$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: hfDK4sEFyk/FYVPtY7DBC6qAllFhYbt13rXiwH3rgCM= Subject key identifier: 44:29:6D:AC:ED:71:26:A7:44:20:74:08:D1:E0:48:4B:B8:61:44:1A Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 06CD Signing time: Fri 30 May 2025 22:19:30 +0000 Manifest this update: Fri 30 May 2025 22:19:29 +0000 Manifest next update: Fri 06 Jun 2025 22:19:29 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: kCEzJKWUC2X6wVPOSTkMwx8HstcpSxVzeI4bNG4rIQU=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: nGQeEW39Od+vQgXs87Jbi/bqrVd4uaNCNXUbjbZuGDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: May 30 22:19:29 2025 GMT Not After : Jun 6 22:19:29 2025 GMT Subject: CN=683a2ef1-d9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:c7:09:4c:3c:3b:e3:a5:10:97:cf:8a:b7: a6:19:ac:41:d3:6c:b1:c3:8f:a3:f1:9d:d0:66:5b: 45:9d:a1:bc:86:90:2b:a0:5f:36:6a:1d:39:ae:87: 18:db:7e:e9:13:d3:91:10:a6:66:6e:be:3b:64:3e: 6e:da:9b:4c:7b:35:68:b8:ef:61:08:f8:ec:f0:2d: d4:7f:32:c7:2c:80:4e:72:78:ad:00:c4:51:83:6d: 14:6f:5a:86:66:7b:53:4e:44:24:52:9a:6b:9a:53: 64:e7:1f:00:8e:08:15:79:94:b0:ee:6d:45:f4:58: 0c:8f:3d:63:2a:1d:8a:ae:ac:7b:64:13:5c:15:40: cb:9c:a4:86:f5:c3:1f:f7:9c:a9:f2:5e:11:9a:11: c1:80:a9:e4:ed:38:6b:3e:3d:27:39:b6:e0:d4:83: f2:a0:4f:13:92:5b:17:9f:d4:cd:ab:f2:c7:af:84: 4d:86:ee:f3:d1:c8:e6:46:ce:68:92:0c:0f:8c:d9: ab:5f:f5:ab:ff:36:4d:9b:4d:32:4d:74:9e:0b:fc: aa:10:4b:75:0f:81:08:5f:70:a4:3b:ae:57:20:4d: 89:54:d6:fc:4a:2f:e8:04:b6:be:30:45:f4:5e:4a: e8:27:2a:e9:01:c0:c1:37:2a:da:57:ce:5a:02:d1: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:29:6D:AC:ED:71:26:A7:44:20:74:08:D1:E0:48:4B:B8:61:44:1A X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e5:70:e6:44:37:35:12:4f:10:f1:8d:b4:02:11:67:82:1c: e8:d2:59:44:f9:63:26:9b:90:3f:f5:02:3c:4b:2a:bb:05:67: f9:35:32:f2:d4:4f:20:50:6e:6a:36:d0:66:87:2e:14:38:06: 98:89:3c:97:88:e3:8e:e8:90:bf:85:60:b5:2f:51:6c:83:ed: be:69:14:23:45:4a:ba:ae:46:c8:97:1d:f9:44:20:af:52:be: fe:03:28:73:bc:e6:de:78:a3:dd:35:6d:92:1b:d9:8f:94:0e: 26:40:3a:0c:3d:b7:3e:80:e9:05:70:a8:7b:cb:32:2b:96:7b: 80:d0:af:7d:99:8f:91:49:b5:db:ed:8d:a3:14:92:dd:6e:b9: e6:b3:bf:f4:20:de:5a:a0:04:13:8e:9c:ff:fe:93:50:6e:41: 75:eb:ed:15:65:05:b6:44:ec:76:d5:d9:76:6c:e3:66:c8:e5: 98:5c:42:64:b2:a8:b8:d7:9b:d9:e7:42:cb:a0:d5:ed:b5:48: 28:ac:46:2f:be:41:10:bb:b9:36:fe:ec:91:c0:ea:de:aa:d8: 04:94:09:be:f0:1c:6a:05:7a:a9:24:f4:d2:d3:12:18:a4:f1: 24:82:74:ee:6e:68:ed:03:59:93:99:e5:e4:da:40:41:1b:b0: 12:1e:11:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjUwNTMwMjIxOTI5WhcNMjUwNjA2MjIxOTI5WjAYMRYwFAYD VQQDEw02ODNhMmVmMS1kOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R3HCUw8O+OlEJfPiremGaxB02yxw4+j8Z3QZltFnaG8hpAroF82ah05rocY 237pE9OREKZmbr47ZD5u2ptMezVouO9hCPjs8C3UfzLHLIBOcnitAMRRg20Ub1qG ZntTTkQkUpprmlNk5x8AjggVeZSw7m1F9FgMjz1jKh2Krqx7ZBNcFUDLnKSG9cMf 95yp8l4RmhHBgKnk7ThrPj0nObbg1IPyoE8TklsXn9TNq/LHr4RNhu7z0cjmRs5o kgwPjNmrX/Wr/zZNm00yTXSeC/yqEEt1D4EIX3CkO65XIE2JVNb8Si/oBLa+MEX0 XkroJyrpAcDBNyraV85aAtGkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQpbazt cSanRCB0CNHgSEu4YUQaMB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD5XDmRDc1Ek8Q8Y20AhFnghzo0llE+WMmm5A/9QI8Syq7BWf5NTLy 1E8gUG5qNtBmhy4UOAaYiTyXiOOO6JC/hWC1L1Fsg+2+aRQjRUq6rkbIlx35RCCv Ur7+AyhzvObeeKPdNW2SG9mPlA4mQDoMPbc+gOkFcKh7yzIrlnuA0K99mY+RSbXb 7Y2jFJLdbrnms7/0IN5aoAQTjpz//pNQbkF16+0VZQW2ROx21dl2bONmyOWYXEJk sqi415vZ50LLoNXttUgorEYvvkEQu7k2/uyRwOreqtgElAm+8BxqBXqpJPTS0xIY pPEkgnTubmjtA1mTmeXk2kBBG7ASHhFQ -----END CERTIFICATE-----Generated at Sat May 31 16:38:52 2025 by rpki-client