$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: YQskHYLfH0HMC59lBWWu6PaOkbnbs2Q8malc4Twzi1Y= Subject key identifier: 1E:23:E0:32:50:71:D9:29:2B:24:73:00:1D:BC:67:11:5C:E7:15:DE Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 0323 Signing time: Mon 21 Apr 2025 00:45:18 +0000 Manifest this update: Mon 21 Apr 2025 00:45:17 +0000 Manifest next update: Mon 28 Apr 2025 00:45:17 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: CZij1a2JHJ9TtSAjhrEPCIZLAVAJgZ7EJRktBTqEiKE=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Apr 21 00:45:17 2025 GMT Not After : Apr 28 00:45:17 2025 GMT Subject: CN=6805951d-7240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:bb:d0:fc:14:bf:84:d9:d1:e5:38:a2:84: 35:68:fc:fb:4f:d2:2a:9e:39:dc:15:7e:f7:94:52: 47:b0:11:9e:c8:b3:bf:2a:dc:23:c1:45:f7:4b:e4: f0:38:20:68:14:68:de:c2:2d:de:21:90:31:65:0d: 41:56:66:19:23:58:60:2b:c1:b9:4d:86:56:35:b8: 55:b3:62:3f:3c:90:30:89:9a:a8:50:9d:76:17:af: 49:9a:e7:6e:8f:e8:53:58:f0:65:19:b1:40:7d:6f: e3:10:16:25:a0:9e:ba:2e:71:f5:a5:70:45:90:12: cb:1c:61:ff:19:5e:2e:6a:66:d6:ae:19:ed:30:17: 98:66:50:ea:e9:ed:67:6a:2c:14:a9:4d:2c:bd:47: ea:3a:29:b6:11:0d:74:5c:1f:ad:de:e6:55:f9:b3: 27:87:9c:d1:0f:69:05:c1:d0:31:a8:a1:c2:fd:d7: 5e:ce:b1:9e:ad:30:fb:03:ec:76:0e:e3:c6:c7:38: d7:9c:d9:57:b3:03:80:f7:85:5e:b9:7c:0c:c4:8d: 26:a6:ab:e4:67:fc:86:62:ad:f5:c1:a7:b1:69:c6: 92:0a:c9:d2:4c:44:e4:b3:25:bb:cf:89:e8:25:0e: b0:1f:e7:50:a2:dd:de:4d:8d:6a:f9:76:cf:46:54: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:23:E0:32:50:71:D9:29:2B:24:73:00:1D:BC:67:11:5C:E7:15:DE X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d1:0a:29:cb:01:57:e8:2c:e9:d0:e9:30:9c:61:ad:ca:9a: c1:39:de:56:70:52:c6:d5:b0:f9:bb:59:4b:12:9b:53:20:89: da:c8:aa:6d:4d:36:53:f1:ad:58:ca:f6:f8:33:1e:40:89:d2: f1:e2:1b:7d:f1:b8:cd:bb:54:ff:6f:46:ad:f1:07:e0:3c:1e: 3b:03:6b:22:75:b2:48:ee:f1:c5:49:17:13:11:ed:78:41:45: 6a:eb:87:8b:6d:1e:9e:05:5c:4a:de:a1:16:de:2a:db:8b:69: 96:df:9f:aa:33:c3:9b:37:c2:05:6a:28:3e:26:b6:84:42:e7: 15:fd:10:53:d9:f6:61:b1:ba:d3:18:fb:48:7d:74:46:28:17: de:4d:69:6a:59:de:11:45:86:3b:e7:e3:86:fb:11:24:a7:7b: 5f:0b:0b:0b:cd:b9:2c:4c:d3:94:87:5f:5f:a0:7b:4b:9a:66: b5:6f:48:0b:c1:b6:59:6a:c1:cf:33:2e:79:74:e8:ed:a7:d8: 9b:54:1a:ea:df:49:1b:75:88:98:a7:33:f9:df:cf:5a:3a:a7: 95:ba:f6:6f:4c:0d:d0:a6:ac:26:17:68:81:77:d1:1a:da:d5: fb:f3:63:bc:bf:b7:ae:6e:75:7d:23:9e:6c:d7:a4:58:51:d6: b5:db:9c:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUwNDIxMDA0NTE3WhcNMjUwNDI4MDA0NTE3WjAYMRYwFAYD VQQDEw02ODA1OTUxZC03MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0g270PwUv4TZ0eU4ooQ1aPz7T9IqnjncFX73lFJHsBGeyLO/KtwjwUX3S+Tw OCBoFGjewi3eIZAxZQ1BVmYZI1hgK8G5TYZWNbhVs2I/PJAwiZqoUJ12F69Jmudu j+hTWPBlGbFAfW/jEBYloJ66LnH1pXBFkBLLHGH/GV4uambWrhntMBeYZlDq6e1n aiwUqU0svUfqOim2EQ10XB+t3uZV+bMnh5zRD2kFwdAxqKHC/ddezrGerTD7A+x2 DuPGxzjXnNlXswOA94VeuXwMxI0mpqvkZ/yGYq31waexacaSCsnSTETksyW7z4no JQ6wH+dQot3eTY1q+XbPRlRnxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4j4DJQ cdkpKyRzAB28ZxFc5xXeMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB0QopywFX6Czp0OkwnGGtyprBOd5WcFLG1bD5u1lLEptTIInayKpt TTZT8a1Yyvb4Mx5AidLx4ht98bjNu1T/b0at8QfgPB47A2sidbJI7vHFSRcTEe14 QUVq64eLbR6eBVxK3qEW3irbi2mW35+qM8ObN8IFaig+JraEQucV/RBT2fZhsbrT GPtIfXRGKBfeTWlqWd4RRYY75+OG+xEkp3tfCwsLzbksTNOUh19foHtLmma1b0gL wbZZasHPMy55dOjtp9ibVBrq30kbdYiYpzP5389aOqeVuvZvTA3QpqwmF2iBd9Ea 2tX782O8v7eubnV9I55s16RYUda125wN -----END CERTIFICATE-----Generated at Tue Apr 22 16:32:00 2025 by rpki-client