$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: hnKV7oE/Nh/D5D+/JBjaq44BNl305gsr63Ek8j+uLKk= Subject key identifier: DD:72:3D:46:F6:A5:CA:BD:EA:AB:6E:D9:D9:3E:2E:9C:18:F1:FD:BE Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: F3 Signing time: Thu 15 May 2025 04:37:21 +0000 Manifest this update: Thu 15 May 2025 04:37:20 +0000 Manifest next update: Thu 22 May 2025 04:37:20 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: 5tjMZ3a26yMLysYZ3IBH++tsHhmRNhCc6267etH07Aw=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: May 15 04:37:20 2025 GMT Not After : May 22 04:37:20 2025 GMT Subject: CN=68256f80-7df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:41:88:1b:9e:01:27:e8:b5:60:e7:48:8d: 79:d8:11:5d:e2:46:87:94:e0:6d:8a:1f:33:17:b5: ee:91:35:a9:05:75:14:c5:4c:47:9b:b4:c0:70:02: bf:5b:8c:a8:d6:4b:52:d5:1b:24:b8:c1:de:4e:7d: 08:8e:46:b4:15:87:b5:9c:03:31:66:3b:0e:05:20: dd:41:25:fd:d5:f9:d2:39:da:33:a8:5f:51:79:c7: 92:be:6b:4d:b2:b6:b6:eb:5e:e1:ea:10:0f:e7:1d: a0:1a:23:5b:3f:58:35:8f:67:cf:8a:3e:40:2b:ce: e8:57:13:b7:af:49:cf:55:7a:51:5b:5b:4f:89:73: 94:50:fd:2a:96:6f:6f:d5:f8:09:be:f5:af:85:49: f2:60:1b:33:7a:22:81:4c:c6:78:c8:89:5f:14:07: db:79:5b:23:46:7e:a2:2e:40:85:71:69:f1:bf:a3: 83:46:bc:a3:12:3b:82:65:4a:f3:ef:69:f5:92:ec: 6f:ad:8d:58:64:36:ad:7d:a8:7b:b4:64:6a:25:a9: 63:e9:08:30:0c:e9:8d:9d:3e:61:a2:8c:b5:b8:89: ef:09:e4:43:d8:ed:4c:9d:aa:a8:41:57:83:ef:1d: 15:9e:25:d9:8d:1b:cf:3e:f3:0b:e1:cd:bd:cd:d5: 4b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:3D:46:F6:A5:CA:BD:EA:AB:6E:D9:D9:3E:2E:9C:18:F1:FD:BE X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0b:77:34:db:93:5e:64:54:d4:fa:f3:3c:29:bc:8e:d3:ab: 97:23:fd:2f:33:5d:d9:95:58:4a:a1:d4:24:f4:00:ef:9f:9a: d3:bb:9b:01:00:5b:31:17:6c:40:b9:13:2c:2b:a4:50:f6:2e: f2:b2:82:1d:b7:3b:b1:4e:52:9c:57:92:18:8d:7d:e4:8f:3f: c5:63:a9:4d:aa:d1:25:d0:48:f6:1c:21:55:57:2a:bb:8f:68: df:f0:bc:a6:31:68:87:47:7a:73:4b:93:2d:0e:29:ac:8a:ef: 09:45:60:92:d1:5d:e0:3c:9d:7c:8a:2c:6c:db:9c:99:f0:2c: c7:df:ee:b6:21:6f:b4:c7:d4:0a:05:e3:42:3e:f4:ca:78:07: 3f:e0:f1:ee:de:20:31:99:47:b7:72:c2:e8:4a:b1:b4:09:7a: 80:1c:60:24:1f:e0:97:81:f2:a8:34:e0:a2:7a:57:72:58:88: 75:f2:1f:d0:1e:61:16:3b:52:3a:97:6e:f0:52:ad:f8:e3:91: 12:2b:02:a6:c4:3a:88:7f:7e:5f:02:e0:0a:ce:72:5f:15:46: c7:76:2a:de:23:59:81:d6:d4:c2:8e:53:4e:1e:1b:86:4c:2d: 81:66:16:11:a0:75:34:0a:9e:65:1d:37:72:90:f6:ae:20:23: 10:d6:63:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwNTE1MDQzNzIwWhcNMjUwNTIyMDQzNzIwWjAYMRYwFAYD VQQDEw02ODI1NmY4MC03ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpNBiBueASfotWDnSI152BFd4kaHlOBtih8zF7XukTWpBXUUxUxHm7TAcAK/ W4yo1ktS1RskuMHeTn0Ijka0FYe1nAMxZjsOBSDdQSX91fnSOdozqF9ReceSvmtN sra2617h6hAP5x2gGiNbP1g1j2fPij5AK87oVxO3r0nPVXpRW1tPiXOUUP0qlm9v 1fgJvvWvhUnyYBszeiKBTMZ4yIlfFAfbeVsjRn6iLkCFcWnxv6ODRryjEjuCZUrz 72n1kuxvrY1YZDatfah7tGRqJalj6QgwDOmNnT5hooy1uInvCeRD2O1MnaqoQVeD 7x0VniXZjRvPPvML4c29zdVLOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1yPUb2 pcq96qtu2dk+LpwY8f2+MB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSC3c025NeZFTU+vM8KbyO06uXI/0vM13ZlVhKodQk9ADvn5rTu5sB AFsxF2xAuRMsK6RQ9i7ysoIdtzuxTlKcV5IYjX3kjz/FY6lNqtEl0Ej2HCFVVyq7 j2jf8LymMWiHR3pzS5MtDimsiu8JRWCS0V3gPJ18iixs25yZ8CzH3+62IW+0x9QK BeNCPvTKeAc/4PHu3iAxmUe3csLoSrG0CXqAHGAkH+CXgfKoNOCieldyWIh18h/Q HmEWO1I6l27wUq3445ESKwKmxDqIf35fAuAKznJfFUbHdireI1mB1tTCjlNOHhuG TC2BZhYRoHU0Cp5lHTdykPauICMQ1mMJ -----END CERTIFICATE-----Generated at Sat May 17 05:36:41 2025 by rpki-client