$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: /ka6xCMXyk79q8RlhKC/H7hnhuT1jbld5wksvhGXyAk= Subject key identifier: 52:83:39:B6:36:C3:95:AE:F0:F8:DC:AC:AA:AF:49:4A:CF:2C:1F:A1 Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: 6A Signing time: Sat 31 May 2025 06:31:33 +0000 Manifest this update: Sat 31 May 2025 06:31:32 +0000 Manifest next update: Sat 07 Jun 2025 06:31:32 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: 0/P9/rQYDF+wiAQfXW/G1UkrnE3TAYY1LwQSlBM/B5A=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: gOxPsMK6qt78bQigJet/lS4chqy9h8TzqNHqZP/sKyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: May 31 06:31:32 2025 GMT Not After : Jun 7 06:31:32 2025 GMT Subject: CN=683aa245-5839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:c8:06:96:44:71:71:18:64:2e:dc:f8:3c: 62:93:1a:75:09:2e:91:b8:1c:f8:a8:01:2d:59:83: c2:3a:b4:19:48:0a:19:a0:b2:81:88:10:34:51:3d: 61:1b:9e:11:46:20:c3:e3:d2:4c:9f:81:04:9c:7a: 78:21:bf:53:6c:7c:c5:1b:e3:b7:a5:1a:59:00:1b: 24:d8:8b:cc:f7:c8:ce:3b:66:6a:48:5a:c8:f8:fd: d9:47:51:68:ea:05:a6:84:0d:51:58:cb:a7:ab:d7: c4:29:83:94:0d:e5:54:43:07:55:be:c0:5b:da:c9: a7:40:2f:70:34:ae:7f:7d:45:99:22:2b:9b:d9:66: 6c:af:fd:40:17:fb:5a:0b:6d:ce:ed:e9:dc:46:6a: bf:94:30:18:28:0b:05:1f:34:25:c4:1b:67:26:01: fe:79:c1:6f:ba:c7:90:0f:da:70:0d:bc:de:1f:43: f8:95:eb:2f:e8:00:35:3f:c7:dc:ea:19:45:9b:0f: c4:0a:f6:fb:af:1a:a7:53:f7:d2:18:77:ae:56:1e: 0f:7f:a9:93:dd:c6:d8:aa:3c:80:31:d8:6b:91:32: 74:06:d1:75:81:bd:62:e7:21:29:ef:39:80:c5:23: c5:ac:77:4f:d2:54:1a:49:3a:eb:db:0b:a9:7e:61: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:39:B6:36:C3:95:AE:F0:F8:DC:AC:AA:AF:49:4A:CF:2C:1F:A1 X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:79:7f:bd:01:ac:6c:a5:47:ab:81:c0:c0:49:ce:b1:1f: c2:38:e6:de:0d:83:f0:40:f4:29:4f:b9:3c:bc:a1:8e:8d:d4: 03:f0:95:e1:1d:3f:d5:ca:05:77:b7:a2:a3:85:ee:ba:e7:b1: 92:e6:ac:36:25:dd:74:02:e0:45:2f:d2:7f:90:7d:b2:b5:51: aa:f6:58:b2:8d:0d:3e:37:a0:2d:d3:0b:88:ce:02:a1:27:bc: dc:2e:5d:38:f9:49:36:3b:e8:7b:0d:00:ba:61:08:47:c2:0e: 06:e7:b2:65:13:60:c8:fb:0d:17:80:4c:9e:56:da:8b:bd:1e: 6d:81:d6:07:ec:5c:45:77:55:66:98:af:94:34:c0:6c:49:bd: a2:dd:db:93:04:9e:45:37:6a:e3:0a:63:eb:08:25:a8:cb:44: 57:7b:6e:2f:8f:2f:2f:47:2e:aa:e0:3a:cf:aa:bd:29:ce:90: aa:4e:a8:18:01:7c:58:f7:80:c2:b8:b9:49:63:9d:03:3f:ef: c7:eb:20:00:d8:40:03:59:60:7b:b6:e3:1e:aa:80:52:b8:cd: 31:ca:fd:33:ac:41:15:1a:8b:9f:bb:ca:cb:40:d5:0a:f9:94: 8d:31:f8:30:6e:06:57:7b:ce:b2:72:3a:bb:a8:e6:54:ca:14: 80:c5:e1:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTczOTExMC8GA1UEBRMoMEMxQkNFMDI0QjQzRkREQTg3RjM5NjE1RDk5NEJBMzcw NjI0NkM1MDAeFw0yNTA1MzEwNjMxMzJaFw0yNTA2MDcwNjMxMzJaMBgxFjAUBgNV BAMTDTY4M2FhMjQ1LTU4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLYMgGlkRxcRhkLtz4PGKTGnUJLpG4HPioAS1Zg8I6tBlIChmgsoGIEDRRPWEb nhFGIMPj0kyfgQScenghv1NsfMUb47elGlkAGyTYi8z3yM47ZmpIWsj4/dlHUWjq BaaEDVFYy6er18Qpg5QN5VRDB1W+wFvayadAL3A0rn99RZkiK5vZZmyv/UAX+1oL bc7t6dxGar+UMBgoCwUfNCXEG2cmAf55wW+6x5AP2nANvN4fQ/iV6y/oADU/x9zq GUWbD8QK9vuvGqdT99IYd65WHg9/qZPdxtiqPIAx2GuRMnQG0XWBvWLnISnvOYDF I8Wsd0/SVBpJOuvbC6l+Ye9XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUoM5tjbD la7w+Nysqq9JSs8sH6EwHwYDVR0jBBgwFoAUDBvOAktD/dqH85YV2ZS6NwYkbFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNzM5L0M5NUQzOTdDOUY1 MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREJ2T0FrdERfZHFIODVZVjJaUzZOd1lrYkZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NzM5L0M5NUQzOTdDOUY1MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2Rx SDg1WVYyWlM2TndZa2JGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/LeX+9AaxspUergcDASc6xH8I45t4Ng/BA9ClPuTy8oY6N1APwleEd P9XKBXe3oqOF7rrnsZLmrDYl3XQC4EUv0n+QfbK1Uar2WLKNDT43oC3TC4jOAqEn vNwuXTj5STY76HsNALphCEfCDgbnsmUTYMj7DReATJ5W2ou9Hm2B1gfsXEV3VWaY r5Q0wGxJvaLd25MEnkU3auMKY+sIJajLRFd7bi+PLy9HLqrgOs+qvSnOkKpOqBgB fFj3gMK4uUljnQM/78frIADYQANZYHu24x6qgFK4zTHK/TOsQRUai5+7ystA1Qr5 lI0x+DBuBld7zrJyOruo5lTKFIDF4ao= -----END CERTIFICATE-----Generated at Sat May 31 16:44:52 2025 by rpki-client