$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: P9D7u0/UeKbP6HdAkz1SC6IBxfomlY0LprAAwou77TQ= Subject key identifier: 72:0F:70:C4:24:8D:0C:EA:02:64:E9:BE:B2:2E:85:1C:44:64:4A:65 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 01DB Signing time: Thu 03 Jul 2025 02:53:42 +0000 Manifest this update: Thu 03 Jul 2025 02:53:42 +0000 Manifest next update: Thu 10 Jul 2025 02:53:42 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: K6/F1H+l6UGBnogCl34XasHl4njHXqRqhruwgRjGFe0=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Jul 3 02:53:42 2025 GMT Not After : Jul 10 02:53:42 2025 GMT Subject: CN=6865f0b6-87c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:66:95:bb:71:97:be:cf:4a:c6:f8:d4:ab: 27:46:d1:43:52:e0:6b:50:fb:f6:7e:0a:a2:3a:60: 15:c8:6a:84:12:ed:01:99:9e:64:20:20:bc:f2:59: 2e:ef:e5:ea:f3:ec:56:89:f7:51:3d:00:4c:60:ab: 06:6e:17:ba:a3:82:4e:e4:1d:7e:3a:51:08:80:57: 1d:ce:79:e8:fe:8d:03:e2:a1:f3:10:09:62:31:58: 6a:30:d0:a7:62:a2:a1:36:c2:21:50:7e:09:74:22: 01:54:f6:12:34:56:72:d9:a8:9f:49:3c:7c:15:4a: 3d:10:c1:24:76:69:e4:42:36:75:4a:79:30:73:2f: 36:db:3e:a0:33:9b:22:ba:8f:df:78:e6:73:18:d7: 60:48:1f:21:91:e1:4a:b3:2a:20:ad:62:ae:27:62: ab:56:c7:6b:7a:ca:5c:61:82:68:3b:d1:aa:df:00: 6c:4f:65:d9:f4:3b:2b:b9:75:fa:74:84:ee:b1:f7: 67:3a:f2:2e:5b:d5:ce:3a:da:a5:6a:64:a6:dc:47: b5:75:d1:e6:33:bc:50:d6:c2:6f:8b:d9:3e:5a:0a: 36:3b:62:07:4a:db:df:41:9f:b6:0d:37:a6:bc:e3: 9d:2a:ac:2f:2c:b1:9d:19:0d:f1:3c:f4:53:97:e1: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:70:C4:24:8D:0C:EA:02:64:E9:BE:B2:2E:85:1C:44:64:4A:65 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:f4:d4:15:e3:a6:96:50:45:ca:fb:35:ee:6f:55:04:ba: c8:ce:18:e0:7d:37:85:ab:93:13:8c:0a:6c:57:19:f4:29:9e: 30:25:f7:f9:58:8b:0b:c3:ad:6d:28:df:7c:ad:70:fe:1e:44: a8:cf:2e:19:4c:5a:cc:bc:35:bd:c1:ac:ce:26:00:9d:35:fe: 70:1b:fd:44:94:42:85:7b:cd:d8:d3:4d:70:7c:b5:91:c1:01: 18:7a:73:65:c0:08:6b:ba:05:e7:db:f7:f8:a9:6f:47:e8:a6: 02:b7:1e:56:02:73:1a:df:93:a5:2b:6c:b0:fc:c7:09:27:21: bd:e2:e4:1b:70:8d:4b:be:d4:58:c8:31:2e:f2:bd:55:58:26: 80:7f:be:78:ad:35:42:6b:ee:28:84:7b:6b:dd:95:f8:d7:d2: c1:d3:b5:55:35:4b:92:ac:0a:75:8f:19:50:8e:83:e3:60:01: 37:93:91:56:2c:87:8f:f1:14:1d:b6:ad:ba:92:af:8d:19:9b: 1b:22:58:6c:86:14:ef:e3:dc:1a:5a:fc:df:76:d8:93:31:d7: 8d:bc:b1:9d:11:3a:95:50:db:ff:07:94:ee:be:74:3d:19:14: 70:54:7f:b1:da:b0:40:ce:fe:83:41:dc:e0:86:9a:77:c1:4d: a4:a4:f5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUwNzAzMDI1MzQyWhcNMjUwNzEwMDI1MzQyWjAYMRYwFAYD VQQDEw02ODY1ZjBiNi04N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6Nmlbtxl77PSsb41KsnRtFDUuBrUPv2fgqiOmAVyGqEEu0BmZ5kICC88lku 7+Xq8+xWifdRPQBMYKsGbhe6o4JO5B1+OlEIgFcdznno/o0D4qHzEAliMVhqMNCn YqKhNsIhUH4JdCIBVPYSNFZy2aifSTx8FUo9EMEkdmnkQjZ1Snkwcy822z6gM5si uo/feOZzGNdgSB8hkeFKsyogrWKuJ2KrVsdrespcYYJoO9Gq3wBsT2XZ9DsruXX6 dITusfdnOvIuW9XOOtqlamSm3Ee1ddHmM7xQ1sJvi9k+Wgo2O2IHStvfQZ+2DTem vOOdKqwvLLGdGQ3xPPRTl+GL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIPcMQk jQzqAmTpvrIuhRxEZEplMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn1fTUFeOmllBFyvs17m9VBLrIzhjgfTeFq5MTjApsVxn0KZ4wJff5 WIsLw61tKN98rXD+HkSozy4ZTFrMvDW9wazOJgCdNf5wG/1ElEKFe83Y001wfLWR wQEYenNlwAhrugXn2/f4qW9H6KYCtx5WAnMa35OlK2yw/McJJyG94uQbcI1LvtRY yDEu8r1VWCaAf754rTVCa+4ohHtr3ZX419LB07VVNUuSrAp1jxlQjoPjYAE3k5FW LIeP8RQdtq26kq+NGZsbIlhshhTv49waWvzfdtiTMdeNvLGdETqVUNv/B5TuvnQ9 GRRwVH+x2rBAzv6DQdzghpp3wU2kpPU1 -----END CERTIFICATE-----Generated at Thu Jul 3 13:39:36 2025 by rpki-client