$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: 3ovCApkH9+PNfwVtHXQkZs26sATQA9/Kjy16LglCqms= Subject key identifier: 2C:A0:94:0F:3B:B9:D7:EE:27:FD:64:02:6E:49:0E:06:A3:FA:AD:01 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 08FE Signing time: Fri 30 May 2025 20:34:27 +0000 Manifest this update: Fri 30 May 2025 20:34:26 +0000 Manifest next update: Fri 06 Jun 2025 20:34:26 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: SaVXPd0zfMw17e8TeEB/1ANRVrW1m0raNKOWsDuV31c=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: May 30 20:34:26 2025 GMT Not After : Jun 6 20:34:26 2025 GMT Subject: CN=683a1653-3430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:b6:e3:ca:b5:d8:4a:1e:59:57:3f:a2:39: ae:81:8b:b5:f5:39:16:46:27:c2:17:d9:7b:ff:44: c0:e0:11:29:79:07:9d:90:d6:70:54:27:a0:02:4f: d9:d4:77:b8:09:31:c8:45:df:ee:7c:93:90:9c:e1: 16:58:68:38:de:d0:d4:7a:6c:66:aa:51:19:04:49: 1c:ae:67:e7:8e:8a:cb:a8:33:df:fa:4a:36:48:19: 5c:40:8d:78:8b:dc:0c:01:19:86:7a:5a:37:c0:c8: a9:0a:56:99:26:5c:8c:b1:eb:32:c8:d6:cc:00:d2: 07:06:4c:9c:88:9f:43:2e:58:59:7d:5c:d1:c8:d9: e5:df:ab:41:45:77:8d:d5:72:64:76:52:e4:1a:6e: 09:24:7e:67:3b:e1:7c:29:be:d0:40:81:75:b6:1a: 64:2e:85:42:c8:b7:9c:2f:86:54:cb:18:0c:a0:32: 90:01:55:c7:4b:2f:61:59:12:1b:e8:7f:1f:3f:d0: 18:b4:ec:60:cb:7c:ea:0d:b9:5a:41:65:df:ae:aa: 70:7f:e9:73:03:9c:d1:8c:8b:73:b0:6b:72:36:13: 09:1b:62:f7:ee:36:05:33:24:d8:38:f4:8c:c0:1f: 62:12:2c:95:92:5e:ab:fd:5e:4c:1e:74:cf:5d:03: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:94:0F:3B:B9:D7:EE:27:FD:64:02:6E:49:0E:06:A3:FA:AD:01 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c1:9c:13:e0:10:e2:c9:d4:50:c2:89:14:d1:82:3c:d4:6b: 6b:06:17:71:e7:6e:63:28:5f:25:23:2a:dc:59:03:8e:20:c7: 10:ac:1b:19:d1:4d:c5:a4:df:3c:a3:ea:58:3a:bd:47:64:96: 50:6c:1c:3c:da:b2:ef:0a:2c:6d:fd:c9:80:60:c9:29:c4:c3: d6:d0:ba:a4:18:11:54:c9:72:39:8d:ea:0c:76:a8:12:8e:8f: d3:63:ab:09:5f:52:f9:40:24:68:78:9c:46:2b:e3:8b:3b:0e: 66:44:2c:77:f6:08:e2:a7:5f:c3:86:55:a7:db:6d:1a:07:8c: 78:eb:76:77:54:6a:68:1e:15:da:32:d5:e5:b9:39:e8:18:a3: 06:85:cd:49:15:bb:a1:eb:24:46:27:71:1a:b2:85:45:a1:07: fc:b6:00:49:a5:f9:91:c9:fb:eb:b3:e3:e1:98:36:f1:b6:e1: 4c:35:83:12:e9:49:ae:27:fb:bc:07:69:28:ac:a6:91:54:ea: 54:e4:23:5c:c5:3c:e0:66:cc:56:b9:d3:e3:0e:d0:ee:f8:de: 23:3a:b5:51:18:1f:91:3c:d9:e5:df:e8:ee:6a:b8:c6:dc:4f: a0:51:7d:f4:ef:61:c3:24:f7:4c:da:80:47:f1:1b:1b:0a:dd: 37:75:ee:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUwNTMwMjAzNDI2WhcNMjUwNjA2MjAzNDI2WjAYMRYwFAYD VQQDEw02ODNhMTY1My0zNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoy248q12EoeWVc/ojmugYu19TkWRifCF9l7/0TA4BEpeQedkNZwVCegAk/Z 1He4CTHIRd/ufJOQnOEWWGg43tDUemxmqlEZBEkcrmfnjorLqDPf+ko2SBlcQI14 i9wMARmGelo3wMipClaZJlyMsesyyNbMANIHBkyciJ9DLlhZfVzRyNnl36tBRXeN 1XJkdlLkGm4JJH5nO+F8Kb7QQIF1thpkLoVCyLecL4ZUyxgMoDKQAVXHSy9hWRIb 6H8fP9AYtOxgy3zqDblaQWXfrqpwf+lzA5zRjItzsGtyNhMJG2L37jYFMyTYOPSM wB9iEiyVkl6r/V5MHnTPXQM42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyglA87 udfuJ/1kAm5JDgaj+q0BMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXwZwT4BDiydRQwokU0YI81GtrBhdx525jKF8lIyrcWQOOIMcQrBsZ 0U3FpN88o+pYOr1HZJZQbBw82rLvCixt/cmAYMkpxMPW0LqkGBFUyXI5jeoMdqgS jo/TY6sJX1L5QCRoeJxGK+OLOw5mRCx39gjip1/DhlWn220aB4x463Z3VGpoHhXa MtXluTnoGKMGhc1JFbuh6yRGJ3EasoVFoQf8tgBJpfmRyfvrs+PhmDbxtuFMNYMS 6UmuJ/u8B2korKaRVOpU5CNcxTzgZsxWudPjDtDu+N4jOrVRGB+RPNnl3+juarjG 3E+gUX3072HDJPdM2oBH8RsbCt03de4W -----END CERTIFICATE-----Generated at Sat May 31 17:12:54 2025 by rpki-client