$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft File: DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json) Hash identifier: hBNDf8xc1WyDoviC59udety3NJnNhazrzLl+SpLZ7WA= Subject key identifier: 28:28:97:9F:09:26:93:25:FA:70:99:7B:85:FA:00:7F:CD:32:AC:53 Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft Manifest number: 02B6 Signing time: Sat 31 May 2025 01:39:56 +0000 Manifest this update: Sat 31 May 2025 01:39:56 +0000 Manifest next update: Sat 07 Jun 2025 01:39:55 +0000 Files and hashes: 1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: njF89mtCPd3rqG8EUoe+/I4apgH8WpA/jvrhphBoPxI=) 2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: iIYe3iAqeI3EEeITOhoXPScYKg3h3YTnGvgaSVvgFv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Validity Not Before: May 31 01:39:56 2025 GMT Not After : Jun 7 01:39:55 2025 GMT Subject: CN=683a5dec-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:42:6c:4a:c0:b3:7e:de:6b:36:3f:90:ea: 43:b5:79:5b:cf:2b:62:08:7e:c2:4e:cd:21:5c:b7: f3:da:7b:cf:6c:82:7f:d0:ed:69:ae:88:cd:7e:c5: 28:bf:f9:b4:fe:6a:73:2e:e0:bd:eb:e6:f3:6d:14: ea:bc:db:69:c1:ec:37:be:fb:04:e3:55:fe:c2:8a: 63:c1:e0:c2:68:d8:6d:44:4d:66:14:c7:63:0f:51: 9c:fb:01:65:ed:9c:8a:b9:48:b4:f3:f7:fe:c8:47: e7:6f:e3:88:3b:5b:c4:e7:a8:ad:ab:72:f3:a4:7f: d9:76:9d:aa:29:e4:a8:f8:8f:a0:58:56:b4:ed:ef: 5c:dd:be:a2:fd:dd:85:25:18:48:64:ac:43:c9:85: ac:e7:bf:92:6d:b6:0c:de:9d:98:cf:d5:11:ee:ba: 4b:b9:ac:67:cc:63:48:dc:6e:ce:3c:3b:55:93:7a: 4c:04:88:cd:13:12:5e:1d:2b:dd:63:44:23:3b:90: 54:eb:74:ac:3d:40:9b:b5:1d:51:d0:d0:08:78:00: 02:87:5b:48:b7:8e:de:d8:70:fd:28:cb:49:45:e0: ed:6a:0c:f3:a4:d6:53:05:c6:02:50:6a:78:58:e7: 5b:f0:55:48:e7:ce:38:c8:86:8a:42:db:cb:31:8b: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:28:97:9F:09:26:93:25:FA:70:99:7B:85:FA:00:7F:CD:32:AC:53 X509v3 Authority Key Identifier: keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0b:70:b8:7c:9e:30:f6:e6:c4:ab:7a:8f:59:c2:d3:77:11: 30:ed:6f:a8:ef:9f:82:8b:d8:1f:64:2b:ab:9d:fd:75:d3:e1: 19:b7:c7:86:49:53:17:ae:3b:9f:61:03:4c:7f:4a:a9:a0:be: 5a:e5:b5:a6:98:21:35:1d:2a:48:8b:c3:b6:1e:8e:48:cd:54: 41:7e:95:0a:1a:99:7c:54:bc:30:dd:d1:4b:3a:aa:8b:e3:be: fa:cf:e3:df:a3:d1:bd:e4:14:ec:1c:ee:87:f1:64:3a:60:da: 39:22:12:07:36:cc:1d:ec:1c:0c:6d:07:9e:60:e4:ca:6f:6a: 5f:73:d1:de:c5:82:52:81:10:9b:60:40:66:39:ff:b9:71:b2: e4:e9:0e:97:fe:b3:65:3a:b3:70:2d:0f:75:d4:4f:c6:a2:79: 8e:7b:71:d4:f1:d3:13:98:c6:25:3a:a4:fc:46:80:e1:ee:b9: 75:fa:b6:40:56:8c:be:12:ce:37:60:76:c3:ab:ce:eb:d4:b6: 4c:43:ee:00:fa:dc:80:52:82:1b:52:de:88:be:5d:0c:0e:5c: 75:3e:6f:0d:12:50:55:d9:48:fb:4f:30:7d:43:26:9a:e3:3f: e6:98:33:ef:4f:41:35:a9:99:41:51:47:09:b6:fd:73:99:48: f8:bb:27:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1 QkU2MzVDRUEwHhcNMjUwNTMxMDEzOTU2WhcNMjUwNjA3MDEzOTU1WjAYMRYwFAYD VQQDEw02ODNhNWRlYy1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NpCbErAs37eazY/kOpDtXlbzytiCH7CTs0hXLfz2nvPbIJ/0O1projNfsUo v/m0/mpzLuC96+bzbRTqvNtpwew3vvsE41X+wopjweDCaNhtRE1mFMdjD1Gc+wFl 7ZyKuUi08/f+yEfnb+OIO1vE56itq3LzpH/Zdp2qKeSo+I+gWFa07e9c3b6i/d2F JRhIZKxDyYWs57+SbbYM3p2Yz9UR7rpLuaxnzGNI3G7OPDtVk3pMBIjNExJeHSvd Y0QjO5BU63SsPUCbtR1R0NAIeAACh1tIt47e2HD9KMtJReDtagzzpNZTBcYCUGp4 WOdb8FVI5844yIaKQtvLMYs4jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgol58J JpMl+nCZe4X6AH/NMqxTMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4 OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZ MnU0bUVNR24yb2RiNWpYT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4C3C4fJ4w9ubEq3qPWcLTdxEw7W+o75+Ci9gfZCurnf110+EZt8eG SVMXrjufYQNMf0qpoL5a5bWmmCE1HSpIi8O2Ho5IzVRBfpUKGpl8VLww3dFLOqqL 4776z+Pfo9G95BTsHO6H8WQ6YNo5IhIHNswd7BwMbQeeYOTKb2pfc9HexYJSgRCb YEBmOf+5cbLk6Q6X/rNlOrNwLQ911E/GonmOe3HU8dMTmMYlOqT8RoDh7rl1+rZA Voy+Es43YHbDq87r1LZMQ+4A+tyAUoIbUt6Ivl0MDlx1Pm8NElBV2Uj7TzB9Qyaa 4z/mmDPvT0E1qZlBUUcJtv1zmUj4uyc8 -----END CERTIFICATE-----Generated at Sat May 31 16:40:40 2025 by rpki-client