$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: 5E94jCJalVmmGWFNGkA/eDr2uG9z4xqB2bkk+CsccXk= Subject key identifier: 78:3A:D7:F3:A9:FC:B6:91:D3:AA:EE:55:79:25:86:64:AF:DE:D6:BE Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 0172 Signing time: Thu 03 Jul 2025 04:01:51 +0000 Manifest this update: Thu 03 Jul 2025 04:01:51 +0000 Manifest next update: Thu 10 Jul 2025 04:01:51 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: Cqyct3TyqVwaN3ukSs/nYZrVym9VyCq8JznIPkZls0g=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Jul 3 04:01:51 2025 GMT Not After : Jul 10 04:01:51 2025 GMT Subject: CN=686600af-6974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:63:51:1e:33:a4:aa:5b:5e:23:6e:7d:99: 09:52:e8:20:71:2b:57:b7:db:66:fb:2d:cb:53:05: a5:3e:e2:8f:20:64:2c:c3:a3:ec:6d:7a:66:f3:a8: 56:f0:31:42:1d:10:b3:ad:03:ec:25:94:32:6b:60: 21:a5:67:e5:99:ad:58:cf:c6:14:90:a9:ec:81:e5: ad:04:ce:8e:d9:66:91:94:8b:33:4b:54:4d:5d:06: ba:98:60:55:3d:08:d4:f2:2e:56:57:9e:70:10:f3: e8:66:f4:f5:77:6c:ee:5c:59:55:1e:84:46:5a:94: 13:b6:6e:d2:7b:a9:2f:af:96:0f:2f:40:e3:b3:24: 2e:36:f3:d1:65:aa:26:30:4c:50:af:02:08:00:99: dc:13:32:ed:0b:d3:b8:aa:ed:98:06:91:f6:9d:e9: bf:94:3f:c1:47:53:8d:56:42:57:5d:70:44:7b:1f: 7b:88:f5:27:90:c4:c6:6a:ba:16:9e:dd:7f:93:c9: b4:5d:25:e4:32:48:de:66:b0:13:38:f3:04:c3:46: b3:ea:8a:e3:49:92:11:08:f5:7a:22:40:db:26:5e: 6b:66:47:ff:3b:de:d7:60:18:86:44:53:eb:dc:8a: 72:0c:ef:27:40:e1:94:02:72:0c:9a:4c:7a:a1:6f: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:D7:F3:A9:FC:B6:91:D3:AA:EE:55:79:25:86:64:AF:DE:D6:BE X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:76:40:87:64:22:7a:3c:25:20:88:4d:41:f2:4b:93:fc:c4: e6:53:bd:f7:72:4c:22:c7:9c:50:9d:fc:dd:02:6e:d2:6c:49: 10:cb:d8:fc:b0:3e:52:45:c9:61:21:6b:9b:32:f5:49:4f:35: 01:91:0f:a6:81:48:96:2b:52:fb:d9:34:57:a3:f0:03:06:90: 15:7b:b5:3e:03:fa:4a:13:a8:4b:08:35:a5:b9:19:61:dd:02: a8:df:d8:a8:cb:f9:83:5b:72:8d:08:54:da:a5:41:30:b8:47: 89:43:6b:60:f1:2a:07:eb:72:70:b7:2f:60:d4:8c:d7:e2:16: d3:d3:ae:7e:fd:bd:e6:0f:96:d5:4c:9a:29:30:ad:4b:a7:98: 78:c9:20:bf:9d:50:72:ba:58:24:68:79:02:01:ce:46:8d:09: 7b:8b:40:2b:75:3d:57:1e:ab:30:6b:f8:08:e8:c0:b4:95:8a: e1:d9:19:ce:1b:b2:2c:6f:f6:7a:a0:62:25:96:6f:42:3b:8e: 8d:8c:cb:e8:c4:56:c2:d3:52:67:31:50:a1:80:ee:45:16:39: 9e:ee:b8:58:b0:52:49:0b:59:37:c0:f1:c4:fd:9f:e3:37:89: 5a:5c:99:f2:90:8a:fa:70:36:3a:50:74:3e:75:9b:19:15:fb: 7a:e5:66:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwNzAzMDQwMTUxWhcNMjUwNzEwMDQwMTUxWjAYMRYwFAYD VQQDEw02ODY2MDBhZi02OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPZjUR4zpKpbXiNufZkJUuggcStXt9tm+y3LUwWlPuKPIGQsw6PsbXpm86hW 8DFCHRCzrQPsJZQya2AhpWflma1Yz8YUkKnsgeWtBM6O2WaRlIszS1RNXQa6mGBV PQjU8i5WV55wEPPoZvT1d2zuXFlVHoRGWpQTtm7Se6kvr5YPL0DjsyQuNvPRZaom MExQrwIIAJncEzLtC9O4qu2YBpH2nem/lD/BR1ONVkJXXXBEex97iPUnkMTGaroW nt1/k8m0XSXkMkjeZrATOPMEw0az6orjSZIRCPV6IkDbJl5rZkf/O97XYBiGRFPr 3IpyDO8nQOGUAnIMmkx6oW8E2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg61/Op /LaR06ruVXklhmSv3ta+MB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdkCHZCJ6PCUgiE1B8kuT/MTmU733ckwix5xQnfzdAm7SbEkQy9j8 sD5SRclhIWubMvVJTzUBkQ+mgUiWK1L72TRXo/ADBpAVe7U+A/pKE6hLCDWluRlh 3QKo39ioy/mDW3KNCFTapUEwuEeJQ2tg8SoH63Jwty9g1IzX4hbT065+/b3mD5bV TJopMK1Lp5h4ySC/nVByulgkaHkCAc5GjQl7i0ArdT1XHqswa/gI6MC0lYrh2RnO G7Isb/Z6oGIllm9CO46NjMvoxFbC01JnMVChgO5FFjme7rhYsFJJC1k3wPHE/Z/j N4laXJnykIr6cDY6UHQ+dZsZFft65WbJ -----END CERTIFICATE-----Generated at Thu Jul 3 06:03:44 2025 by rpki-client