$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: NxhvQo7nTdmZlfkw5r230M/qH7fIBw8cg8Kzwj8HFss= Subject key identifier: F8:1B:60:E7:70:C9:8D:8C:34:FB:41:FE:FE:4B:73:E6:9D:AA:5D:4F Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01AE Signing time: Wed 09 Apr 2025 02:33:43 +0000 Manifest this update: Wed 09 Apr 2025 02:33:42 +0000 Manifest next update: Wed 16 Apr 2025 02:33:42 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: AuBJeWSoR3e0ILGKoVNprTTefjWKS8oOKd70cuYQXxA=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 5D406F9E7A1611EFB8683714C4F9AE02.roa (hash: 3otYCGSHc1MvuLQDMy6P+45MHMBXoHXPg9K4+MC++BU=) 5: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB Validity Not Before: Apr 9 02:33:42 2025 GMT Not After : Apr 16 02:33:42 2025 GMT Subject: CN=67f5dc86-fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:6f:3f:b4:eb:f5:72:44:46:eb:a3:40:7f: ec:01:89:39:e2:97:33:45:96:81:95:b2:63:10:56: 9e:e6:75:16:63:27:75:05:65:f2:b2:8e:fb:63:85: 6d:a0:6c:5e:31:b5:d9:8a:12:e8:1a:c1:0e:96:4e: 98:ff:3e:d3:a1:1e:b0:e6:fb:34:44:8e:7e:b3:95: 3a:95:70:b7:5b:3a:a3:6b:2c:dd:b4:8a:c2:1d:8e: a6:54:20:d3:be:60:ae:69:7f:6a:47:5f:52:54:39: 81:c7:94:9a:3c:91:02:86:6d:2c:42:ba:e8:18:00: 4a:bc:55:23:19:26:e0:df:88:0d:d3:b4:cb:c7:c5: 1a:62:97:9d:ea:19:4b:19:76:f9:b9:25:18:a7:4e: 12:29:03:a5:c6:eb:c2:fc:e8:2c:ab:4b:c4:12:e7: 08:21:94:35:fb:d8:e5:c7:b1:35:d3:ae:34:34:66: 57:6f:8a:df:c7:48:db:6b:b1:8b:17:49:f0:64:ac: ca:e9:22:69:90:44:0c:6b:02:0d:74:42:99:39:4c: f9:6f:f6:a1:cb:35:1d:c0:f9:23:70:8e:76:db:da: c5:30:2f:86:2e:04:55:8f:d3:24:3a:0c:5b:2e:c0: f6:37:8a:d2:58:a3:ce:02:af:bb:a8:b3:8e:a6:19: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1B:60:E7:70:C9:8D:8C:34:FB:41:FE:FE:4B:73:E6:9D:AA:5D:4F X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:e5:09:b1:27:e4:94:a5:e9:bf:ac:23:07:25:12:21:fc: b4:25:f7:c7:86:e1:a1:95:ff:59:8b:0f:20:3e:77:f6:2f:2c: 2b:4a:bd:b5:8c:5c:d6:38:c1:2c:8f:2f:0e:99:7d:2f:f5:47: 88:a2:d2:cb:ca:02:7b:9d:1e:2c:fa:51:de:28:b2:a9:0b:46: 3f:1d:ed:20:d3:d8:18:35:7e:bc:ac:5c:a7:49:9d:c1:fe:ba: 1d:0c:15:1a:07:82:de:98:63:66:05:75:79:d0:b4:b6:1d:34: 78:9d:16:70:b0:b0:c6:41:bc:4d:74:54:47:7b:4e:f7:d2:bb: d2:ca:52:99:a2:bd:cb:3f:2f:a4:5b:18:1e:3b:6d:a8:6e:cf: cc:ae:56:7b:a0:8e:7e:30:79:a1:1d:38:77:d3:22:ad:9a:a7: da:66:0e:4f:5f:bd:95:b1:94:6c:ae:71:02:3f:e8:78:2a:4c: 4a:b0:4e:a6:b6:cf:3f:a1:f1:5d:89:0a:ac:7d:1c:14:dc:78: 23:19:c0:10:f4:8b:d8:51:a9:83:18:27:89:d9:c0:eb:b6:92: 1b:cc:6e:8f:79:2d:11:4e:85:b8:b6:a0:98:a5:ac:b9:71:74: 77:75:bb:5b:62:8f:ef:fe:72:04:17:70:ee:38:3f:93:51:8e: 92:89:f0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwNDA5MDIzMzQyWhcNMjUwNDE2MDIzMzQyWjAYMRYwFAYD VQQDEw02N2Y1ZGM4Ni1mZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DxvP7Tr9XJERuujQH/sAYk54pczRZaBlbJjEFae5nUWYyd1BWXyso77Y4Vt oGxeMbXZihLoGsEOlk6Y/z7ToR6w5vs0RI5+s5U6lXC3WzqjayzdtIrCHY6mVCDT vmCuaX9qR19SVDmBx5SaPJEChm0sQrroGABKvFUjGSbg34gN07TLx8UaYped6hlL GXb5uSUYp04SKQOlxuvC/Ogsq0vEEucIIZQ1+9jlx7E10640NGZXb4rfx0jba7GL F0nwZKzK6SJpkEQMawINdEKZOUz5b/ahyzUdwPkjcI5229rFMC+GLgRVj9MkOgxb LsD2N4rSWKPOAq+7qLOOphnptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgbYOdw yY2MNPtB/v5Lc+adql1PMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfe+UJsSfklKXpv6wjByUSIfy0JffHhuGhlf9Ziw8gPnf2LywrSr21 jFzWOMEsjy8OmX0v9UeIotLLygJ7nR4s+lHeKLKpC0Y/He0g09gYNX68rFynSZ3B /rodDBUaB4LemGNmBXV50LS2HTR4nRZwsLDGQbxNdFRHe0730rvSylKZor3LPy+k WxgeO22obs/MrlZ7oI5+MHmhHTh30yKtmqfaZg5PX72VsZRsrnECP+h4KkxKsE6m ts8/ofFdiQqsfRwU3HgjGcAQ9IvYUamDGCeJ2cDrtpIbzG6PeS0RToW4tqCYpay5 cXR3dbtbYo/v/nIEF3DuOD+TUY6SifBP -----END CERTIFICATE-----Generated at Thu Apr 10 17:25:43 2025 by rpki-client