$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: uz5Tz9VPzUDf3+KW09HfriE3+wne3Mh2CXAeLfv6x8M= Subject key identifier: 92:1C:EA:3D:10:D0:48:91:AF:9A:55:E2:8F:67:50:A1:02:A2:0A:CE Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01D4 Signing time: Thu 19 Jun 2025 02:20:35 +0000 Manifest this update: Thu 19 Jun 2025 02:20:35 +0000 Manifest next update: Thu 26 Jun 2025 02:20:35 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: d7pst11VHKjelhkF7vpXBoidzTSNbrY4nR7lH171nyk=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Jun 19 02:20:35 2025 GMT Not After : Jun 26 02:20:35 2025 GMT Subject: CN=685373f3-1e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:d4:36:ab:bf:3a:a9:29:8d:1c:bb:cc:91: d3:20:de:a8:2e:a3:5f:0d:1d:4f:20:ed:7c:31:32: e0:bc:03:18:f6:31:98:60:28:e3:ab:2e:10:5b:b3: 00:81:cc:26:f8:8c:2d:27:95:50:db:68:35:3e:4f: 11:8e:12:87:97:e4:05:96:fe:25:29:67:47:22:3d: 6a:73:5f:ed:f8:25:43:d8:d9:25:a4:c2:3c:2c:fb: 92:3f:ef:7b:25:8b:86:ef:8b:bb:29:9f:03:b1:bf: 37:af:f2:4c:c3:8b:7c:ba:1a:b4:8f:b0:a5:a4:cb: 02:bf:d7:5f:bf:21:dc:1a:a8:c2:6c:ae:9a:31:12: 5b:8c:7e:3c:1d:7e:31:fa:ab:38:ea:10:59:57:89: 49:82:ac:98:39:8a:f2:70:03:14:a6:5a:9a:c5:54: c8:fe:68:4d:97:4e:d5:f8:d3:e0:4f:ac:d9:7e:93: 88:00:ef:66:ec:25:a3:24:54:4f:86:b6:2b:c5:6d: 3c:cc:a3:11:92:25:40:9e:0e:6b:64:11:f1:2f:09: d0:68:df:4a:3b:d4:23:b6:09:ae:7a:2c:7c:08:fb: 73:f2:91:d7:13:73:ce:d3:04:94:49:21:aa:63:e8: 27:a5:1f:2a:3d:7e:9d:dc:e4:32:52:da:ff:15:ea: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1C:EA:3D:10:D0:48:91:AF:9A:55:E2:8F:67:50:A1:02:A2:0A:CE X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4f:98:74:e9:9d:ff:6e:0d:9d:dc:e5:78:fe:4a:c0:e7:ab: ef:a6:5b:f5:77:fc:96:f8:a3:da:f0:6c:cf:88:3f:aa:5f:c3: 4a:e8:56:40:da:23:70:96:31:ba:c2:45:60:2a:ce:95:84:0c: d9:b3:0a:d8:e9:79:bc:4c:b3:28:40:2e:d4:62:fe:7f:ab:4c: 42:92:83:40:f0:5d:bb:ba:f6:06:34:96:dc:1c:76:a3:bd:d9: fe:20:7d:78:d8:4e:c9:c2:32:a2:c2:b1:ca:60:53:0e:ad:4d: 97:ab:43:f6:72:a8:be:2d:0e:e8:3c:ab:5e:9a:ab:e6:bc:a9: 7c:d2:07:29:54:fe:b0:37:82:1c:3a:e5:78:ae:56:69:ee:62: 98:b8:8e:69:21:4a:12:48:00:ef:e8:f8:49:4b:b0:1f:0a:26: 14:6d:de:45:ef:18:ab:40:6c:f0:a7:d9:76:d3:90:12:84:53: 35:40:8d:6f:14:e6:b3:fb:d6:a6:7a:ca:41:9c:e1:31:d5:9a: f7:f3:3f:cf:dd:10:30:d6:f8:dd:59:67:b5:7f:f1:7d:8a:39: a1:5a:db:c7:28:b1:1c:14:f9:33:2e:41:e7:14:92:a7:0b:3b: 98:a7:ff:ba:cd:30:67:71:0c:48:f3:83:ae:e3:b4:36:ac:ba: d6:90:68:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwNjE5MDIyMDM1WhcNMjUwNjI2MDIyMDM1WjAYMRYwFAYD VQQDEw02ODUzNzNmMy0xZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbfUNqu/OqkpjRy7zJHTIN6oLqNfDR1PIO18MTLgvAMY9jGYYCjjqy4QW7MA gcwm+IwtJ5VQ22g1Pk8RjhKHl+QFlv4lKWdHIj1qc1/t+CVD2NklpMI8LPuSP+97 JYuG74u7KZ8Dsb83r/JMw4t8uhq0j7ClpMsCv9dfvyHcGqjCbK6aMRJbjH48HX4x +qs46hBZV4lJgqyYOYrycAMUplqaxVTI/mhNl07V+NPgT6zZfpOIAO9m7CWjJFRP hrYrxW08zKMRkiVAng5rZBHxLwnQaN9KO9Qjtgmueix8CPtz8pHXE3PO0wSUSSGq Y+gnpR8qPX6d3OQyUtr/Feo7swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIc6j0Q 0EiRr5pV4o9nUKECogrOMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABT5h06Z3/bg2d3OV4/krA56vvplv1d/yW+KPa8GzPiD+qX8NK6FZA 2iNwljG6wkVgKs6VhAzZswrY6Xm8TLMoQC7UYv5/q0xCkoNA8F27uvYGNJbcHHaj vdn+IH142E7JwjKiwrHKYFMOrU2Xq0P2cqi+LQ7oPKtemqvmvKl80gcpVP6wN4Ic OuV4rlZp7mKYuI5pIUoSSADv6PhJS7AfCiYUbd5F7xirQGzwp9l205AShFM1QI1v FOaz+9amespBnOEx1Zr38z/P3RAw1vjdWWe1f/F9ijmhWtvHKLEcFPkzLkHnFJKn CzuYp/+6zTBncQxI84Ou47Q2rLrWkGgc -----END CERTIFICATE-----Generated at Fri Jun 20 07:14:10 2025 by rpki-client