$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: ULZsK+5nbNv8zecRe8MkphXCO3ogIW218EJNpFOOucM= Subject key identifier: 94:01:4A:65:65:17:18:AE:EE:27:1B:0B:D6:A8:58:07:7A:9C:1A:87 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 01C0 Signing time: Sat 31 May 2025 02:50:22 +0000 Manifest this update: Sat 31 May 2025 02:50:21 +0000 Manifest next update: Sat 07 Jun 2025 02:50:21 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: 4m72Ujyw9xd08rF0/2Ez+a2QKxZIgeoF1ihtz9lw6AU=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: May 31 02:50:21 2025 GMT Not After : Jun 7 02:50:21 2025 GMT Subject: CN=683a6e6d-b17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:e7:10:e3:e6:ca:1c:82:a6:cc:e1:b4:f7: 02:01:dd:0e:29:4c:99:26:89:9d:7b:1a:52:4e:48: 29:3d:ce:8f:55:05:4e:40:a5:4b:a3:19:38:a4:c1: 0d:bd:71:ba:28:a8:e8:d2:f5:0a:dc:bd:36:23:45: cb:2a:95:9e:75:e5:38:2c:92:21:19:96:14:11:4f: 7c:86:20:41:f9:c2:2b:0f:cc:69:d8:e4:44:66:c9: b4:d6:25:dd:4c:67:6b:ca:0a:06:9c:f0:1f:89:28: c3:7b:af:6f:67:69:22:a0:1a:63:7a:22:3d:31:c4: 49:a7:b6:b5:9c:29:84:d2:a5:d9:29:6c:bf:e2:42: 1d:80:45:6d:73:21:3b:60:b1:6e:1f:3f:a5:71:ed: af:9a:83:d2:57:c6:3b:2e:59:22:45:c1:76:e0:68: 70:3c:42:fe:67:cc:f5:b8:c8:0e:2a:52:fb:b7:90: e2:20:ba:fc:a5:b8:89:d0:0e:4c:ff:1e:1c:36:e9: 8b:de:8b:e0:c9:22:72:ba:28:6b:51:22:d9:5e:23: df:51:48:10:86:dd:3c:f6:a9:ec:a1:37:6d:0e:4c: 4e:74:15:3e:14:92:ab:8f:47:a1:59:ba:46:d3:d9: 7e:16:55:d7:13:8b:01:07:01:60:68:10:ee:7c:be: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:01:4A:65:65:17:18:AE:EE:27:1B:0B:D6:A8:58:07:7A:9C:1A:87 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:16:c2:40:9f:ca:51:5d:0b:1c:9e:24:d2:32:da:61:cd:8e: 31:7c:8f:fb:b7:50:99:b2:64:cd:9e:6b:b6:90:8c:3c:ca:42: 4a:2a:12:d6:e3:c5:74:ea:61:b4:c7:5c:37:b0:45:5f:be:19: 48:db:14:5b:4b:47:61:7e:31:3e:f5:01:13:a2:bf:68:9f:57: ff:12:0b:bd:51:90:09:b9:c9:9c:a2:66:61:a9:27:7e:19:6e: fa:e9:9d:b0:ec:29:61:1c:6a:03:11:7d:59:68:6b:5d:f9:eb: 2a:01:7c:ae:79:b8:f4:e5:5c:55:43:8e:8f:9a:7e:b7:c6:58: bc:37:24:97:e0:34:b2:5e:07:66:56:9e:22:f8:df:61:9c:08: fd:b9:fd:01:59:ee:22:23:eb:dc:1e:b6:11:38:34:5d:8c:79: 66:f4:2c:e6:6e:ad:ae:7b:1e:78:70:93:5d:0e:df:73:a1:57: 88:60:da:97:ee:25:e2:bc:54:d4:e9:bb:07:32:c9:8f:50:27: b6:ab:0f:50:86:d2:4f:61:05:a4:a0:c3:27:ae:ef:55:21:01: fe:bf:c6:19:48:fb:58:03:1a:86:e0:30:b8:42:fc:a0:80:22: 1c:0d:12:f2:85:87:14:81:27:37:87:14:60:ef:e3:38:10:49: 64:52:78:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUwNTMxMDI1MDIxWhcNMjUwNjA3MDI1MDIxWjAYMRYwFAYD VQQDEw02ODNhNmU2ZC1iMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTfnEOPmyhyCpszhtPcCAd0OKUyZJomdexpSTkgpPc6PVQVOQKVLoxk4pMEN vXG6KKjo0vUK3L02I0XLKpWedeU4LJIhGZYUEU98hiBB+cIrD8xp2OREZsm01iXd TGdrygoGnPAfiSjDe69vZ2kioBpjeiI9McRJp7a1nCmE0qXZKWy/4kIdgEVtcyE7 YLFuHz+lce2vmoPSV8Y7LlkiRcF24GhwPEL+Z8z1uMgOKlL7t5DiILr8pbiJ0A5M /x4cNumL3ovgySJyuihrUSLZXiPfUUgQht089qnsoTdtDkxOdBU+FJKrj0ehWbpG 09l+FlXXE4sBBwFgaBDufL62OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQBSmVl Fxiu7icbC9aoWAd6nBqHMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfFsJAn8pRXQscniTSMtphzY4xfI/7t1CZsmTNnmu2kIw8ykJKKhLW 48V06mG0x1w3sEVfvhlI2xRbS0dhfjE+9QETor9on1f/Egu9UZAJucmcomZhqSd+ GW766Z2w7ClhHGoDEX1ZaGtd+esqAXyuebj05VxVQ46Pmn63xli8NySX4DSyXgdm Vp4i+N9hnAj9uf0BWe4iI+vcHrYRODRdjHlm9Czmbq2uex54cJNdDt9zoVeIYNqX 7iXivFTU6bsHMsmPUCe2qw9QhtJPYQWkoMMnru9VIQH+v8YZSPtYAxqG4DC4Qvyg gCIcDRLyhYcUgSc3hxRg7+M4EElkUng9 -----END CERTIFICATE-----Generated at Sat May 31 16:28:39 2025 by rpki-client