$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: dSWKLtJGgUxWYmSyJacgpKsJq7xGQ7hM+bEdbT9vaOA= Subject key identifier: 26:20:EA:A3:D6:DF:5D:F2:7D:63:8B:1F:14:56:4F:DC:F9:B9:A4:03 Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 0122 Signing time: Sat 31 May 2025 04:24:15 +0000 Manifest this update: Sat 31 May 2025 04:24:14 +0000 Manifest next update: Sat 07 Jun 2025 04:24:14 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: zztkaPIL6hBif6PILjR+D6xc73BiL2fMoCTUR7IOKNg=) 2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: vfKxgRyaFVDrpAYeeSphpPYjXOMfsg5HY/hQjECiMtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: May 31 04:24:14 2025 GMT Not After : Jun 7 04:24:14 2025 GMT Subject: CN=683a846f-12b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:ee:8a:40:c0:d3:32:13:a2:64:d6:48:0c: 74:41:15:0a:63:d2:09:de:36:89:0e:8b:6d:6c:6b: f2:b7:3c:6a:1e:33:1e:f2:77:57:ef:45:93:57:10: 2c:a7:bc:92:32:b7:e2:c1:e3:99:a7:85:54:7e:65: b7:87:4e:d0:48:a1:6d:26:7e:47:99:48:47:1f:b2: 23:2f:70:3f:d5:6e:1e:ce:00:5c:eb:bd:58:40:b7: f1:4d:b9:57:46:d5:6b:83:ee:58:d6:0b:d5:e2:fa: 2e:40:57:a1:9c:b5:3d:8c:a9:bb:97:9a:44:6b:d4: df:3e:f6:0c:98:41:7f:f9:33:a3:0c:87:2b:03:0f: 42:5d:9f:84:11:ac:5c:6d:ef:c3:a5:87:7b:e8:60: 2b:40:0b:fa:c2:96:bd:2d:40:0b:7d:66:63:3b:86: d7:a6:e8:fd:51:ec:e0:23:43:c0:0a:0d:12:c1:a2: f4:4b:64:4c:aa:13:2f:72:13:d3:10:65:bb:8d:50: c8:cf:b0:36:df:9f:a5:6f:af:8b:4f:33:f3:7c:f7: 3a:cb:3c:97:70:4a:85:e2:22:95:9a:bf:9f:97:4d: 94:a0:3d:c6:1c:05:49:82:9a:66:dd:76:30:37:fc: b8:d8:b0:de:47:3b:3a:bf:49:eb:1e:34:9c:f0:27: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:20:EA:A3:D6:DF:5D:F2:7D:63:8B:1F:14:56:4F:DC:F9:B9:A4:03 X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a7:ba:49:02:c6:2e:90:83:7b:39:27:bd:0f:18:43:df:fb: 46:a4:5b:54:e6:ef:27:30:9c:13:ee:4c:c3:18:ad:dd:11:d6: 86:83:f1:d8:4e:8d:2a:1c:b1:e0:ad:27:46:30:85:5a:09:8b: 4f:bf:96:19:d5:47:ec:e1:06:b9:2a:54:f2:6f:97:2d:bf:79: ba:74:be:42:61:1a:87:af:ca:a4:44:44:3b:b9:1d:27:d8:d8: dc:d4:20:fd:1b:55:98:4e:d5:9f:1b:7a:16:38:3e:f2:00:bb: 9c:9d:6d:a1:f4:8f:f9:7c:fe:c3:5d:38:33:9a:42:0e:77:17: 60:54:ed:ad:68:03:80:cd:9b:5f:55:b2:89:ec:c6:5a:a9:bc: bd:f2:6c:a4:f4:50:b0:b9:ff:3b:91:e8:a0:17:93:b9:24:93: ef:64:c0:ce:6c:74:fc:39:d2:ea:be:f8:0f:2c:88:f3:62:13: b3:8a:7c:72:2f:6f:40:18:94:15:95:e4:9c:d4:49:e1:f7:4a: ee:6b:58:99:d8:5a:ee:db:3c:c4:0f:a9:39:0c:f0:c6:cc:98: e3:39:e6:42:c1:0c:f1:1f:71:c4:3e:f5:a4:b7:e4:a7:86:31: 74:8f:fe:b8:10:66:82:ab:d8:de:e4:e2:24:e4:97:f2:0c:43: fa:84:23:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjUwNTMxMDQyNDE0WhcNMjUwNjA3MDQyNDE0WjAYMRYwFAYD VQQDEw02ODNhODQ2Zi0xMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSLuikDA0zITomTWSAx0QRUKY9IJ3jaJDottbGvytzxqHjMe8ndX70WTVxAs p7ySMrfiweOZp4VUfmW3h07QSKFtJn5HmUhHH7IjL3A/1W4ezgBc671YQLfxTblX RtVrg+5Y1gvV4vouQFehnLU9jKm7l5pEa9TfPvYMmEF/+TOjDIcrAw9CXZ+EEaxc be/DpYd76GArQAv6wpa9LUALfWZjO4bXpuj9UezgI0PACg0SwaL0S2RMqhMvchPT EGW7jVDIz7A235+lb6+LTzPzfPc6yzyXcEqF4iKVmr+fl02UoD3GHAVJgppm3XYw N/y42LDeRzs6v0nrHjSc8CepXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYg6qPW 313yfWOLHxRWT9z5uaQDMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKp7pJAsYukIN7OSe9DxhD3/tGpFtU5u8nMJwT7kzDGK3dEdaGg/HY To0qHLHgrSdGMIVaCYtPv5YZ1Ufs4Qa5KlTyb5ctv3m6dL5CYRqHr8qkREQ7uR0n 2Njc1CD9G1WYTtWfG3oWOD7yALucnW2h9I/5fP7DXTgzmkIOdxdgVO2taAOAzZtf VbKJ7MZaqby98myk9FCwuf87keigF5O5JJPvZMDObHT8OdLqvvgPLIjzYhOzinxy L29AGJQVleSc1Enh90rua1iZ2Fru2zzED6k5DPDGzJjjOeZCwQzxH3HEPvWkt+Sn hjF0j/64EGaCq9je5OIk5JfyDEP6hCOR -----END CERTIFICATE-----Generated at Sat May 31 17:02:21 2025 by rpki-client