$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: BiU0vOroLeSXg5pzas7hk1lMa9FGq+N6xZrVzB63SNI= Subject key identifier: A6:D2:C9:EC:CF:C2:3C:C0:01:30:57:B1:88:F1:E4:36:1B:19:03:CA Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 053E Signing time: Fri 30 May 2025 23:38:56 +0000 Manifest this update: Fri 30 May 2025 23:38:55 +0000 Manifest next update: Fri 06 Jun 2025 23:38:55 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: sCBj7IbC0VuM2ZurI0+nCdr2eoVEwoVo85axRAhM0L8=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: May 30 23:38:55 2025 GMT Not After : Jun 6 23:38:55 2025 GMT Subject: CN=683a418f-de87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:d4:8d:f3:ad:03:60:3b:21:26:59:56:3d: ea:71:cb:37:61:61:7b:67:15:a0:a4:d4:3e:0c:2d: 8a:56:fd:49:1c:fb:a8:9b:44:e2:6c:98:49:f4:ef: 1b:11:63:9d:a9:54:bc:24:11:76:68:64:e0:6a:a3: ba:04:9a:6d:8a:82:24:80:df:49:a5:d4:32:18:cf: bb:fe:19:95:4c:5e:39:90:bf:fd:a8:76:a4:85:1e: 56:3b:d7:12:8d:eb:3f:08:f4:f4:23:a0:8a:56:33: 06:ff:20:aa:37:24:b4:25:04:18:e0:ce:0a:33:4a: 1b:8f:db:aa:84:fb:80:a5:e0:29:f8:94:50:59:9d: ce:39:a8:aa:de:f9:0b:25:12:72:5e:a8:87:30:d0: 33:d6:1a:1b:e3:e7:8c:5a:77:a7:9c:20:c5:ff:b7: 0b:33:c9:34:2f:2c:30:3d:d2:e0:46:63:d8:26:83: 94:a2:4e:02:a7:c7:98:a1:49:d5:7d:b9:8e:6f:7f: 05:ce:34:2f:21:b2:5f:01:dd:71:67:6a:45:80:2c: 93:1c:30:8e:f3:e7:65:e8:c0:80:59:18:31:9f:d5: 15:89:65:ba:14:e6:51:b9:f2:a2:02:3c:41:c8:71: e6:cf:34:0b:d0:8b:fb:d3:4c:fd:eb:8d:eb:b1:69: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:C9:EC:CF:C2:3C:C0:01:30:57:B1:88:F1:E4:36:1B:19:03:CA X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1d:ab:27:f9:60:73:5c:bd:8c:48:0a:1e:ba:86:57:5a:3d: 2f:7c:dc:92:13:11:82:9d:7a:ff:76:b2:3b:ac:85:63:ac:eb: 90:0d:75:c1:53:87:77:d3:fa:34:e3:18:0f:7c:05:37:7d:f2: 17:38:3c:b6:ef:5e:07:1e:f2:37:9d:2f:8f:69:5f:14:80:06: cc:4d:e4:ae:51:d7:d2:2b:c0:0c:e0:84:b2:b2:9d:83:7b:93: ed:e6:9e:81:f5:bc:6c:6c:0f:0d:a7:f5:cf:e7:3c:2f:9d:82: 6e:61:e3:0b:d1:2e:9c:dd:d7:9f:39:e9:33:3f:4e:76:13:1f: 00:d6:e2:40:b8:20:0a:23:ef:b2:1b:61:6b:4c:8a:14:fe:9d: 64:37:f0:ef:26:e6:93:2c:14:a0:44:85:e4:63:b4:6e:f0:f8: 68:d4:f1:9b:38:c8:e9:ec:a9:ab:4a:70:99:44:24:4b:01:f1: af:ae:2b:e3:c0:57:85:e9:0d:50:14:01:02:76:01:74:a4:39: 05:3d:64:55:97:63:93:f4:11:ee:99:0f:48:0e:25:3d:b3:f3: 6a:98:53:b1:35:f5:c3:7d:6b:7a:c7:90:aa:11:21:f2:bf:86: fe:5b:22:47:20:e1:18:02:6c:4a:05:00:36:c7:66:b5:c6:47: 01:27:1f:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUwNTMwMjMzODU1WhcNMjUwNjA2MjMzODU1WjAYMRYwFAYD VQQDEw02ODNhNDE4Zi1kZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwerUjfOtA2A7ISZZVj3qccs3YWF7ZxWgpNQ+DC2KVv1JHPuom0TibJhJ9O8b EWOdqVS8JBF2aGTgaqO6BJptioIkgN9JpdQyGM+7/hmVTF45kL/9qHakhR5WO9cS jes/CPT0I6CKVjMG/yCqNyS0JQQY4M4KM0obj9uqhPuApeAp+JRQWZ3OOaiq3vkL JRJyXqiHMNAz1hob4+eMWnennCDF/7cLM8k0LywwPdLgRmPYJoOUok4Cp8eYoUnV fbmOb38FzjQvIbJfAd1xZ2pFgCyTHDCO8+dl6MCAWRgxn9UViWW6FOZRufKiAjxB yHHmzzQL0Iv700z9643rsWlZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbSyezP wjzAATBXsYjx5DYbGQPKMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Hasn+WBzXL2MSAoeuoZXWj0vfNySExGCnXr/drI7rIVjrOuQDXXB U4d30/o04xgPfAU3ffIXODy2714HHvI3nS+PaV8UgAbMTeSuUdfSK8AM4ISysp2D e5Pt5p6B9bxsbA8Np/XP5zwvnYJuYeML0S6c3defOekzP052Ex8A1uJAuCAKI++y G2FrTIoU/p1kN/DvJuaTLBSgRIXkY7Ru8Pho1PGbOMjp7KmrSnCZRCRLAfGvrivj wFeF6Q1QFAECdgF0pDkFPWRVl2OT9BHumQ9IDiU9s/NqmFOxNfXDfWt6x5CqESHy v4b+WyJHIOEYAmxKBQA2x2a1xkcBJx+1 -----END CERTIFICATE-----Generated at Sat May 31 15:28:23 2025 by rpki-client