$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: vSmeHin019Mo44UfmMpOFamBTtgU5l6nLrZXTgcVbg8= Subject key identifier: 03:92:65:42:FE:89:27:CA:E0:44:92:E6:C9:73:22:BA:ED:64:42:33 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 3498 Signing time: Fri 30 May 2025 15:10:51 +0000 Manifest this update: Fri 30 May 2025 15:10:50 +0000 Manifest next update: Fri 06 Jun 2025 15:10:50 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: LGQwuMDUlmgsSVmdALSOGELtPwSVtvutr2SVDW13aks=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: May 30 15:10:50 2025 GMT Not After : Jun 6 15:10:50 2025 GMT Subject: CN=6839ca7a-a691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:de:5c:d7:6b:68:7b:a1:a8:98:83:81:b3: 24:25:55:97:46:b0:eb:c5:d7:b3:5e:39:36:e6:8b: 27:57:01:9d:bd:71:d1:11:cc:ea:ff:52:f9:bb:59: 2e:1f:4f:d3:4d:d9:b7:06:73:de:e2:25:97:a4:40: 68:78:70:55:e4:23:e6:c7:f6:e9:3b:80:2c:d2:ea: 41:3c:f9:5f:83:dc:8a:ea:9d:9c:f2:af:87:27:04: f2:eb:4b:4a:75:8f:78:c0:f7:79:0e:f6:f6:52:50: ed:3c:53:d3:e9:a7:2a:cc:d5:5c:64:ce:a0:58:fe: e9:33:95:96:7a:d2:17:76:1b:c9:4b:14:19:87:a7: 54:35:d0:60:06:19:fd:23:43:84:b2:03:35:86:d5: 63:a6:2c:f2:a0:c3:e2:6c:66:ea:63:32:85:43:78: f0:0f:82:71:49:82:37:99:ae:3c:6e:a9:25:8f:ad: 59:20:4c:f0:58:a1:e9:79:e0:ca:46:ee:08:92:4f: 58:4c:35:f0:09:12:b5:04:ca:5d:a8:0f:3a:43:7e: 63:27:fc:e3:37:1a:c6:c4:3e:68:c5:b2:ee:1b:74: 2c:bf:9d:2d:49:4c:a2:12:88:7e:a0:48:cd:bb:75: b2:a0:24:83:1e:3a:26:27:72:39:fe:f3:3b:bf:9a: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:65:42:FE:89:27:CA:E0:44:92:E6:C9:73:22:BA:ED:64:42:33 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:24:fe:a0:82:ef:5e:8a:55:1e:74:9e:f2:fa:69:4d:92:c9: ba:c5:70:b3:27:ab:90:d2:ee:97:2f:70:d2:3b:f0:2f:ef:5d: 57:71:fd:49:6f:15:e7:d4:40:38:51:43:f6:5c:46:8b:a9:48: 77:ab:c1:00:d1:00:4c:e8:e5:41:0a:96:75:51:ed:c5:c8:4e: 15:12:fa:a4:d7:19:c4:e6:69:bc:bf:a6:ea:77:a6:8a:7c:e5: a4:53:e2:db:c9:11:63:a1:a5:f9:fb:7e:eb:46:b2:f6:f5:37: 49:95:b5:5f:16:30:f0:1e:ae:c0:06:28:43:da:fa:71:f2:d7: fa:51:66:29:98:d4:1a:40:1c:3b:bf:c1:0b:67:b3:c0:f7:30: ad:6b:9c:c1:1c:30:1f:d5:2c:45:70:14:de:f0:5c:95:7c:42: 7f:fb:3d:11:11:4d:a6:a1:8b:6f:1e:7b:c0:e1:a4:0f:fc:d2: 35:52:cf:8e:9f:1f:e8:23:d8:69:5f:99:d0:ba:11:3d:03:ef: a1:d9:f0:d4:89:fa:9f:26:d1:39:eb:67:1a:94:06:62:c1:6f: 85:8a:76:3b:68:fc:15:a5:f5:61:ce:38:95:c4:45:14:9b:81: 9f:03:87:0a:f0:e2:7d:0f:42:14:c9:d9:4c:af:6b:d1:b1:75: b9:58:8b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUwNTMwMTUxMDUwWhcNMjUwNjA2MTUxMDUwWjAYMRYwFAYD VQQDEw02ODM5Y2E3YS1hNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRneXNdraHuhqJiDgbMkJVWXRrDrxdezXjk25osnVwGdvXHREczq/1L5u1ku H0/TTdm3BnPe4iWXpEBoeHBV5CPmx/bpO4As0upBPPlfg9yK6p2c8q+HJwTy60tK dY94wPd5Dvb2UlDtPFPT6acqzNVcZM6gWP7pM5WWetIXdhvJSxQZh6dUNdBgBhn9 I0OEsgM1htVjpizyoMPibGbqYzKFQ3jwD4JxSYI3ma48bqklj61ZIEzwWKHpeeDK Ru4Ikk9YTDXwCRK1BMpdqA86Q35jJ/zjNxrGxD5oxbLuG3Qsv50tSUyiEoh+oEjN u3WyoCSDHjomJ3I5/vM7v5rvkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOSZUL+ iSfK4ESS5slzIrrtZEIzMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhJP6ggu9eilUedJ7y+mlNksm6xXCzJ6uQ0u6XL3DSO/Av711Xcf1J bxXn1EA4UUP2XEaLqUh3q8EA0QBM6OVBCpZ1Ue3FyE4VEvqk1xnE5mm8v6bqd6aK fOWkU+LbyRFjoaX5+37rRrL29TdJlbVfFjDwHq7ABihD2vpx8tf6UWYpmNQaQBw7 v8ELZ7PA9zCta5zBHDAf1SxFcBTe8FyVfEJ/+z0REU2moYtvHnvA4aQP/NI1Us+O nx/oI9hpX5nQuhE9A++h2fDUifqfJtE562calAZiwW+FinY7aPwVpfVhzjiVxEUU m4GfA4cK8OJ9D0IUydlMr2vRsXW5WIvl -----END CERTIFICATE-----Generated at Sat May 31 16:45:46 2025 by rpki-client