$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: sabT1LGpDsfEXLYEn+kRwSh2gaQHm+iULdy7E+++bsU= Subject key identifier: 62:27:31:29:A1:58:AC:A4:6F:AD:79:29:25:D2:BF:22:A7:24:8C:A6 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 0D Signing time: Tue 03 Jun 2025 07:59:15 +0000 Manifest this update: Tue 03 Jun 2025 07:59:14 +0000 Manifest next update: Tue 10 Jun 2025 07:59:14 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: i+3HeZ3PEZflt2tT/xhyBDBXOYsM8qtWOl6nABEeobY=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 4: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 5: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 6: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jun 3 07:59:14 2025 GMT Not After : Jun 10 07:59:14 2025 GMT Subject: CN=683eab53-a1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:a8:4b:8b:80:94:03:a7:4f:5a:2b:c3:e0: 80:9e:11:57:5b:37:de:6e:bc:ba:e0:6e:a6:22:30: 28:f9:0b:a4:37:13:2c:85:6a:8b:cb:93:6e:36:6a: f5:79:e0:5c:94:c0:6b:75:a5:5e:c0:e8:6d:2e:4f: 4f:55:c1:27:10:c6:ad:ad:4c:c6:e6:fa:6b:36:e4: 9f:9c:33:a7:e7:4a:cc:2b:c3:b8:04:1f:5a:9d:e8: 4c:1a:67:76:9f:2d:d0:b1:c5:75:3c:92:4a:08:c5: 90:31:c2:e6:7c:57:bf:6a:0b:f0:c5:0e:24:10:1b: ad:07:ce:30:90:11:e4:01:21:8a:ed:1d:b8:1d:a7: e4:c8:0a:b4:2b:c8:e9:87:9c:7a:66:86:bc:7c:77: 82:74:6c:e7:f7:a7:3b:fa:e4:fb:47:22:d8:e6:d7: 01:17:63:3f:22:d5:76:3b:da:1d:e2:bb:33:1b:09: 43:73:0e:d4:a3:b6:4c:2c:18:6e:8a:a8:d6:54:09: 7b:e8:30:3b:b7:ed:b5:ec:49:90:c7:14:e5:07:1b: 4f:64:f3:1a:f6:7a:30:49:b3:c3:3d:ff:03:52:16: e8:00:bf:db:d7:d2:ce:12:21:15:70:77:0d:d5:63: 1c:72:93:94:74:7b:7b:02:2f:b7:62:9e:a6:01:43: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:27:31:29:A1:58:AC:A4:6F:AD:79:29:25:D2:BF:22:A7:24:8C:A6 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:82:20:ca:88:0f:0f:b9:f8:5a:34:d6:e2:aa:b8:ca:d8:b9: 89:bb:a8:ba:66:79:09:17:5e:c5:f2:3c:a8:6c:3d:cc:ba:9c: 30:04:ad:43:3e:c9:ad:74:72:e4:fe:65:7d:f8:fd:bd:7f:d4: 07:b0:04:c0:86:56:87:ef:97:48:35:a0:9f:ef:3b:3c:f3:c0: 15:29:ad:3d:87:5d:7b:f9:55:84:63:a2:aa:94:65:f4:85:97: 42:22:49:05:97:54:d3:3b:c5:37:24:9a:56:b6:ac:2f:e2:55: 36:85:53:34:31:70:87:e4:d2:0d:3e:ac:c9:2b:0e:ce:75:02: ba:f8:fb:09:9c:ba:14:d7:0f:7c:c5:e0:a3:1b:d8:76:34:2b: a5:f2:fe:79:00:b8:9a:66:05:fd:94:bb:30:34:1e:c7:11:7f: bf:e0:88:ea:d0:15:9b:3a:14:66:1d:4b:18:c8:5e:49:e6:bc: 3a:18:ad:13:c1:e0:16:4b:51:b2:c5:98:74:f6:1a:ea:15:40: a7:72:92:d8:6a:d0:ef:c7:17:71:88:2e:af:c8:c0:66:ff:2c: 50:18:f2:55:69:0b:e5:9f:5f:f4:1b:7a:c4:3e:02:c5:9f:00: 7f:1d:49:fe:26:33:22:31:74:3e:b8:30:66:67:bf:d6:e9:04: 79:b9:72:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA2MDMwNzU5MTRaFw0yNTA2MTAwNzU5MTRaMBgxFjAUBgNV BAMTDTY4M2VhYjUzLWExZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNfqhLi4CUA6dPWivD4ICeEVdbN95uvLrgbqYiMCj5C6Q3EyyFaovLk242avV5 4FyUwGt1pV7A6G0uT09VwScQxq2tTMbm+ms25J+cM6fnSswrw7gEH1qd6EwaZ3af LdCxxXU8kkoIxZAxwuZ8V79qC/DFDiQQG60HzjCQEeQBIYrtHbgdp+TICrQryOmH nHpmhrx8d4J0bOf3pzv65PtHItjm1wEXYz8i1XY72h3iuzMbCUNzDtSjtkwsGG6K qNZUCXvoMDu37bXsSZDHFOUHG09k8xr2ejBJs8M9/wNSFugAv9vX0s4SIRVwdw3V Yxxyk5R0e3sCL7dinqYBQyEXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYicxKaFY rKRvrXkpJdK/IqckjKYwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuCIMqIDw+5+Fo01uKquMrYuYm7qLpmeQkXXsXyPKhsPcy6nDAErUM+ ya10cuT+ZX34/b1/1AewBMCGVofvl0g1oJ/vOzzzwBUprT2HXXv5VYRjoqqUZfSF l0IiSQWXVNM7xTckmla2rC/iVTaFUzQxcIfk0g0+rMkrDs51Arr4+wmcuhTXD3zF 4KMb2HY0K6Xy/nkAuJpmBf2UuzA0HscRf7/giOrQFZs6FGYdSxjIXknmvDoYrRPB 4BZLUbLFmHT2GuoVQKdykthq0O/HF3GILq/IwGb/LFAY8lVpC+WfX/QbesQ+AsWf AH8dSf4mMyIxdD64MGZnv9bpBHm5cnw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:31 2025 by rpki-client