$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json) Hash identifier: YYrMtUvjpQrEduoAMelP0g+9TVMqRuFxjG640SCGsgw= Subject key identifier: 70:FE:A3:BE:5F:CA:C2:87:10:9E:1F:F5:69:84:FA:0B:5F:23:1F:3E Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft Manifest number: 3486 Signing time: Fri 30 May 2025 14:58:51 +0000 Manifest this update: Fri 30 May 2025 14:58:50 +0000 Manifest next update: Fri 06 Jun 2025 14:58:50 +0000 Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: HEd+eSCJVurZZHjPxXB7qd5D/6ZkD/9N1xJ0Ixy/zpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Validity Not Before: May 30 14:58:50 2025 GMT Not After : Jun 6 14:58:50 2025 GMT Subject: CN=6839c7aa-a518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:81:39:06:b3:01:b2:30:31:b7:ba:3b:8c: 2f:24:b0:7b:88:fe:9a:ba:3b:a9:b3:4f:53:ba:d0: 31:4d:f5:eb:eb:48:8f:7b:f8:ac:39:ee:8e:71:8b: d1:0c:19:10:77:dc:37:53:4e:1f:34:57:46:97:7d: f8:07:df:29:4c:bb:43:aa:73:1d:84:ef:c5:f2:e7: 49:7d:9a:67:58:14:4e:ca:92:a9:b3:20:2e:f6:d8: 82:5b:6d:24:e8:55:a0:dd:c7:dc:6b:da:40:fa:33: 69:8a:5a:d1:6f:57:f3:fd:6a:52:95:39:53:89:53: 11:d8:a9:18:bb:1d:7d:4e:b7:53:b2:b9:6d:b5:3b: be:3d:60:0b:d6:92:5c:98:5f:a5:ed:68:14:bb:ae: 51:d9:30:ad:45:e2:b2:35:c1:4b:1f:6b:63:3d:9c: cf:f3:fc:20:c0:c4:41:fd:97:cd:b9:27:fa:b6:fd: 2f:cc:3e:90:43:2e:70:42:96:ee:4e:eb:e4:5c:fe: 8c:c3:aa:96:86:f0:bb:3e:1f:2b:d8:3b:50:50:36: 22:8a:1d:33:a9:1f:16:23:45:84:9d:13:7b:da:5c: ce:d7:c8:54:8f:89:27:4c:7c:85:17:0b:58:d1:57: 0f:8f:09:78:99:5c:79:85:f0:84:27:75:e5:54:92: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:A3:BE:5F:CA:C2:87:10:9E:1F:F5:69:84:FA:0B:5F:23:1F:3E X509v3 Authority Key Identifier: keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:56:6e:42:49:11:94:c8:03:8a:a6:11:75:f3:f0:c3:54:64: 16:19:61:2d:0f:14:d6:0a:27:66:37:b4:a0:1a:f7:b8:12:31: f4:bb:24:22:0e:9d:e9:a5:53:55:0b:3d:c1:f9:4f:bf:72:47: be:1f:5e:e5:58:2f:48:42:0f:1c:f9:cf:b7:f1:90:8e:12:4b: 82:0f:0c:9f:58:22:12:de:ee:99:79:69:f4:e6:70:02:7d:41: 69:d0:c3:46:57:86:56:f3:a0:20:ad:1f:ac:05:3d:0f:5c:c2: 1c:54:8e:f6:4b:54:bf:d0:11:e4:85:f6:8e:32:91:7f:ae:b4: ce:b0:00:ef:0b:df:94:f9:bf:95:eb:3e:83:66:c2:2f:09:c7: 32:c8:42:d3:d6:69:79:cc:53:57:fa:a9:ab:6c:14:29:15:f2: 15:02:c1:7c:9e:6f:80:27:ed:1c:51:c8:76:a4:56:ce:e6:0a: 96:8d:98:6d:f0:57:c2:27:f5:2e:f1:da:01:77:39:e0:25:5d: 28:42:93:50:bf:e0:08:18:b5:77:e3:c1:bf:56:ba:52:c2:d0: 2d:f1:71:ca:ff:62:05:8b:de:7b:57:5a:f1:c9:60:78:3d:8c: 38:4b:29:70:1d:47:c1:6b:14:dc:f1:19:88:c7:73:be:23:21: b4:3a:62:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5 MkQ5RTZFQzMwHhcNMjUwNTMwMTQ1ODUwWhcNMjUwNjA2MTQ1ODUwWjAYMRYwFAYD VQQDEw02ODM5YzdhYS1hNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1yBOQazAbIwMbe6O4wvJLB7iP6aujups09TutAxTfXr60iPe/isOe6OcYvR DBkQd9w3U04fNFdGl334B98pTLtDqnMdhO/F8udJfZpnWBROypKpsyAu9tiCW20k 6FWg3cfca9pA+jNpilrRb1fz/WpSlTlTiVMR2KkYux19TrdTsrlttTu+PWAL1pJc mF+l7WgUu65R2TCtReKyNcFLH2tjPZzP8/wgwMRB/ZfNuSf6tv0vzD6QQy5wQpbu TuvkXP6Mw6qWhvC7Ph8r2DtQUDYiih0zqR8WI0WEnRN72lzO18hUj4knTHyFFwtY 0VcPjwl4mVx5hfCEJ3XlVJKnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD+o75f ysKHEJ4f9WmE+gtfIx8+MB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZVm5CSRGUyAOKphF18/DDVGQWGWEtDxTWCidmN7SgGve4EjH0uyQi Dp3ppVNVCz3B+U+/cke+H17lWC9IQg8c+c+38ZCOEkuCDwyfWCIS3u6ZeWn05nAC fUFp0MNGV4ZW86AgrR+sBT0PXMIcVI72S1S/0BHkhfaOMpF/rrTOsADvC9+U+b+V 6z6DZsIvCccyyELT1ml5zFNX+qmrbBQpFfIVAsF8nm+AJ+0cUch2pFbO5gqWjZht 8FfCJ/Uu8doBdzngJV0oQpNQv+AIGLV348G/VrpSwtAt8XHK/2IFi957V1rxyWB4 PYw4SylwHUfBaxTc8RmIx3O+IyG0OmLc -----END CERTIFICATE-----Generated at Sat May 31 16:28:39 2025 by rpki-client