$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: hNSfPb0Vmjyg3d37xIkIOiE3U99YmGlgwkaT/NwToNQ= Subject key identifier: 14:98:B8:C7:ED:CC:65:FD:08:85:BC:E3:04:7A:82:38:8D:F8:1A:38 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1426 Signing time: Thu 12 Jun 2025 16:52:48 +0000 Manifest this update: Thu 12 Jun 2025 16:52:47 +0000 Manifest next update: Thu 19 Jun 2025 16:52:47 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: gMwLGS9ae9SAhmemgM1KRvMG/OcaoxzqDHTCtS5r1yQ=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5189 (0x1445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Jun 12 16:52:47 2025 GMT Not After : Jun 19 16:52:47 2025 GMT Subject: CN=684b05df-2191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:5a:cd:25:3c:54:1e:46:96:7b:35:ff:a7: 5e:e5:22:df:89:cc:0f:ac:df:ac:3a:12:8c:c1:84: 27:21:0e:7c:52:9a:9c:c5:d7:a9:68:97:71:2a:b7: 6e:76:e3:7a:0f:3f:03:14:3f:3e:18:43:41:8f:8e: 2f:fb:8e:b7:cc:e4:b9:e9:79:bc:59:b6:bb:01:9d: e7:fd:08:87:bc:d6:35:39:d3:17:4e:14:94:f1:6b: e9:ee:60:e7:86:ba:73:4d:a4:f6:4d:7c:20:ce:0f: af:93:b6:f0:59:f0:d9:6a:90:ca:0d:1f:d6:ce:bb: 90:72:4f:28:f6:56:eb:fc:67:28:86:cb:49:56:3a: 04:58:ae:9b:f4:f8:ba:6b:f3:e1:4a:54:02:09:f1: 0a:f2:4d:76:92:5f:e6:dc:86:c4:49:7f:cd:5e:c9: 7a:b8:72:47:bd:7a:44:4e:b6:0a:7d:d4:13:93:ce: 1e:d4:a9:06:83:c3:c7:72:a3:ea:73:af:36:5c:3f: 1a:da:d3:fc:b2:87:5c:c5:69:ea:f9:9f:75:46:bf: 05:56:b0:1a:e2:30:5a:98:84:cf:c7:3d:2a:fc:2d: 1b:3f:04:e9:5f:9b:2d:30:58:78:a4:4c:f2:b0:1e: b5:9f:3f:ec:2c:94:be:7c:ee:55:53:ab:28:8c:c6: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:98:B8:C7:ED:CC:65:FD:08:85:BC:E3:04:7A:82:38:8D:F8:1A:38 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:cf:a8:5c:4f:67:27:78:c7:88:c7:f8:87:8f:5b:6c:20: 99:a7:e9:13:86:66:da:68:af:f9:a6:f9:83:8e:95:0a:a3:0c: ed:cb:d0:14:55:ed:db:48:48:90:bb:e2:65:15:55:ca:e6:c1: 53:f1:9f:45:b0:9c:17:a5:97:f0:6b:a3:31:d2:c1:08:7c:32: 17:27:e4:37:a0:ff:64:6a:70:b2:27:a4:1d:dc:0f:17:3f:42: 8c:c3:c5:8f:e5:a5:c0:ca:27:14:c9:cf:57:b8:11:19:9e:3f: c7:ea:92:db:db:21:5e:83:11:45:62:1a:4d:48:fa:b3:48:3b: b9:ea:5e:e7:ec:38:e2:04:ef:9d:89:83:3c:b3:65:93:47:ad: 00:79:41:9a:09:da:de:7b:00:23:f1:9e:83:37:31:41:01:41: 2b:ce:92:5d:e8:c4:2a:5f:21:72:49:98:45:48:89:12:39:63: 1e:89:67:f1:45:2e:9b:5a:e0:66:9f:cc:58:88:13:5a:0b:85: 34:17:80:7d:f1:86:db:12:7a:1a:85:ae:a0:f7:a5:4d:38:a5: a9:46:4f:0e:c5:0c:33:22:e5:40:6b:1a:32:f2:df:42:5e:b4: 1f:d4:d8:0e:db:a7:de:df:22:38:1d:9d:53:bc:47:ab:4a:75: 76:8c:b5:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwNjEyMTY1MjQ3WhcNMjUwNjE5MTY1MjQ3WjAYMRYwFAYD VQQDEw02ODRiMDVkZi0yMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJBazSU8VB5Glns1/6de5SLficwPrN+sOhKMwYQnIQ58UpqcxdepaJdxKrdu duN6Dz8DFD8+GENBj44v+463zOS56Xm8Wba7AZ3n/QiHvNY1OdMXThSU8Wvp7mDn hrpzTaT2TXwgzg+vk7bwWfDZapDKDR/WzruQck8o9lbr/GcohstJVjoEWK6b9Pi6 a/PhSlQCCfEK8k12kl/m3IbESX/NXsl6uHJHvXpETrYKfdQTk84e1KkGg8PHcqPq c682XD8a2tP8sodcxWnq+Z91Rr8FVrAa4jBamITPxz0q/C0bPwTpX5stMFh4pEzy sB61nz/sLJS+fO5VU6sojMZN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSYuMft zGX9CIW84wR6gjiN+Bo4MB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW9M+oXE9nJ3jHiMf4h49bbCCZp+kThmbaaK/5pvmDjpUKowzty9AU Ve3bSEiQu+JlFVXK5sFT8Z9FsJwXpZfwa6Mx0sEIfDIXJ+Q3oP9kanCyJ6Qd3A8X P0KMw8WP5aXAyicUyc9XuBEZnj/H6pLb2yFegxFFYhpNSPqzSDu56l7n7DjiBO+d iYM8s2WTR60AeUGaCdreewAj8Z6DNzFBAUErzpJd6MQqXyFySZhFSIkSOWMeiWfx RS6bWuBmn8xYiBNaC4U0F4B98YbbEnoaha6g96VNOKWpRk8OxQwzIuVAaxoy8t9C XrQf1NgO26fe3yI4HZ1TvEerSnV2jLVT -----END CERTIFICATE-----Generated at Fri Jun 13 08:53:27 2025 by rpki-client