$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: LXn3HrYPSx6hQ5BUApkjeXOkU4gY+ZhJf+/1CIPYhN4= Subject key identifier: 43:F3:BF:4A:34:A0:DB:08:E6:EE:E0:E4:A4:A2:F7:EC:00:01:75:BE Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 0129 Signing time: Sun 11 May 2025 03:31:11 +0000 Manifest this update: Sun 11 May 2025 03:31:10 +0000 Manifest next update: Sun 18 May 2025 03:31:10 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: MTvSIG8txsqJsD0dNX7leDPkbgx9mxZhptjGUU2KJcc=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: L+aSJH2lWC1anAfV1QDeoFg2+6ljff+C6eVKVad/Lj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: May 11 03:31:10 2025 GMT Not After : May 18 03:31:10 2025 GMT Subject: CN=682019ff-8f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:53:99:c6:7c:b0:a5:e7:07:df:d8:00:8d: 8e:34:0b:b0:1f:16:e0:4e:1e:e6:46:65:03:5c:33: aa:ad:20:64:77:87:b7:b5:c1:3a:e0:aa:51:27:a6: 93:a7:19:1f:fa:55:9c:d3:73:c0:c8:3a:75:60:69: 27:49:3a:73:41:75:fd:b1:31:9f:97:97:ce:87:ec: f6:18:bd:71:9f:e5:b6:d2:b0:95:cd:ab:62:7b:43: 01:2e:47:3c:5d:d5:2d:69:fc:2d:be:67:93:a7:26: 13:ce:5f:0f:9b:58:34:4e:9f:9b:2b:78:7f:ce:9d: cf:30:10:2a:fe:67:03:0b:74:d7:c9:f1:68:e8:b2: 9a:15:d2:7d:b4:f0:e5:60:b5:71:13:47:e7:86:2f: c2:61:aa:a4:73:2e:78:35:06:89:a2:a8:ce:27:9b: 88:8d:42:4c:1e:2f:f8:98:4e:c2:b4:59:e7:25:8c: b1:63:5f:6a:fd:ee:27:20:94:f3:a1:d5:9a:15:d2: 33:99:89:d7:01:cd:94:61:91:bb:47:6c:5b:fe:ae: b5:c5:37:af:86:9a:22:4f:d2:70:5b:3d:57:5d:e8: d3:9d:b2:f0:67:ef:ec:96:0d:04:eb:c7:8a:22:89: b6:fa:f9:1a:0b:a3:41:cf:4e:b3:e2:2d:94:b8:56: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:BF:4A:34:A0:DB:08:E6:EE:E0:E4:A4:A2:F7:EC:00:01:75:BE X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:19:88:16:ed:3b:1f:a0:3f:b0:4e:9c:40:ba:96:5b:de:61: 04:d5:9b:e8:2f:5b:21:4b:db:e3:87:28:95:5d:d3:ab:c4:13: e2:4d:ed:64:0f:af:b8:91:f7:53:5a:de:3f:eb:f1:44:e6:80: ec:85:64:29:69:ac:29:d8:a1:ba:99:4b:8b:9d:4b:e6:4e:d2: c4:9a:5f:07:8e:01:05:45:bf:6b:f7:79:c9:d0:eb:e2:2c:27: a8:8a:2a:8c:41:ce:39:ac:a8:22:cf:dc:10:d9:4a:80:61:c0: d9:46:6e:08:71:44:91:c0:74:a7:f2:34:62:f0:54:67:85:79: e9:35:e1:6a:2a:81:17:19:9b:98:2d:9c:6c:d3:92:2d:0c:57: b1:cf:a9:53:56:fe:c1:40:8d:40:0e:73:c6:ec:89:28:af:0f: d5:25:74:27:b0:16:8a:d5:16:45:48:a2:bd:b3:26:01:b6:97: 7d:51:cb:a1:7d:5c:cc:d7:78:51:f8:36:91:ef:3a:e7:8c:37: 15:bc:a1:de:4d:09:77:36:78:c3:d1:1e:cc:19:3b:a3:6e:b9: 2b:ff:5b:2b:4b:fc:2f:7c:f1:d6:ec:02:8d:41:61:e9:57:d4: a1:e3:e3:78:03:e8:40:87:6f:67:60:81:53:e3:df:61:6b:95: b7:67:6b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjUwNTExMDMzMTEwWhcNMjUwNTE4MDMzMTEwWjAYMRYwFAYD VQQDEw02ODIwMTlmZi04ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsspTmcZ8sKXnB9/YAI2ONAuwHxbgTh7mRmUDXDOqrSBkd4e3tcE64KpRJ6aT pxkf+lWc03PAyDp1YGknSTpzQXX9sTGfl5fOh+z2GL1xn+W20rCVzatie0MBLkc8 XdUtafwtvmeTpyYTzl8Pm1g0Tp+bK3h/zp3PMBAq/mcDC3TXyfFo6LKaFdJ9tPDl YLVxE0fnhi/CYaqkcy54NQaJoqjOJ5uIjUJMHi/4mE7CtFnnJYyxY19q/e4nIJTz odWaFdIzmYnXAc2UYZG7R2xb/q61xTevhpoiT9JwWz1XXejTnbLwZ+/slg0E68eK Iom2+vkaC6NBz06z4i2UuFZxwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPzv0o0 oNsI5u7g5KSi9+wAAXW+MB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfGYgW7TsfoD+wTpxAupZb3mEE1ZvoL1shS9vjhyiVXdOrxBPiTe1k D6+4kfdTWt4/6/FE5oDshWQpaawp2KG6mUuLnUvmTtLEml8HjgEFRb9r93nJ0Ovi LCeoiiqMQc45rKgiz9wQ2UqAYcDZRm4IcUSRwHSn8jRi8FRnhXnpNeFqKoEXGZuY LZxs05ItDFexz6lTVv7BQI1ADnPG7Ikorw/VJXQnsBaK1RZFSKK9syYBtpd9Ucuh fVzM13hR+DaR7zrnjDcVvKHeTQl3NnjD0R7MGTujbrkr/1srS/wvfPHW7AKNQWHp V9Sh4+N4A+hAh29nYIFT499ha5W3Z2vf -----END CERTIFICATE-----Generated at Sun May 11 13:59:10 2025 by rpki-client