$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: mY5dX/brC/2iVgJcUdJsNMO5kzvgUM9F0CF4fWE9FYo= Subject key identifier: BB:DD:7A:8F:4F:07:DC:B7:A6:4A:15:78:91:D2:AF:34:53:57:7B:EF Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 106A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 105F Signing time: Fri 30 May 2025 17:33:06 +0000 Manifest this update: Fri 30 May 2025 17:33:05 +0000 Manifest next update: Fri 06 Jun 2025 17:33:05 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: k5CbCi+zKP/WBwXO8905Wpq6PmYsgoCdkY/dfn0N6ug=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4202 (0x106a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: May 30 17:33:05 2025 GMT Not After : Jun 6 17:33:05 2025 GMT Subject: CN=6839ebd1-b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:aa:95:fc:98:53:69:d7:3f:4d:a5:65:07: 17:69:23:42:cd:33:fb:54:66:77:ba:a4:16:6f:29: 80:29:3f:e9:d8:dd:ec:5e:99:6b:99:c5:87:ca:e0: 5a:6e:d3:55:a4:ea:0b:6e:df:aa:4f:48:60:93:2b: 82:6b:25:9e:55:9f:a4:d6:8f:9b:83:15:a9:f8:03: 59:88:b8:27:88:98:47:96:29:29:3f:23:3a:76:4c: a0:e5:14:c1:57:5d:f0:88:a3:e4:5d:75:e6:e9:b4: 66:74:b9:55:42:aa:ac:1d:a3:19:67:11:c7:d5:d5: 9b:81:d1:53:32:37:24:95:57:ff:e7:0e:a0:34:22: 91:ce:4c:40:2b:9b:30:92:8f:4d:9a:d1:5d:af:70: 6d:88:ab:13:1d:42:01:cd:59:a0:7d:66:36:4e:a0: 7a:ca:99:93:c1:f2:3c:31:82:37:fa:86:84:8d:ec: 4d:e2:d5:56:8c:70:fe:3d:af:e1:3a:eb:bc:58:0f: 57:c4:6d:ad:7e:b6:01:fa:a4:32:d6:52:c1:45:1a: b5:dd:11:50:50:b0:58:01:23:2d:88:1c:ef:da:1f: 4d:03:d7:88:61:4b:ae:25:d7:1a:01:ce:82:c1:ab: 2e:0e:cf:c7:d5:10:db:43:74:b7:e7:28:35:09:3d: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DD:7A:8F:4F:07:DC:B7:A6:4A:15:78:91:D2:AF:34:53:57:7B:EF X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0e:c1:c3:f7:79:c0:48:3c:f3:d9:9e:7c:09:eb:2e:1b:4f: 31:02:60:ac:89:33:64:8a:ba:d0:a6:2d:7f:06:ae:50:58:f8: 37:0c:d1:65:04:e8:65:4f:55:e6:19:57:2a:fc:9c:f8:fc:a2: 09:11:1d:81:44:22:fc:37:16:a0:31:94:c7:0b:10:1e:24:c8: c8:c1:25:a9:e8:d7:ea:62:1f:40:27:eb:08:3a:79:20:12:27: b8:e7:cc:bb:40:0e:48:d5:c6:32:1a:f1:86:60:78:a0:63:8f: e5:a3:78:28:72:22:99:d4:aa:1b:dc:4c:86:ec:05:32:90:64: 05:ad:28:7f:e9:75:4e:81:c2:89:3f:1c:a5:a6:1a:99:77:e9: d3:72:46:f7:cb:d1:f2:a5:6f:66:bb:e9:91:f4:74:d8:17:00: c1:98:4c:c6:62:d1:65:59:71:64:0e:e8:51:4c:d0:53:d8:64: 02:07:02:58:43:d5:20:8e:11:1d:97:29:d0:aa:ba:f3:c9:1b: 66:28:1e:f2:12:e6:f1:84:7a:28:49:99:7d:3d:3d:5f:db:2f: 00:a6:a1:77:dd:e1:25:27:d4:56:37:e6:c9:a1:1d:3a:74:cc: eb:d8:0c:23:e7:82:67:28:88:aa:37:37:9b:0f:93:0e:7e:79: 97:fb:23:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwNTMwMTczMzA1WhcNMjUwNjA2MTczMzA1WjAYMRYwFAYD VQQDEw02ODM5ZWJkMS1iMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p6qlfyYU2nXP02lZQcXaSNCzTP7VGZ3uqQWbymAKT/p2N3sXplrmcWHyuBa btNVpOoLbt+qT0hgkyuCayWeVZ+k1o+bgxWp+ANZiLgniJhHlikpPyM6dkyg5RTB V13wiKPkXXXm6bRmdLlVQqqsHaMZZxHH1dWbgdFTMjcklVf/5w6gNCKRzkxAK5sw ko9NmtFdr3BtiKsTHUIBzVmgfWY2TqB6ypmTwfI8MYI3+oaEjexN4tVWjHD+Pa/h Ouu8WA9XxG2tfrYB+qQy1lLBRRq13RFQULBYASMtiBzv2h9NA9eIYUuuJdcaAc6C wasuDs/H1RDbQ3S35yg1CT3aXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvdeo9P B9y3pkoVeJHSrzRTV3vvMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNDsHD93nASDzz2Z58CesuG08xAmCsiTNkirrQpi1/Bq5QWPg3DNFl BOhlT1XmGVcq/Jz4/KIJER2BRCL8NxagMZTHCxAeJMjIwSWp6NfqYh9AJ+sIOnkg Eie458y7QA5I1cYyGvGGYHigY4/lo3gociKZ1Kob3EyG7AUykGQFrSh/6XVOgcKJ PxylphqZd+nTckb3y9HypW9mu+mR9HTYFwDBmEzGYtFlWXFkDuhRTNBT2GQCBwJY Q9UgjhEdlynQqrrzyRtmKB7yEubxhHooSZl9PT1f2y8ApqF33eElJ9RWN+bJoR06 dMzr2Awj54JnKIiqNzebD5MOfnmX+yN0 -----END CERTIFICATE-----Generated at Sat May 31 17:47:16 2025 by rpki-client