$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json) Hash identifier: 69bw+XSsXZA+HUhDFeTgvdFt2e2yHOI3z0uXeiHtPNM= Subject key identifier: 00:42:5D:57:F8:76:CB:75:E2:A2:39:4D:CA:4F:0A:D4:81:E7:0E:83 Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft Manifest number: 015D Signing time: Sat 31 May 2025 03:46:25 +0000 Manifest this update: Sat 31 May 2025 03:46:24 +0000 Manifest next update: Sat 07 Jun 2025 03:46:24 +0000 Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: WCXIZcYYUMjjqjJh4dW72wK3/SIo0x0uG8k6SSh/GWI=) 2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Validity Not Before: May 31 03:46:24 2025 GMT Not After : Jun 7 03:46:24 2025 GMT Subject: CN=683a7b91-fd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:c6:e1:fa:fa:5f:aa:67:b1:71:72:f4:c1: 8d:e6:84:8d:47:3b:a9:80:07:94:a6:43:8d:91:09: 35:bd:04:83:e8:b2:de:7d:0f:e1:84:a2:d9:2d:64: 8d:7a:bf:15:e3:55:47:3d:e2:07:9b:09:de:db:cf: 7d:3f:87:72:4a:01:67:df:c6:5c:7f:27:49:c3:75: 6b:2c:82:6c:91:cc:54:6b:6f:48:d6:49:41:eb:0d: ee:de:37:f9:7f:bf:75:d8:ce:81:c0:df:27:80:03: b0:c4:e2:82:24:41:e3:5b:e4:43:7e:c3:f3:08:5a: 93:59:09:3b:26:da:e1:9f:91:7b:f2:65:27:23:fd: 80:a6:e7:8d:ef:85:67:13:91:93:ea:34:69:12:c7: c6:2e:a0:d5:3a:e8:50:9a:65:7c:da:4c:94:04:27: b6:2b:00:60:b0:52:41:51:6e:44:13:aa:e8:66:0f: 04:1a:a2:16:51:f5:54:ef:07:ac:51:04:33:25:1e: 05:fe:1a:ab:5f:da:5a:6d:fd:93:a5:d8:46:11:30: 39:34:ac:75:65:a0:7c:66:e8:30:85:57:3a:51:ee: 8b:1d:4e:75:4b:4a:df:9f:b0:de:75:5d:72:c8:33: 17:01:11:50:b5:ad:cf:18:03:cd:d9:25:66:b2:55: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:42:5D:57:F8:76:CB:75:E2:A2:39:4D:CA:4F:0A:D4:81:E7:0E:83 X509v3 Authority Key Identifier: keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6c:1f:1f:2c:21:e8:00:9e:be:37:1e:10:1a:5a:df:91:64: 51:58:15:13:b6:7a:01:4a:f2:2d:c5:cc:a4:c9:4b:2f:85:82: 2f:ef:1a:f7:13:99:3a:e2:2c:4c:14:c2:7b:1a:ba:ce:6a:0e: 8a:cf:dd:21:94:5b:cd:4a:b2:6f:49:7e:f3:dd:19:e2:ef:21: 2f:4a:2f:d8:64:ee:f2:2a:61:11:f4:7d:29:1c:ca:ac:d1:c6: 47:62:73:c8:bf:ce:8b:42:82:3c:2d:e4:b4:4f:95:b6:62:2e: f8:8f:c1:5e:42:a6:bf:92:5e:2d:da:9a:b2:81:a4:07:f8:17: 1f:0e:a1:9c:9e:98:c3:76:de:9b:39:df:6a:6d:00:c9:57:59: b0:90:72:cf:29:2d:f7:6b:01:f2:20:82:df:61:88:80:18:7b: fd:cc:2b:55:52:f1:cf:f7:93:10:96:02:64:97:20:98:65:0a: 41:0d:f5:21:6a:55:54:69:ac:25:72:7d:e2:86:b0:5f:d9:96: a4:35:19:be:0a:e1:8c:01:12:74:7c:e1:28:b7:0f:93:5f:e1: 7d:09:22:db:58:0e:b6:48:a6:01:4c:4d:ee:03:96:8b:f2:56: fd:48:b3:7f:5b:ee:bc:bf:c8:0a:2e:e2:e8:eb:63:99:cc:dc: ee:68:ba:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw RDZFM0U3QzkwHhcNMjUwNTMxMDM0NjI0WhcNMjUwNjA3MDM0NjI0WjAYMRYwFAYD VQQDEw02ODNhN2I5MS1mZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMnG4fr6X6pnsXFy9MGN5oSNRzupgAeUpkONkQk1vQSD6LLefQ/hhKLZLWSN er8V41VHPeIHmwne2899P4dySgFn38ZcfydJw3VrLIJskcxUa29I1klB6w3u3jf5 f7912M6BwN8ngAOwxOKCJEHjW+RDfsPzCFqTWQk7Jtrhn5F78mUnI/2ApueN74Vn E5GT6jRpEsfGLqDVOuhQmmV82kyUBCe2KwBgsFJBUW5EE6roZg8EGqIWUfVU7wes UQQzJR4F/hqrX9pabf2TpdhGETA5NKx1ZaB8ZugwhVc6Ue6LHU51S0rfn7DedV1y yDMXARFQta3PGAPN2SVmslUAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABCXVf4 dst14qI5TcpPCtSB5w6DMB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1 alItV1dfb2RRS0VOYmo1OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwbB8fLCHoAJ6+Nx4QGlrfkWRRWBUTtnoBSvItxcykyUsvhYIv7xr3 E5k64ixMFMJ7GrrOag6Kz90hlFvNSrJvSX7z3Rni7yEvSi/YZO7yKmER9H0pHMqs 0cZHYnPIv86LQoI8LeS0T5W2Yi74j8FeQqa/kl4t2pqygaQH+BcfDqGcnpjDdt6b Od9qbQDJV1mwkHLPKS33awHyIILfYYiAGHv9zCtVUvHP95MQlgJklyCYZQpBDfUh alVUaawlcn3ihrBf2ZakNRm+CuGMARJ0fOEotw+TX+F9CSLbWA62SKYBTE3uA5aL 8lb9SLN/W+68v8gKLuLo62OZzNzuaLrm -----END CERTIFICATE-----Generated at Sat May 31 17:36:02 2025 by rpki-client