$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: Yk5g/F/YLQCMZSyyX/yA6vi7JQzaEv7/6376pDWSZds= Subject key identifier: 5F:57:AD:06:14:A3:46:DC:8F:A9:71:7A:2D:E7:3B:39:AA:4C:41:3C Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 04D2 Signing time: Sun 20 Apr 2025 23:26:25 +0000 Manifest this update: Sun 20 Apr 2025 23:26:25 +0000 Manifest next update: Sun 27 Apr 2025 23:26:25 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: Cp9FDVTpUIRfVaP0blpcja1wemtLrMhZqENs6ww2Buw=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Apr 20 23:26:25 2025 GMT Not After : Apr 27 23:26:25 2025 GMT Subject: CN=680582a1-e821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:60:32:d3:4d:20:fb:0f:58:fa:ce:a2:08: 10:8d:13:20:79:96:17:3e:dc:4a:17:1d:aa:57:15: bc:b5:5c:62:33:2b:54:39:1a:e0:49:50:79:c9:97: 1a:6d:4c:df:e1:e4:4c:e5:95:b1:60:d8:64:96:4e: f8:1a:fd:c5:90:cb:d1:5f:fa:e8:96:6e:51:be:2f: 82:16:c9:d8:6a:a4:e4:60:e0:b8:9f:11:6b:da:ca: cb:6e:69:de:5c:a8:1c:52:fc:8b:63:ef:1e:2a:1d: e8:2b:4f:8f:ca:5f:f3:3d:0a:83:77:c2:47:fd:26: 4a:f8:00:b6:10:b4:4a:95:b5:05:44:f3:c9:3b:3e: a6:d0:98:bb:18:9c:21:9a:4a:6e:10:3b:13:39:48: ef:81:ea:38:25:6c:e8:94:53:d2:e5:b5:77:26:f8: 73:e9:b6:99:1b:25:43:c3:e5:3c:72:fb:85:1a:2e: 5f:40:b8:20:83:b6:4a:ca:4b:65:2e:b8:81:3a:25: be:6c:49:a7:b9:f7:40:44:63:31:bb:fd:24:8d:25: 66:1f:17:c0:5e:34:33:3a:8c:1d:77:70:a2:e7:9a: b7:07:4b:7e:60:7c:f3:ca:98:15:9c:c1:3e:96:b4: 62:a9:85:c2:4c:48:f7:6e:bc:22:b0:db:66:f4:f9: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:AD:06:14:A3:46:DC:8F:A9:71:7A:2D:E7:3B:39:AA:4C:41:3C X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3d:8c:e2:b1:c0:e1:25:c7:2a:13:ea:3c:0f:4c:00:62:eb: c4:f3:70:66:44:6a:9b:39:0b:83:a4:5b:67:79:c1:ae:29:0a: 03:66:48:35:22:ba:32:4d:82:c3:4e:7b:0f:18:86:ff:c1:1d: c5:2b:cc:6b:3f:73:dc:06:e4:cf:dd:73:d2:50:7d:d5:e1:a4: e4:0b:6b:13:d5:0f:3b:a4:03:ad:e9:d1:70:45:3a:25:1d:50: b5:22:1b:c1:9d:1f:e1:2c:47:f7:f4:b2:82:96:6a:f1:24:78: b9:af:cb:d0:57:37:b6:74:be:22:fb:32:45:32:61:d0:cd:c1: 71:b3:3c:45:65:fa:25:6c:ae:d3:83:9b:d4:d9:2c:20:5d:46: df:0a:ba:3e:c5:ca:e4:64:ee:5b:c3:7e:ee:30:35:94:d3:f5: a6:53:21:85:ff:de:cf:aa:a4:f0:39:12:43:98:a5:43:ab:25: 4e:97:78:51:0d:d5:d5:c2:07:30:30:7e:4e:4b:5e:47:67:87: bb:fc:09:7c:bd:4d:4c:98:ac:30:59:8c:6f:c2:4c:52:5e:34: ef:b2:07:d0:fc:75:9e:1f:68:b5:f5:cc:a6:33:f4:57:88:be: 19:64:ee:b9:89:14:7d:51:1e:f3:75:ea:11:a2:7c:b8:7c:cc: b4:1e:02:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwNDIwMjMyNjI1WhcNMjUwNDI3MjMyNjI1WjAYMRYwFAYD VQQDEw02ODA1ODJhMS1lODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqFgMtNNIPsPWPrOoggQjRMgeZYXPtxKFx2qVxW8tVxiMytUORrgSVB5yZca bUzf4eRM5ZWxYNhklk74Gv3FkMvRX/rolm5Rvi+CFsnYaqTkYOC4nxFr2srLbmne XKgcUvyLY+8eKh3oK0+Pyl/zPQqDd8JH/SZK+AC2ELRKlbUFRPPJOz6m0Ji7GJwh mkpuEDsTOUjvgeo4JWzolFPS5bV3Jvhz6baZGyVDw+U8cvuFGi5fQLggg7ZKyktl LriBOiW+bEmnufdARGMxu/0kjSVmHxfAXjQzOowdd3Ci55q3B0t+YHzzypgVnME+ lrRiqYXCTEj3brwisNtm9PmHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9XrQYU o0bcj6lxei3nOzmqTEE8MB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2PYziscDhJccqE+o8D0wAYuvE83BmRGqbOQuDpFtnecGuKQoDZkg1 IroyTYLDTnsPGIb/wR3FK8xrP3PcBuTP3XPSUH3V4aTkC2sT1Q87pAOt6dFwRTol HVC1IhvBnR/hLEf39LKClmrxJHi5r8vQVze2dL4i+zJFMmHQzcFxszxFZfolbK7T g5vU2SwgXUbfCro+xcrkZO5bw37uMDWU0/WmUyGF/97PqqTwORJDmKVDqyVOl3hR DdXVwgcwMH5OS15HZ4e7/Al8vU1MmKwwWYxvwkxSXjTvsgfQ/HWeH2i19cymM/RX iL4ZZO65iRR9UR7zdeoRony4fMy0HgLA -----END CERTIFICATE-----Generated at Mon Apr 21 07:00:57 2025 by rpki-client