$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: vMQHe8QWATie4Cih+qAU8EcQUPJc2rW91iIJ7xq+2tI= Subject key identifier: DD:B3:8F:1A:83:68:56:8D:74:41:9F:4C:BB:BC:2F:51:4F:6D:22:3C Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 03D4 Signing time: Sat 31 May 2025 00:47:22 +0000 Manifest this update: Sat 31 May 2025 00:47:22 +0000 Manifest next update: Sat 07 Jun 2025 00:47:22 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: JlMf8LiXuvoIuJX7toWZwCZgg+ty9geQQwvAyFWVTds=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: May 31 00:47:22 2025 GMT Not After : Jun 7 00:47:22 2025 GMT Subject: CN=683a519a-d7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:eb:71:2f:c8:82:0a:d1:eb:58:a7:5d:2b: 5a:3e:cb:7d:24:6f:e1:73:36:50:48:82:17:6c:72: 50:26:fe:3f:03:e6:4e:24:89:8a:0b:57:ac:4b:7c: be:06:f9:6a:b8:42:3a:8c:74:19:53:82:c8:00:c6: b7:ca:9a:6a:16:e6:8f:a4:d1:38:f4:16:44:99:1e: 3c:13:91:01:41:e0:d9:16:b2:35:00:b4:5c:f6:a8: 7b:0f:5a:78:d7:66:3c:cf:3e:8e:5a:21:05:0f:77: 58:4d:52:d2:e2:d6:3f:6a:59:b8:d7:55:4a:8a:1c: a1:4a:6f:d3:ed:06:f6:f8:4d:ba:cd:27:12:90:74: 8c:35:a5:f0:f3:a5:05:6e:a9:46:17:de:72:1b:b0: 68:b9:df:d4:96:cc:92:c3:f3:c8:cc:9d:c0:3d:2d: 1c:a9:d1:9a:c0:7e:22:e6:19:02:df:c5:c0:02:e5: a8:42:29:d5:82:6d:51:d7:25:bb:78:5b:41:03:34: be:34:a8:e6:b2:6e:e9:33:7d:1a:f9:0f:56:3b:b9: e4:b6:91:6d:f9:e1:ca:a3:24:da:df:93:da:4c:39: fe:63:73:19:6d:d5:77:bb:1e:a9:64:81:ab:74:48: e0:3e:39:f7:54:84:75:b9:af:c6:43:69:4b:bf:c1: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:8F:1A:83:68:56:8D:74:41:9F:4C:BB:BC:2F:51:4F:6D:22:3C X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a5:fb:8a:74:e6:0a:17:b4:da:b9:6a:13:76:0b:d5:2c:b7: 51:11:78:91:cf:10:8d:51:56:a2:b8:e1:d4:ff:b6:78:9f:78: f5:40:ec:db:96:33:81:27:9d:6d:9c:93:64:83:fb:7a:16:e1: e7:c5:66:08:2f:f0:64:31:f7:cb:b2:0d:ae:ae:1a:5d:d3:17: f0:f9:be:64:99:7f:ef:e9:ae:17:bf:fe:73:7f:6e:9a:ab:a9: c9:1c:13:fd:e3:a9:a5:ab:0a:b9:2a:b8:4e:5f:ec:c7:e4:f1: c7:1e:96:86:5f:db:02:86:bb:6a:19:7e:61:45:04:a3:b2:24: 5e:9e:f5:a8:4b:39:e6:6b:1e:47:36:ca:8a:71:fb:b4:08:cb: 48:87:57:e8:9f:06:f3:ac:66:b7:85:67:33:bd:1b:f4:6a:bd: 8f:6d:e5:16:aa:67:39:4a:3d:ae:e7:4d:f3:28:16:45:e7:aa: f9:39:6a:3c:4f:b5:e3:7f:3f:f7:f0:47:11:4a:01:44:df:d4: 83:cf:6c:76:db:3a:c6:64:1f:69:aa:da:d5:63:e9:36:56:fe: 77:e1:24:0a:11:1b:da:1f:ef:4c:2f:dc:59:24:5e:7a:bc:ec: 17:de:e2:1f:2e:3d:00:6b:11:c5:f3:29:8e:f1:33:32:e6:20: d6:ea:fc:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUwNTMxMDA0NzIyWhcNMjUwNjA3MDA0NzIyWjAYMRYwFAYD VQQDEw02ODNhNTE5YS1kN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6HrcS/IggrR61inXStaPst9JG/hczZQSIIXbHJQJv4/A+ZOJImKC1esS3y+ BvlquEI6jHQZU4LIAMa3yppqFuaPpNE49BZEmR48E5EBQeDZFrI1ALRc9qh7D1p4 12Y8zz6OWiEFD3dYTVLS4tY/alm411VKihyhSm/T7Qb2+E26zScSkHSMNaXw86UF bqlGF95yG7Boud/UlsySw/PIzJ3APS0cqdGawH4i5hkC38XAAuWoQinVgm1R1yW7 eFtBAzS+NKjmsm7pM30a+Q9WO7nktpFt+eHKoyTa35PaTDn+Y3MZbdV3ux6pZIGr dEjgPjn3VIR1ua/GQ2lLv8EbNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2zjxqD aFaNdEGfTLu8L1FPbSI8MB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEpfuKdOYKF7TauWoTdgvVLLdREXiRzxCNUVaiuOHU/7Z4n3j1QOzb ljOBJ51tnJNkg/t6FuHnxWYIL/BkMffLsg2urhpd0xfw+b5kmX/v6a4Xv/5zf26a q6nJHBP946mlqwq5KrhOX+zH5PHHHpaGX9sChrtqGX5hRQSjsiRenvWoSznmax5H NsqKcfu0CMtIh1fonwbzrGa3hWczvRv0ar2PbeUWqmc5Sj2u503zKBZF56r5OWo8 T7Xjfz/38EcRSgFE39SDz2x22zrGZB9pqtrVY+k2Vv534SQKERvaH+9ML9xZJF56 vOwX3uIfLj0AaxHF8ymO8TMy5iDW6vzp -----END CERTIFICATE-----Generated at Sat May 31 17:36:07 2025 by rpki-client