$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: gFLWknb7DpNUNA2MNHX/Rk/JTQdME9tsf+v3iTDiFMQ= Subject key identifier: A5:7F:91:26:D5:B3:35:05:41:66:DF:97:BE:FA:AF:DD:E0:CD:ED:BD Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 010F Signing time: Sat 31 May 2025 04:35:08 +0000 Manifest this update: Sat 31 May 2025 04:35:07 +0000 Manifest next update: Sat 07 Jun 2025 04:35:07 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: ReRrES/4ZK4fiB5rp6agyNmML8m4UmxDMl2qNDsixN0=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: May 31 04:35:07 2025 GMT Not After : Jun 7 04:35:07 2025 GMT Subject: CN=683a86fc-b748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:85:61:73:39:d2:6b:7c:8c:00:44:93:51: 12:24:d8:e7:13:b8:c0:5f:fa:3f:8b:42:12:64:9d: a2:49:48:4c:fe:1c:16:f9:0c:f7:c5:d4:27:70:ad: 32:7d:69:39:24:f7:db:c0:e7:96:9f:00:29:77:7a: 67:7e:a1:0f:4b:be:2b:45:2d:3e:6e:7b:b9:69:a2: 1d:8d:c4:f2:59:99:b7:20:b7:93:08:47:64:b9:72: ab:f8:c2:2c:fc:3f:64:55:e4:90:9e:2c:05:8d:06: 25:cc:d8:8f:1e:56:51:4c:cc:bd:ea:d2:2f:27:3f: 8a:32:6a:61:85:83:0b:03:7f:ff:79:40:1c:d5:42: 3d:ef:d3:db:10:51:4e:24:19:8c:f1:87:89:22:b2: d5:5c:eb:c5:d0:5b:8a:27:08:fd:4c:52:c1:fb:a8: a8:23:af:bc:b1:97:c2:e1:c1:df:08:d7:82:2b:6a: 80:c6:2c:df:11:68:a6:f4:b2:e4:ce:a1:ff:1f:a5: a5:55:27:d4:79:cc:20:ef:7f:52:f7:d4:fb:2f:26: aa:62:ed:4d:64:6a:37:6c:dc:68:29:44:ea:21:42: 1d:cc:1d:0b:14:91:f3:5a:4d:f8:1c:12:c8:d5:d4: 3e:99:82:07:a0:69:f9:cb:41:12:e9:61:1e:3d:e4: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:91:26:D5:B3:35:05:41:66:DF:97:BE:FA:AF:DD:E0:CD:ED:BD X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bc:cd:c3:f8:ea:50:dd:05:95:8d:fb:79:ea:1d:f0:5d:cc: 03:0b:51:11:53:30:37:22:54:52:f2:e8:41:01:ae:41:95:70: b3:e4:65:93:3f:8b:ac:42:85:9b:90:00:b0:40:11:ee:04:69: 08:b7:6a:c2:c0:9e:98:b2:f9:b9:93:4e:80:0a:96:48:b4:95: a4:a0:7e:79:7b:eb:d3:ec:3c:ff:79:da:ec:52:dd:84:0a:35: 0e:dd:91:24:cf:45:7f:4f:02:09:9d:d2:63:3f:40:90:76:57: 9d:43:f2:d4:6d:d0:d2:cf:25:2f:92:e8:68:92:d3:88:5d:da: ef:1b:95:9d:fc:4e:f1:a6:bd:16:3b:8b:28:aa:5a:c4:05:5e: f2:da:70:b6:5a:7a:62:b1:b3:fb:6a:c4:ac:da:44:e1:5e:5d: 70:3d:13:9d:7d:0d:80:10:f1:e8:17:37:41:aa:a4:81:2d:57: 2e:f5:a8:f2:18:da:f2:a1:34:9c:fb:a1:1d:9d:d5:8c:24:62: 72:13:ec:62:64:e1:59:bb:42:4a:81:30:47:b4:ad:22:dd:47: 3e:f8:b8:cf:cd:c5:86:b4:4e:f1:ff:71:c2:55:cb:5a:e4:d1: fd:65:6f:34:b1:2e:5c:a3:0b:11:76:9d:09:86:29:8a:67:22: 0d:9a:f1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUwNTMxMDQzNTA3WhcNMjUwNjA3MDQzNTA3WjAYMRYwFAYD VQQDEw02ODNhODZmYy1iNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbyFYXM50mt8jABEk1ESJNjnE7jAX/o/i0ISZJ2iSUhM/hwW+Qz3xdQncK0y fWk5JPfbwOeWnwApd3pnfqEPS74rRS0+bnu5aaIdjcTyWZm3ILeTCEdkuXKr+MIs /D9kVeSQniwFjQYlzNiPHlZRTMy96tIvJz+KMmphhYMLA3//eUAc1UI979PbEFFO JBmM8YeJIrLVXOvF0FuKJwj9TFLB+6ioI6+8sZfC4cHfCNeCK2qAxizfEWim9LLk zqH/H6WlVSfUecwg739S99T7LyaqYu1NZGo3bNxoKUTqIUIdzB0LFJHzWk34HBLI 1dQ+mYIHoGn5y0ES6WEePeRDnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV/kSbV szUFQWbfl776r93gze29MB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3vM3D+OpQ3QWVjft56h3wXcwDC1ERUzA3IlRS8uhBAa5BlXCz5GWT P4usQoWbkACwQBHuBGkIt2rCwJ6Ysvm5k06ACpZItJWkoH55e+vT7Dz/edrsUt2E CjUO3ZEkz0V/TwIJndJjP0CQdledQ/LUbdDSzyUvkuhoktOIXdrvG5Wd/E7xpr0W O4soqlrEBV7y2nC2WnpisbP7asSs2kThXl1wPROdfQ2AEPHoFzdBqqSBLVcu9ajy GNryoTSc+6EdndWMJGJyE+xiZOFZu0JKgTBHtK0i3Uc++LjPzcWGtE7x/3HCVcta 5NH9ZW80sS5cowsRdp0JhimKZyINmvFo -----END CERTIFICATE-----Generated at Sat May 31 16:57:46 2025 by rpki-client