$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json) Hash identifier: P01Rscyg40uL5zGp3vaQWNOsVS31XybFJ1oLodhM0Jg= Subject key identifier: 59:22:56:B6:60:AE:D6:3E:92:3F:B4:AD:B0:1A:A4:3F:89:E0:D6:F5 Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft Manifest number: 0301 Signing time: Thu 17 Apr 2025 00:54:44 +0000 Manifest this update: Thu 17 Apr 2025 00:54:43 +0000 Manifest next update: Thu 24 Apr 2025 00:54:43 +0000 Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: 9LxvZ6JD7iYmPQBOUrBOv7w7m7QhQf4og73Z7Vfzsqs=) 2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: 0uCjW0GPDpZBOo9X1hFG0KRIzIvMOnBTLzlDMrS+8IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Apr 17 00:54:43 2025 GMT Not After : Apr 24 00:54:43 2025 GMT Subject: CN=68005153-d849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:09:c9:84:46:0e:ef:f5:29:d2:21:8b:85: 3a:56:87:fc:05:77:04:7e:89:b2:62:1d:d9:62:f0: 98:6a:9f:92:d1:67:f0:4f:36:97:d9:64:e2:fc:ee: 6e:e1:dd:33:52:5c:bc:ff:6c:f2:0e:33:24:a9:aa: ea:fc:9e:8b:5c:72:9a:b7:e4:20:74:2b:ea:60:48: e9:04:d8:05:86:52:16:4b:a1:fe:9e:83:87:87:6d: 66:1e:ca:63:d0:76:66:b6:9b:1b:93:63:f6:91:02: 70:61:1b:ff:6e:d3:a7:58:7a:73:6c:69:96:b2:1c: 79:ae:2c:5e:7a:4c:ce:b7:3e:66:24:2e:ba:bf:c2: 8e:3f:39:df:34:da:b5:3a:99:7b:47:8a:19:ff:ca: d8:4d:ec:33:6b:de:72:36:19:bd:34:cb:73:eb:c0: 28:31:e3:15:2d:41:fc:cb:23:b4:26:4a:63:f3:31: f1:d8:d4:97:d5:59:80:d1:5a:2e:9c:68:19:11:f9: 01:8f:d9:03:f6:4b:8b:d3:73:db:35:b6:fc:85:49: c8:3e:b7:05:d1:a1:7a:4d:44:c3:4c:3f:9f:f6:be: 71:23:77:58:82:7e:fa:12:82:01:53:00:f5:d4:ff: 92:2c:ad:59:09:d3:14:8c:06:93:56:40:32:38:1c: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:56:B6:60:AE:D6:3E:92:3F:B4:AD:B0:1A:A4:3F:89:E0:D6:F5 X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:e3:6c:94:ad:7b:fe:12:a3:d6:80:08:28:94:2f:61:ac: c0:0c:a1:5a:3b:79:46:c7:77:05:df:d3:19:52:18:39:76:33: 6d:9c:21:9e:23:bc:3c:3c:5d:2c:68:8c:65:0d:70:15:e9:bb: 58:39:78:ee:79:61:d0:cc:dc:6f:9c:45:f5:21:64:be:43:c1: b2:4c:43:ba:a1:98:03:3d:30:41:c6:63:10:7b:b4:c5:c8:ed: 2f:c8:97:f8:ff:66:02:66:cd:09:d7:49:39:49:74:ab:79:6f: a4:3e:48:4d:20:4f:ce:a1:7f:de:fa:e6:ba:cd:a8:47:96:6b: 7a:37:23:7e:ad:a1:57:8e:d1:2c:b9:16:e2:da:64:53:36:7d: 3b:69:6a:96:07:3b:5f:70:b8:ad:f7:ef:4a:8e:1e:23:7b:93: 94:d3:ce:e0:76:ab:26:87:73:02:70:16:9d:57:57:1e:28:82: 9c:5f:a4:e8:6d:53:15:c4:1a:96:a1:5a:b5:ce:3c:3c:a5:01: 8a:6c:6a:f7:42:40:5b:fa:f2:92:4d:a9:68:ac:0e:21:02:35: df:64:07:68:9b:31:c5:0e:97:05:d5:50:23:01:f3:2c:fd:dd: 41:d7:b0:c6:90:f4:94:23:ed:5e:f3:42:6a:9e:4f:9e:e4:fe: d0:25:df:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjUwNDE3MDA1NDQzWhcNMjUwNDI0MDA1NDQzWjAYMRYwFAYD VQQDEw02ODAwNTE1My1kODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmu4JyYRGDu/1KdIhi4U6Vof8BXcEfomyYh3ZYvCYap+S0WfwTzaX2WTi/O5u 4d0zUly8/2zyDjMkqarq/J6LXHKat+QgdCvqYEjpBNgFhlIWS6H+noOHh21mHspj 0HZmtpsbk2P2kQJwYRv/btOnWHpzbGmWshx5rixeekzOtz5mJC66v8KOPznfNNq1 Opl7R4oZ/8rYTewza95yNhm9NMtz68AoMeMVLUH8yyO0Jkpj8zHx2NSX1VmA0Vou nGgZEfkBj9kD9kuL03PbNbb8hUnIPrcF0aF6TUTDTD+f9r5xI3dYgn76EoIBUwD1 1P+SLK1ZCdMUjAaTVkAyOBxv2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkiVrZg rtY+kj+0rbAapD+J4Nb1MB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS WUdTM21STnd6SlpNUFM4NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6leNslK17/hKj1oAIKJQvYazADKFaO3lGx3cF39MZUhg5djNtnCGe I7w8PF0saIxlDXAV6btYOXjueWHQzNxvnEX1IWS+Q8GyTEO6oZgDPTBBxmMQe7TF yO0vyJf4/2YCZs0J10k5SXSreW+kPkhNIE/OoX/e+ua6zahHlmt6NyN+raFXjtEs uRbi2mRTNn07aWqWBztfcLit9+9Kjh4je5OU087gdqsmh3MCcBadV1ceKIKcX6To bVMVxBqWoVq1zjw8pQGKbGr3QkBb+vKSTalorA4hAjXfZAdomzHFDpcF1VAjAfMs /d1B17DGkPSUI+1e80Jqnk+e5P7QJd9g -----END CERTIFICATE-----Generated at Fri Apr 18 04:42:08 2025 by rpki-client