$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: sjZM14NVB9W4v3RSrBvItiJsEdwtbS1zstaihlzAFeg= Subject key identifier: F8:F1:28:53:B7:5A:2E:EC:F7:2F:0B:B9:1A:79:88:86:F1:A1:DA:E8 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D13 Signing time: Fri 30 May 2025 18:15:32 +0000 Manifest this update: Fri 30 May 2025 18:15:32 +0000 Manifest next update: Fri 06 Jun 2025 18:15:32 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: VmglX/ELj1q5McozzgXostGLG6q2919Mwc3e30IHX0Q=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: May 30 18:15:32 2025 GMT Not After : Jun 6 18:15:32 2025 GMT Subject: CN=6839f5c4-efef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:a2:67:12:8e:2e:17:48:c6:18:dd:15:40: 94:1e:f6:78:c3:e8:70:1f:49:88:50:1a:f9:8e:1b: 3c:d7:63:5c:97:7a:ec:4f:54:b5:b3:68:40:c2:ca: 65:f1:ee:77:05:9c:8e:05:35:c3:db:ad:99:6d:df: d3:45:c2:ac:50:69:ef:38:15:57:ef:a0:15:92:5d: c2:31:86:bc:94:aa:51:b9:04:b5:f5:33:98:c5:b6: 6a:96:d6:bb:27:a1:8e:47:4b:08:8a:be:df:23:e3: f4:a7:e6:cd:cc:41:5b:61:89:4b:29:dd:2d:84:6c: 2e:bd:e5:d9:18:1e:06:09:0f:6d:01:83:02:ef:38: b8:44:65:74:22:0d:53:4c:93:b8:b0:60:52:43:d5: 25:d5:e5:f5:bf:a9:3d:f8:a9:ce:e8:96:3f:b3:5d: 07:ff:5c:f1:04:cc:40:57:39:6b:01:28:d3:93:37: 4a:0d:b7:f6:6d:7d:c7:d9:d6:24:05:0b:a7:e9:a7: cc:73:3c:36:c7:69:7f:3a:ec:6d:e9:cd:d8:81:0b: 70:e6:fa:e7:09:11:d6:8c:57:ab:4e:df:90:51:d5: 7a:b4:ae:98:6a:d2:28:52:73:b1:3f:00:0c:e1:bd: 6b:56:43:84:42:bc:29:e7:c8:87:f1:26:fa:2d:82: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:28:53:B7:5A:2E:EC:F7:2F:0B:B9:1A:79:88:86:F1:A1:DA:E8 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:64:dc:21:13:e6:98:11:74:be:71:ba:d4:cf:ea:80:23:65: 85:9d:fd:40:39:e1:d5:51:94:ec:6f:ce:18:f1:ed:2c:02:44: 68:f7:c3:dc:d3:e1:bc:17:1e:72:c9:75:42:e6:b2:90:e4:82: 3f:c2:8f:77:e9:16:60:a2:48:b0:15:d5:78:7a:4f:fc:cb:6a: 36:4f:38:8f:1a:7d:4e:05:2e:65:ba:70:b4:e6:b7:6c:56:0a: e8:59:cb:bb:e9:81:9d:b0:e5:de:62:72:35:94:e2:43:cb:e6: 70:43:96:ef:0f:ed:e1:9c:b6:fa:df:a4:48:75:5f:f5:36:9d: b4:4b:03:26:e2:05:00:5b:8c:76:0b:43:2e:3e:67:3b:56:3f: 3b:aa:20:0d:93:2f:59:fe:bd:3c:3c:93:ac:01:fd:fd:3b:6a: a9:24:a7:01:20:bb:8b:51:a5:28:7c:49:3e:51:73:ab:bb:41: f9:c6:64:57:6f:4b:71:0f:78:93:c6:01:30:cd:25:51:d8:47: 91:ad:a0:5a:90:0c:16:29:07:6a:17:3f:8b:8f:a9:d7:31:23: 37:06:20:73:6c:79:6a:01:5f:86:c1:a2:52:e5:8a:c0:ff:75: 6f:c8:d3:e5:54:db:95:ba:18:b0:09:87:21:1d:42:0f:4a:4e: 43:fa:85:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNTMwMTgxNTMyWhcNMjUwNjA2MTgxNTMyWjAYMRYwFAYD VQQDEw02ODM5ZjVjNC1lZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX6iZxKOLhdIxhjdFUCUHvZ4w+hwH0mIUBr5jhs812Ncl3rsT1S1s2hAwspl 8e53BZyOBTXD262Zbd/TRcKsUGnvOBVX76AVkl3CMYa8lKpRuQS19TOYxbZqlta7 J6GOR0sIir7fI+P0p+bNzEFbYYlLKd0thGwuveXZGB4GCQ9tAYMC7zi4RGV0Ig1T TJO4sGBSQ9Ul1eX1v6k9+KnO6JY/s10H/1zxBMxAVzlrASjTkzdKDbf2bX3H2dYk BQun6afMczw2x2l/Ouxt6c3YgQtw5vrnCRHWjFerTt+QUdV6tK6YatIoUnOxPwAM 4b1rVkOEQrwp58iH8Sb6LYKg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjxKFO3 Wi7s9y8LuRp5iIbxodroMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkZNwhE+aYEXS+cbrUz+qAI2WFnf1AOeHVUZTsb84Y8e0sAkRo98Pc 0+G8Fx5yyXVC5rKQ5II/wo936RZgokiwFdV4ek/8y2o2TziPGn1OBS5lunC05rds VgroWcu76YGdsOXeYnI1lOJDy+ZwQ5bvD+3hnLb636RIdV/1Np20SwMm4gUAW4x2 C0MuPmc7Vj87qiANky9Z/r08PJOsAf39O2qpJKcBILuLUaUofEk+UXOru0H5xmRX b0txD3iTxgEwzSVR2EeRraBakAwWKQdqFz+Lj6nXMSM3BiBzbHlqAV+GwaJS5YrA /3VvyNPlVNuVuhiwCYchHUIPSk5D+oWd -----END CERTIFICATE-----Generated at Sat May 31 16:54:59 2025 by rpki-client