$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: R+akhgRMbBdFpVjc/dRZW/UXgxDXG6JJdCsprqZ9s4g= Subject key identifier: 1B:5F:21:63:49:FA:DF:CD:30:91:3F:27:46:53:FD:58:18:88:48:11 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01C8 Signing time: Sat 31 May 2025 03:00:48 +0000 Manifest this update: Sat 31 May 2025 03:00:47 +0000 Manifest next update: Sat 07 Jun 2025 03:00:47 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: lPC5SCi9CYVxlK+YIXfPhPdVYXuhTrZ41njL2bIYGOg=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: May 31 03:00:47 2025 GMT Not After : Jun 7 03:00:47 2025 GMT Subject: CN=683a70df-6e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:ab:17:cf:81:da:09:82:ff:7a:a9:a1:06: 8d:6b:7a:d7:24:07:17:91:0a:fc:cf:7c:ad:e6:5e: 39:23:10:df:84:63:ae:87:a7:7a:76:fe:09:6b:73: 73:27:e5:04:84:61:c9:52:7a:81:61:e3:7b:00:3c: 78:13:4a:82:bc:80:c5:f5:b2:57:05:a3:9e:eb:3a: 78:c1:40:cd:db:a4:c5:00:3f:da:6b:d5:ed:99:ec: 96:47:f2:73:3c:c7:1a:53:0b:72:e0:4b:1f:b5:15: f8:50:47:ad:48:95:df:f7:a9:f8:7c:02:5b:a8:0b: af:7a:09:fa:e6:c6:48:76:57:76:d2:50:9c:0b:ba: b2:e1:5b:5d:8f:e3:2f:a1:bf:2d:bb:6a:1e:18:1a: 29:a0:2f:d5:b7:51:40:23:2e:55:fb:bd:e2:50:a0: e4:36:4a:f6:46:ad:de:c1:57:89:fe:d1:ae:42:6e: 7e:f8:38:70:ea:ef:ed:d3:e2:60:12:88:00:b9:a8: db:35:2a:a1:8c:b2:26:db:e5:01:a8:cc:1a:56:16: c8:f8:2e:e7:95:1e:37:d5:b0:a0:30:86:6d:a6:f5: 44:0a:84:da:0f:35:8a:62:1c:78:7b:15:33:66:b7: c2:64:49:8c:cf:b2:59:7f:58:7a:36:87:e0:2f:dd: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5F:21:63:49:FA:DF:CD:30:91:3F:27:46:53:FD:58:18:88:48:11 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0f:05:4b:97:d3:43:12:0e:7d:a4:24:9f:6a:95:fa:fc:9a: 72:d1:e5:0d:70:f4:b1:6b:52:fd:02:21:73:70:f1:3a:81:e1: 8f:5a:69:79:9a:42:25:c6:e5:19:3d:dc:59:15:53:2d:e3:7b: 6b:46:52:8a:79:c6:49:ad:7b:29:85:1c:13:f6:52:61:be:3c: c8:f4:87:11:59:62:46:ba:b2:7e:d3:fb:1e:b3:82:65:c4:55: 5b:3f:7b:ab:87:b2:6a:1a:c5:36:01:40:61:a9:75:dd:ff:e3: e1:eb:0d:b8:c1:13:7c:7f:d0:95:51:f0:d2:e4:0d:31:c6:1f: fa:a7:e4:13:80:22:a4:72:a2:8a:48:de:d1:21:c7:4c:99:b1: c5:24:a1:ed:91:99:8f:72:35:a9:eb:22:26:1c:3b:2e:ab:27: e6:ce:a0:35:33:9e:96:58:37:dc:e6:fc:bd:46:5c:af:0e:95: 17:c8:ee:eb:0f:85:0a:a6:38:40:67:87:e5:9b:39:45:1c:c9: 08:1a:e0:a6:1c:45:63:33:a4:01:de:bf:38:0d:96:40:c2:b9: ed:f7:df:02:02:62:a3:58:80:8d:e9:c4:f9:dd:b0:3f:2f:dd: 22:74:ce:51:0e:e1:63:e6:32:fe:0c:f7:06:16:b1:a5:2c:14: 7c:68:49:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwNTMxMDMwMDQ3WhcNMjUwNjA3MDMwMDQ3WjAYMRYwFAYD VQQDEw02ODNhNzBkZi02ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1GrF8+B2gmC/3qpoQaNa3rXJAcXkQr8z3yt5l45IxDfhGOuh6d6dv4Ja3Nz J+UEhGHJUnqBYeN7ADx4E0qCvIDF9bJXBaOe6zp4wUDN26TFAD/aa9XtmeyWR/Jz PMcaUwty4EsftRX4UEetSJXf96n4fAJbqAuvegn65sZIdld20lCcC7qy4Vtdj+Mv ob8tu2oeGBopoC/Vt1FAIy5V+73iUKDkNkr2Rq3ewVeJ/tGuQm5++Dhw6u/t0+Jg EogAuajbNSqhjLIm2+UBqMwaVhbI+C7nlR431bCgMIZtpvVECoTaDzWKYhx4exUz ZrfCZEmMz7JZf1h6NofgL93bqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtfIWNJ +t/NMJE/J0ZT/VgYiEgRMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjDwVLl9NDEg59pCSfapX6/Jpy0eUNcPSxa1L9AiFzcPE6geGPWml5 mkIlxuUZPdxZFVMt43trRlKKecZJrXsphRwT9lJhvjzI9IcRWWJGurJ+0/ses4Jl xFVbP3urh7JqGsU2AUBhqXXd/+Ph6w24wRN8f9CVUfDS5A0xxh/6p+QTgCKkcqKK SN7RIcdMmbHFJKHtkZmPcjWp6yImHDsuqyfmzqA1M56WWDfc5vy9RlyvDpUXyO7r D4UKpjhAZ4flmzlFHMkIGuCmHEVjM6QB3r84DZZAwrnt998CAmKjWICN6cT53bA/ L90idM5RDuFj5jL+DPcGFrGlLBR8aEnS -----END CERTIFICATE-----Generated at Sat May 31 16:30:36 2025 by rpki-client