$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: 8Zl1slXKQ5uxFLQiHJPCasHX3kn6+u5Y0lhg5pawofc= Subject key identifier: FF:CC:0E:2B:F6:AC:E8:84:2A:83:2B:A7:2A:7C:C7:C2:EF:83:C5:EC Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0CF7 Signing time: Fri 04 Apr 2025 18:12:31 +0000 Manifest this update: Fri 04 Apr 2025 18:12:30 +0000 Manifest next update: Fri 11 Apr 2025 18:12:30 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: iQpKGH7BmgsVdV8P6KpT4NcFU2+Sqve8xW31av2WVKg=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033 Validity Not Before: Apr 4 18:12:30 2025 GMT Not After : Apr 11 18:12:30 2025 GMT Subject: CN=67f0210e-abb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:f8:07:1b:06:67:12:56:6d:ea:f4:38:72: 08:7f:c4:24:e6:da:19:87:c4:c1:5a:c6:c8:e1:53: 79:8b:e8:0a:05:05:39:ce:13:35:9c:c7:57:f8:b5: 8a:a1:d4:62:91:55:dd:75:2c:04:2a:d3:4f:cb:b7: 62:3a:ae:f3:6e:82:31:cb:7c:6a:96:fd:8c:d6:d4: fa:11:9d:93:49:34:ca:be:bb:0f:f3:bf:1b:23:ba: ad:8e:da:38:58:2d:b3:f8:3e:0b:e1:fc:ff:86:c0: b3:24:36:4f:95:8e:a5:88:47:da:fd:1e:dd:e5:43: 14:40:ee:c1:64:c1:7a:aa:47:5a:96:19:32:19:d4: 64:19:70:c2:e3:43:c2:04:06:d1:eb:5c:01:6f:ed: b1:68:63:37:c7:7b:09:51:03:bb:bd:97:c1:43:e2: a5:e0:42:da:b6:19:b5:b6:c8:49:65:53:7f:a7:e2: 8e:33:9c:b7:a8:a0:57:b3:e5:c7:78:a2:8c:86:9a: 27:99:65:bb:ca:11:84:23:2b:75:c4:f2:75:61:bc: 7f:6e:63:14:15:9a:56:46:f7:89:41:22:28:88:f4: bf:1d:3b:f0:6e:7d:d8:2d:87:13:bc:9d:cf:67:f7: f9:3e:62:20:5b:49:d1:1d:47:4d:86:a5:a7:61:8d: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CC:0E:2B:F6:AC:E8:84:2A:83:2B:A7:2A:7C:C7:C2:EF:83:C5:EC X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f5:ca:77:fa:22:c6:1e:b0:66:f6:48:d6:26:1d:34:73:0b: 06:3f:d8:b5:b5:97:40:fb:dc:32:6c:a2:69:38:c7:6b:25:a7: 4d:75:2f:26:a0:4e:92:69:63:c3:88:1b:a1:64:ca:a7:ac:47: 1c:e1:bd:7e:f6:d9:9d:23:17:75:22:a8:a6:d3:50:b5:74:d5: 16:f4:1d:31:7f:f3:3c:d9:d8:4d:d3:2b:02:1d:af:c3:6e:14: da:3b:0b:d8:67:80:7d:cb:0f:7d:fc:60:c2:0f:b3:5e:61:37: e0:d7:71:d6:bd:6e:f9:1f:ca:13:cc:aa:62:7b:8e:48:0e:0f: 0b:67:6c:21:33:50:f8:30:c2:d5:40:d7:eb:94:46:cd:43:77: 73:64:d7:bb:b7:73:67:8f:cb:c2:b2:8c:64:84:d0:46:20:7a: 9f:63:2a:3b:31:15:29:22:af:15:e4:b0:ff:51:cf:29:14:bc: 8c:bd:6e:86:ca:a1:12:4b:9e:ab:d5:f9:7c:ef:1f:4e:62:93: 6a:c4:c0:96:93:8f:ce:b0:8a:98:2c:a5:9a:49:93:f4:f7:f1: 47:d6:06:fc:c7:e6:f7:10:dc:48:a9:29:db:50:e2:9f:70:b3: 2f:be:82:bc:b1:65:9e:54:0d:a9:26:78:ad:7e:ac:ff:86:df: 52:d9:42:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNDA0MTgxMjMwWhcNMjUwNDExMTgxMjMwWjAYMRYwFAYD VQQDEw02N2YwMjEwZS1hYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r74BxsGZxJWber0OHIIf8Qk5toZh8TBWsbI4VN5i+gKBQU5zhM1nMdX+LWK odRikVXddSwEKtNPy7diOq7zboIxy3xqlv2M1tT6EZ2TSTTKvrsP878bI7qtjto4 WC2z+D4L4fz/hsCzJDZPlY6liEfa/R7d5UMUQO7BZMF6qkdalhkyGdRkGXDC40PC BAbR61wBb+2xaGM3x3sJUQO7vZfBQ+Kl4ELathm1tshJZVN/p+KOM5y3qKBXs+XH eKKMhponmWW7yhGEIyt1xPJ1Ybx/bmMUFZpWRveJQSIoiPS/HTvwbn3YLYcTvJ3P Z/f5PmIgW0nRHUdNhqWnYY0ElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/MDiv2 rOiEKoMrpyp8x8Lvg8XsMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl9cp3+iLGHrBm9kjWJh00cwsGP9i1tZdA+9wybKJpOMdrJadNdS8m oE6SaWPDiBuhZMqnrEcc4b1+9tmdIxd1Iqim01C1dNUW9B0xf/M82dhN0ysCHa/D bhTaOwvYZ4B9yw99/GDCD7NeYTfg13HWvW75H8oTzKpie45IDg8LZ2whM1D4MMLV QNfrlEbNQ3dzZNe7t3Nnj8vCsoxkhNBGIHqfYyo7MRUpIq8V5LD/Uc8pFLyMvW6G yqESS56r1fl87x9OYpNqxMCWk4/OsIqYLKWaSZP09/FH1gb8x+b3ENxIqSnbUOKf cLMvvoK8sWWeVA2pJnitfqz/ht9S2ULX -----END CERTIFICATE-----Generated at Sun Apr 6 18:28:53 2025 by rpki-client