$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: vwgehpL4aQOA309kw3tF4XuZ3xOlJeY3aKzQiac5BgQ= Subject key identifier: C5:FD:9C:05:F9:4F:06:65:CC:0D:49:90:21:20:39:AF:57:71:00:9D Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 010B Signing time: Thu 03 Jul 2025 05:10:21 +0000 Manifest this update: Thu 03 Jul 2025 05:10:21 +0000 Manifest next update: Thu 10 Jul 2025 05:10:21 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: A5k7hfFTUxWjrVm2dNH5Wr899Cyd9IoL3OilNhLPFlU=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jul 3 05:10:21 2025 GMT Not After : Jul 10 05:10:21 2025 GMT Subject: CN=686610bd-8310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:28:25:ad:de:ed:0f:ec:7a:ce:0f:50:87: 25:92:0d:31:5a:c7:19:e9:8c:2f:1e:f9:e3:85:fa: 17:ec:10:99:b7:87:03:13:3b:fc:ed:76:96:2d:57: b8:ef:b7:8c:f8:39:23:c3:a2:e9:86:9b:38:f1:53: 9d:ce:fc:40:4c:c4:78:ef:f0:ee:ff:87:1a:53:0c: f8:55:98:af:8f:75:dd:07:c3:4d:1a:53:c9:1e:f5: 71:c7:bc:4f:bf:fe:ba:21:9c:50:04:84:0b:78:26: 2c:b8:ca:eb:9f:58:b7:1e:06:a8:db:0a:20:3e:78: 56:8f:66:9c:dc:a7:90:13:2a:82:cb:ca:bc:9c:0c: d5:0c:c4:b7:2a:8e:b9:f7:b0:b0:38:a6:63:6a:b0: 04:86:4c:91:93:be:63:e1:9a:fb:55:d8:00:00:ee: 36:f7:00:52:fe:ad:bf:8e:91:cb:04:56:15:20:7c: 5a:c8:3a:9e:e8:29:f4:53:e5:ec:5b:b5:66:3f:67: 69:78:fe:3f:1a:af:b1:e2:68:07:4b:c9:86:52:e7: 07:27:ae:52:a1:e3:af:c0:32:40:8d:ca:89:1e:cc: c4:5e:63:0f:a1:e4:a9:f1:ea:16:ce:f3:e8:ae:c5: 87:61:4d:f3:a3:55:6a:2a:e9:b8:51:c8:10:c5:1e: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FD:9C:05:F9:4F:06:65:CC:0D:49:90:21:20:39:AF:57:71:00:9D X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:99:c5:1d:9d:87:43:85:34:18:b3:69:4b:b1:3f:8d:27:ec: 8f:00:c2:21:d2:5f:50:bc:39:b9:68:5b:51:90:78:88:cc:aa: 8d:fa:46:9f:d2:d9:54:3c:3e:92:26:6a:57:ff:e2:df:22:fd: 34:c2:d9:23:87:71:6e:f8:9a:ab:a6:a0:20:8d:55:77:ef:7f: 67:f0:4a:46:45:dd:6f:5a:8a:45:69:25:38:42:3b:ef:8d:43: 1a:b8:89:4f:63:23:3f:b1:6e:47:a3:f4:74:ba:9a:17:84:aa: 10:9d:e5:ed:c4:c6:c5:78:3d:54:54:b4:fb:26:8e:77:28:ea: 4b:12:90:18:3b:e9:3a:82:bd:a8:5f:f1:6a:f3:59:26:c2:11: f0:10:43:ac:94:62:c4:65:08:97:1a:78:42:a0:7f:f1:42:10: 53:e0:7d:41:91:6d:46:49:44:64:8c:0f:6f:2b:a0:55:8f:59: db:7d:7e:85:bf:47:3e:bb:cc:a7:69:9e:91:d2:0c:33:bf:a8: 75:80:8a:9f:50:95:d6:a2:57:3e:bf:c3:b5:a9:ad:b0:ff:de: 37:b8:c6:7f:1e:ed:8b:b1:77:cc:cf:92:18:1b:61:8c:74:f6: 0e:bc:9e:f6:8b:ce:e8:d4:ef:13:cb:fd:59:2b:0c:90:e4:9d: 9f:5b:f4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwNzAzMDUxMDIxWhcNMjUwNzEwMDUxMDIxWjAYMRYwFAYD VQQDEw02ODY2MTBiZC04MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLUoJa3e7Q/ses4PUIclkg0xWscZ6YwvHvnjhfoX7BCZt4cDEzv87XaWLVe4 77eM+Dkjw6Lphps48VOdzvxATMR47/Du/4caUwz4VZivj3XdB8NNGlPJHvVxx7xP v/66IZxQBIQLeCYsuMrrn1i3Hgao2wogPnhWj2ac3KeQEyqCy8q8nAzVDMS3Ko65 97CwOKZjarAEhkyRk75j4Zr7VdgAAO429wBS/q2/jpHLBFYVIHxayDqe6Cn0U+Xs W7VmP2dpeP4/Gq+x4mgHS8mGUucHJ65SoeOvwDJAjcqJHszEXmMPoeSp8eoWzvPo rsWHYU3zo1VqKum4UcgQxR5mSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMX9nAX5 TwZlzA1JkCEgOa9XcQCdMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQmcUdnYdDhTQYs2lLsT+NJ+yPAMIh0l9QvDm5aFtRkHiIzKqN+kaf 0tlUPD6SJmpX/+LfIv00wtkjh3Fu+JqrpqAgjVV3739n8EpGRd1vWopFaSU4Qjvv jUMauIlPYyM/sW5Ho/R0upoXhKoQneXtxMbFeD1UVLT7Jo53KOpLEpAYO+k6gr2o X/Fq81kmwhHwEEOslGLEZQiXGnhCoH/xQhBT4H1BkW1GSURkjA9vK6BVj1nbfX6F v0c+u8ynaZ6R0gwzv6h1gIqfUJXWolc+v8O1qa2w/943uMZ/Hu2LsXfMz5IYG2GM dPYOvJ72i87o1O8Ty/1ZKwyQ5J2fW/Tw -----END CERTIFICATE-----Generated at Fri Jul 4 03:24:31 2025 by rpki-client