$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: hsebL3MzhEQlPxm8/lWwCjHrVU/Nq1Ywb60pXxIFgMY= Subject key identifier: 25:0E:AC:95:C8:88:0D:F2:E1:D2:28:69:8A:76:CF:16:01:E5:98:96 Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 0154 Signing time: Sat 31 May 2025 03:46:01 +0000 Manifest this update: Sat 31 May 2025 03:46:01 +0000 Manifest next update: Sat 07 Jun 2025 03:46:01 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: lkIhGJZWz3Be2UWN11byf/Hts0E0Dstc7oam9YFezrs=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: YH1Nm5sXHdp6f2aOSmPXsxfDGLzWgDg+3RJO69rwbXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: May 31 03:46:01 2025 GMT Not After : Jun 7 03:46:01 2025 GMT Subject: CN=683a7b79-b54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:94:8c:63:0f:80:09:30:9b:64:9b:8b:d1: 13:6c:8e:4d:f1:83:27:6e:fa:ea:9d:2c:43:c5:28: 5d:31:ac:af:9b:8e:1c:a1:d6:f4:72:d1:9c:e7:53: 39:99:3c:a7:0b:2d:d1:a9:23:9d:f5:df:4a:57:d1: fd:c8:0f:bd:eb:f8:5a:ea:c9:54:3c:9f:0f:34:d8: 7d:ac:94:e1:f5:55:8c:b3:06:6c:c6:06:15:13:4e: 76:4d:4f:df:f2:84:7a:32:18:41:0d:63:f5:66:6a: 05:5e:38:ad:6b:4d:40:f6:e9:a3:3e:6b:e3:12:ff: 81:a9:9e:5f:14:02:35:38:57:29:76:f4:e5:2a:8b: e6:e2:92:d4:10:41:b7:90:d8:28:5e:86:95:36:ad: ad:0a:39:ec:4d:9c:e1:3e:63:ea:03:46:55:df:96: 54:26:5b:86:3b:40:fc:75:4f:50:93:69:5d:29:c9: 92:09:52:87:a4:04:39:09:c1:41:7c:1e:0f:c2:9a: 06:38:ea:70:17:12:04:fd:15:f5:ee:ae:02:9e:8e: 46:a1:30:06:93:aa:3c:b0:db:cb:a9:fa:45:3f:00: 3b:57:9e:db:51:ce:a6:f0:ad:4f:24:2c:84:9a:eb: 31:09:e4:67:3c:08:99:ca:0b:3a:f6:37:11:45:38: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:AC:95:C8:88:0D:F2:E1:D2:28:69:8A:76:CF:16:01:E5:98:96 X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c4:04:bf:b5:69:97:e5:7f:af:ca:3e:b7:ed:f6:5e:fa:fa: bd:a1:be:78:45:4c:45:40:e1:e3:4c:e4:71:26:78:9c:73:64: aa:05:37:8d:71:20:5c:4d:e5:fa:e1:4c:38:ed:a4:b1:41:1b: 6a:bc:2b:9f:56:4a:b8:5f:6d:2c:f4:91:28:4a:94:67:f7:6c: 68:b5:29:23:ca:48:d3:5b:24:d0:38:4f:69:6a:bf:ee:d3:63: 1d:74:62:88:3f:36:35:8f:0e:18:af:85:4b:85:c2:b0:25:5c: 46:2c:84:0d:cb:02:b0:73:50:fe:19:17:d2:04:64:a7:ea:99: 6c:3e:6a:47:f8:f7:ca:84:0e:ef:29:13:62:e3:d5:86:02:dc: f0:47:06:ce:4e:db:50:14:ef:fd:f6:27:35:b1:e4:94:1b:97: 35:83:27:aa:51:69:dd:e1:76:15:52:af:d2:3d:1c:70:3c:9c: 86:1c:76:e3:95:1f:ae:e9:da:54:94:f4:9a:95:6e:59:6e:d7: 34:af:0c:30:28:44:98:79:2b:24:37:74:a6:c7:fc:63:32:45: b9:e2:c5:59:75:e7:5c:bc:62:2b:29:dd:20:ef:ad:61:76:d4: 98:a7:12:87:16:a7:d8:c9:a6:12:6f:2a:3f:53:d1:26:b7:ca: 45:ef:dc:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjUwNTMxMDM0NjAxWhcNMjUwNjA3MDM0NjAxWjAYMRYwFAYD VQQDEw02ODNhN2I3OS1iNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTmUjGMPgAkwm2Sbi9ETbI5N8YMnbvrqnSxDxShdMayvm44codb0ctGc51M5 mTynCy3RqSOd9d9KV9H9yA+96/ha6slUPJ8PNNh9rJTh9VWMswZsxgYVE052TU/f 8oR6MhhBDWP1ZmoFXjita01A9umjPmvjEv+BqZ5fFAI1OFcpdvTlKovm4pLUEEG3 kNgoXoaVNq2tCjnsTZzhPmPqA0ZV35ZUJluGO0D8dU9Qk2ldKcmSCVKHpAQ5CcFB fB4PwpoGOOpwFxIE/RX17q4Cno5GoTAGk6o8sNvLqfpFPwA7V57bUc6m8K1PJCyE musxCeRnPAiZygs69jcRRTibJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUOrJXI iA3y4dIoaYp2zxYB5ZiWMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxAS/tWmX5X+vyj637fZe+vq9ob54RUxFQOHjTORxJnicc2SqBTeN cSBcTeX64Uw47aSxQRtqvCufVkq4X20s9JEoSpRn92xotSkjykjTWyTQOE9par/u 02MddGKIPzY1jw4Yr4VLhcKwJVxGLIQNywKwc1D+GRfSBGSn6plsPmpH+PfKhA7v KRNi49WGAtzwRwbOTttQFO/99ic1seSUG5c1gyeqUWnd4XYVUq/SPRxwPJyGHHbj lR+u6dpUlPSalW5Zbtc0rwwwKESYeSskN3Smx/xjMkW54sVZdedcvGIrKd0g761h dtSYpxKHFqfYyaYSbyo/U9Emt8pF79xd -----END CERTIFICATE-----Generated at Sat May 31 17:34:26 2025 by rpki-client