$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: VEf7tJbOgciSyK6Mwke1rgwnMIU2PfCk8p/SpqasAUA= Subject key identifier: 69:16:D1:AE:A8:09:5A:A6:8A:97:99:C5:5E:B6:2E:ED:B9:4D:5D:9D Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: C8 Signing time: Sat 05 Apr 2025 05:07:33 +0000 Manifest this update: Sat 05 Apr 2025 05:07:32 +0000 Manifest next update: Sat 12 Apr 2025 05:07:32 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: zgiav7iwQyKiuZU+oMP7tBhJA88SGvS1sGJ3wAiKKig=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF Validity Not Before: Apr 5 05:07:32 2025 GMT Not After : Apr 12 05:07:32 2025 GMT Subject: CN=67f0ba95-6137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:28:99:30:47:ae:34:fb:89:c6:17:75:93: 58:aa:5c:29:3e:a5:c8:7f:47:ef:c8:92:7a:14:67: e3:7b:56:91:9b:38:74:bf:96:49:f2:84:41:47:f6: aa:1f:1c:c1:58:da:aa:e1:25:88:9d:0a:6f:33:34: 21:ae:11:e8:fc:51:01:1a:d1:cf:21:7a:45:b8:48: 45:bb:70:20:1b:83:e5:c3:0c:a2:49:e8:50:f5:14: 1f:81:96:28:9d:bc:34:86:36:d6:1c:a1:00:85:f1: f3:82:0b:59:01:a0:0e:b8:a2:2f:61:35:ca:22:0d: 98:07:a9:27:95:18:fc:a5:21:c5:1f:56:30:6b:ee: 8f:ef:a3:78:52:0e:63:74:ca:a8:47:83:d8:da:3f: d6:7c:d3:41:98:32:30:41:3a:1c:bf:4e:0a:1f:81: e6:66:72:a9:6a:7f:67:3c:63:53:c5:51:bb:c4:34: fd:52:a1:98:c5:3b:0b:f2:c1:34:85:21:30:12:8a: b4:dd:ba:c5:22:ed:80:99:6c:6c:bf:0b:32:7b:a7: ae:a1:65:c1:55:29:75:19:08:fd:92:b3:7c:0d:ae: f0:1b:28:06:68:55:5e:fa:f3:c8:56:49:8c:39:14: ed:bc:32:db:49:28:85:93:10:26:91:cc:7f:0d:f3: a6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:D1:AE:A8:09:5A:A6:8A:97:99:C5:5E:B6:2E:ED:B9:4D:5D:9D X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9f:ea:54:f1:ac:3b:d4:70:f9:da:35:e8:83:14:b4:1d:f3: 17:22:38:da:4a:db:a4:9c:2b:71:a2:60:10:60:1c:15:4f:12: 81:15:93:a9:e2:4c:94:ef:9d:0e:3e:94:41:7e:cb:b6:2d:71: 62:73:a6:c6:18:38:a5:83:c2:c2:70:36:9a:a7:96:1d:65:ad: 54:99:0a:8e:26:e5:75:ab:5e:02:de:19:bb:02:94:80:85:05: 4f:f7:26:6c:18:45:67:7f:2e:c6:04:f3:03:37:a5:d7:fe:56: f0:ea:02:1b:81:2b:dc:77:d5:55:3d:3d:4f:05:8d:b4:eb:0b: 15:43:a1:63:6d:a4:aa:39:cb:69:aa:24:3c:b9:3f:9c:1f:0f: 33:ef:8a:76:b6:7f:b5:1e:da:c5:6f:4b:43:a4:ce:44:c2:41: 5e:63:ce:5a:9b:f5:5d:d8:b6:86:3a:0b:97:a1:82:ed:19:4c: 08:e0:66:b3:f6:41:8d:a2:94:0f:e9:46:aa:0e:ac:bf:f3:47: c8:7a:38:f1:25:85:5d:b3:29:dc:a4:3e:2a:17:a9:74:7d:45: 00:c6:bb:e5:70:c5:c5:7b:7d:da:80:6d:88:8d:86:dd:48:df: a1:17:a9:da:77:18:23:02:5b:68:a8:d1:e9:60:ab:d2:04:0c: 34:9b:bd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwNDA1MDUwNzMyWhcNMjUwNDEyMDUwNzMyWjAYMRYwFAYD VQQDEw02N2YwYmE5NS02MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiUomTBHrjT7icYXdZNYqlwpPqXIf0fvyJJ6FGfje1aRmzh0v5ZJ8oRBR/aq HxzBWNqq4SWInQpvMzQhrhHo/FEBGtHPIXpFuEhFu3AgG4PlwwyiSehQ9RQfgZYo nbw0hjbWHKEAhfHzggtZAaAOuKIvYTXKIg2YB6knlRj8pSHFH1Ywa+6P76N4Ug5j dMqoR4PY2j/WfNNBmDIwQTocv04KH4HmZnKpan9nPGNTxVG7xDT9UqGYxTsL8sE0 hSEwEoq03brFIu2AmWxsvwsye6euoWXBVSl1GQj9krN8Da7wGygGaFVe+vPIVkmM ORTtvDLbSSiFkxAmkcx/DfOmrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkW0a6o CVqmipeZxV62Lu25TV2dMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXn+pU8aw71HD52jXogxS0HfMXIjjaStuknCtxomAQYBwVTxKBFZOp 4kyU750OPpRBfsu2LXFic6bGGDilg8LCcDaap5YdZa1UmQqOJuV1q14C3hm7ApSA hQVP9yZsGEVnfy7GBPMDN6XX/lbw6gIbgSvcd9VVPT1PBY206wsVQ6FjbaSqOctp qiQ8uT+cHw8z74p2tn+1HtrFb0tDpM5EwkFeY85am/Vd2LaGOguXoYLtGUwI4Gaz 9kGNopQP6UaqDqy/80fIejjxJYVdsyncpD4qF6l0fUUAxrvlcMXFe33agG2IjYbd SN+hF6nadxgjAltoqNHpYKvSBAw0m702 -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:35 2025 by rpki-client