$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: UCO3YYxS+BI1PDpdBU09Pmp8kFJN6JjOvjgmsQKzNjA= Subject key identifier: 00:DE:F0:4D:50:C2:8E:9E:72:69:A8:9B:17:B4:0B:E2:07:58:FC:DD Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0C39 Signing time: Fri 30 May 2025 18:43:38 +0000 Manifest this update: Fri 30 May 2025 18:43:38 +0000 Manifest next update: Fri 06 Jun 2025 18:43:38 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: PIhEOIpshCJkVCJsYYJrFs7G9ehE4hfnqySjkF05IFw=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: May 30 18:43:38 2025 GMT Not After : Jun 6 18:43:38 2025 GMT Subject: CN=6839fc5a-df49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:17:a1:2f:aa:05:de:c4:4b:58:b9:ad:05: 4b:3f:f8:d1:8b:fc:f8:f6:21:bb:8f:e4:d4:85:77: fe:38:f6:3a:69:4e:e9:69:48:3d:39:99:44:9a:d1: 06:73:f1:99:64:33:e8:df:48:bf:63:70:de:b7:2d: ba:a9:17:1c:0d:ec:23:e5:69:0b:83:77:3a:fb:9c: 62:00:65:c0:35:7e:c7:6f:91:dc:de:3b:a5:6f:64: ae:f6:a3:07:4c:27:8c:b4:ef:2b:05:36:7e:82:c8: 6b:d0:d7:32:8e:d3:02:de:b0:83:51:f2:28:dd:fe: 0c:0f:02:f2:f4:bd:7b:b4:db:8b:13:ae:1e:cd:23: 46:9f:db:ff:e8:0b:e9:1c:5f:c9:a2:5e:e0:41:44: 82:0e:7f:a8:ba:20:18:64:22:ea:9f:fe:a4:36:f1: e3:93:a6:bb:c1:6f:32:69:97:af:7d:72:ab:47:8c: de:61:34:c5:8b:2b:fe:70:29:49:0c:17:ca:c5:52: 0b:70:9a:8b:7c:40:81:1d:f0:5e:51:5a:30:72:48: 4c:3b:3c:83:66:d9:fd:d8:b6:47:bb:7f:1c:be:8c: 6f:8d:e9:f0:cb:ac:5d:f6:bb:c9:af:ba:5b:d5:d5: 72:4a:5c:70:28:16:ca:65:d7:b1:d0:65:47:62:c7: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:F0:4D:50:C2:8E:9E:72:69:A8:9B:17:B4:0B:E2:07:58:FC:DD X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:24:c8:42:60:2f:c5:18:aa:e3:0f:0b:cc:aa:ee:65:fd: 9c:00:3d:b5:d4:fd:46:50:7f:c8:a4:1b:c9:cc:b7:f2:92:a3: 3c:2c:3b:a5:fb:8a:24:0d:58:dc:99:15:2b:ad:d1:27:b4:14: 01:f4:8c:76:07:5a:4c:95:f9:b8:ea:da:4d:20:51:b8:49:09: 3e:0b:3d:48:b2:df:e9:38:ff:a0:12:51:45:43:09:ee:3c:b3: 3f:ae:7a:b1:60:16:e0:38:62:86:3a:f2:d4:d0:74:43:cb:94: 00:90:86:61:7b:45:ea:45:88:2c:17:41:b6:f8:55:28:a5:3a: bb:21:52:a8:1c:56:49:3d:f9:26:8e:0c:71:b4:30:90:83:0e: ea:32:9d:c8:27:0f:1e:15:23:ff:81:f8:22:04:54:81:aa:0b: dc:9d:67:29:8b:51:c3:fd:6f:3a:47:26:b8:99:c3:13:0c:e7: 1f:eb:ed:ef:20:e4:9c:c7:ab:10:83:3b:2b:86:8c:89:33:1e: 7c:a5:14:71:78:21:70:4a:3d:29:e6:8f:4f:7f:66:d1:20:59: fe:33:d6:84:33:2b:c9:75:e8:87:02:73:37:ad:22:e5:c3:1c: d4:2c:7c:d9:f8:1d:d0:e2:e5:16:93:00:73:f4:c5:61:73:00: db:a3:a3:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjUwNTMwMTg0MzM4WhcNMjUwNjA2MTg0MzM4WjAYMRYwFAYD VQQDEw02ODM5ZmM1YS1kZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEcXoS+qBd7ES1i5rQVLP/jRi/z49iG7j+TUhXf+OPY6aU7paUg9OZlEmtEG c/GZZDPo30i/Y3Dety26qRccDewj5WkLg3c6+5xiAGXANX7Hb5Hc3julb2Su9qMH TCeMtO8rBTZ+gshr0NcyjtMC3rCDUfIo3f4MDwLy9L17tNuLE64ezSNGn9v/6Avp HF/Jol7gQUSCDn+ouiAYZCLqn/6kNvHjk6a7wW8yaZevfXKrR4zeYTTFiyv+cClJ DBfKxVILcJqLfECBHfBeUVowckhMOzyDZtn92LZHu38cvoxvjenwy6xd9rvJr7pb 1dVySlxwKBbKZdex0GVHYsd2qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADe8E1Q wo6ecmmomxe0C+IHWPzdMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtsyTIQmAvxRiq4w8LzKruZf2cAD211P1GUH/IpBvJzLfykqM8LDul +4okDVjcmRUrrdEntBQB9Ix2B1pMlfm46tpNIFG4SQk+Cz1Ist/pOP+gElFFQwnu PLM/rnqxYBbgOGKGOvLU0HRDy5QAkIZhe0XqRYgsF0G2+FUopTq7IVKoHFZJPfkm jgxxtDCQgw7qMp3IJw8eFSP/gfgiBFSBqgvcnWcpi1HD/W86Rya4mcMTDOcf6+3v IOScx6sQgzsrhoyJMx58pRRxeCFwSj0p5o9Pf2bRIFn+M9aEMyvJdeiHAnM3rSLl wxzULHzZ+B3Q4uUWkwBz9MVhcwDbo6Nc -----END CERTIFICATE-----Generated at Sat May 31 17:42:34 2025 by rpki-client