dNT3/BLckgk511RGyRY vnW83g4v8UCCWXJ3ATgXg4kOQ0tAm7Omw0wFugHrDmnuFTi2I3OKXZZThi8LC2+/ K7TyY3sJa2DAfaonAl+2zgb+0QCilrK/Rwa5o7lEddFRAvu0R08Czz10e3UtodkV oBmWGB9WLWTQ3mmSLvEUk4ShBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGukfZh6 fJ9ke/7j7jM/tJVU5BX7MB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcNLKwX/LPU8yTBYEhee3kmEyQJAxa+6tMFi3p37sC6MZWmkYn6/k+ CbD+SJw4tUg2LPCBaVjVlfwMsyqMG5EBVjQbuc1O8vqJ7J8AlAeG9fa/SC+W9mZd Tu7TrdpZ3vaS6A8HGsC3wcWLEideQW+7slumOoro1NszPaVscwNOfrovpf4zKrXj XWbP0Xioyu4Z+0b3nfOtwMf/37c2k/kBsIFXPdZgDeHW7PtCAWX38pov796iFeVM jH2NZ2xEVsLn/Y1lAVaVBg5CxTX922W8vF0hDxJaLUYwze83jfyiQMIWyApEDAFr qZuxCT/QLBYAmcLGAsQfeEPicFCvytkh -----END CERTIFICATE-----Generated at Thu May 1 05:05:07 2025 by rpki-client