$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json) Hash identifier: 8xlhLFsJQAAmRNmZl8NB2UDtmdKH3l2pSWSKmShhkIg= Subject key identifier: D8:ED:59:ED:0F:F9:E9:CC:42:2F:52:42:0D:FD:EA:EB:6B:2A:E9:5C Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft Manifest number: 133E Signing time: Fri 30 May 2025 19:50:14 +0000 Manifest this update: Fri 30 May 2025 19:50:13 +0000 Manifest next update: Fri 06 Jun 2025 19:50:13 +0000 Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: ybn1iAsGmkhQSR0Zqf9EKb6vSsEguUuoxU2F8Kswn0U=) 2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: xCoGLzXH0o2fU2zmUG8/SFNRjo0IkmsetsLkqXjuT7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: May 30 19:50:13 2025 GMT Not After : Jun 6 19:50:13 2025 GMT Subject: CN=683a0bf6-f9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:f9:5d:78:4e:d6:ad:32:4a:48:5a:89:50: be:4e:c8:5b:f5:b5:f8:40:1f:aa:8f:7c:a3:63:2d: 18:33:da:70:72:84:21:02:e8:94:c6:98:a5:df:6b: 4e:d8:b8:01:47:49:b0:e0:12:23:73:e7:f2:65:95: 26:38:d5:27:a3:d4:c2:1d:75:2a:bb:2b:72:ef:92: 67:54:ea:1e:5a:7b:50:f8:64:13:86:e0:8f:66:f7: 22:15:01:ea:96:55:04:0d:73:33:a1:6e:f9:fa:dd: 9a:63:50:00:07:81:68:4b:d2:a0:b2:8b:b7:66:7e: 49:a9:48:3f:3e:cd:eb:ab:7e:d3:df:98:20:2e:69: ac:07:ef:45:41:fe:e5:62:2e:f6:17:92:6c:48:34: 20:14:aa:2e:f4:dd:0b:4e:94:81:36:bc:6d:cf:b4: 91:67:e7:db:3f:c5:32:5c:03:15:10:5d:b5:91:25: cc:53:63:42:60:e3:7a:57:d9:f6:1f:2d:35:66:e6: 22:94:35:72:49:43:e8:e1:bb:2c:4b:02:46:4f:c5: 6f:4a:32:22:b1:7c:e6:88:76:72:0e:bd:37:88:c5: 61:b0:9b:e5:af:6a:bd:a6:dd:b5:ca:94:83:8e:61: 8f:ec:78:10:17:0e:a8:80:83:49:80:75:c3:85:7b: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:59:ED:0F:F9:E9:CC:42:2F:52:42:0D:FD:EA:EB:6B:2A:E9:5C X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:cb:e6:73:af:9f:87:f7:ba:a0:9d:09:a4:5a:d9:aa:cd: e2:ff:5c:0a:be:a6:48:21:70:eb:24:62:46:fe:bf:3e:e4:32: 62:30:d6:59:72:b7:01:e9:10:87:55:7b:11:65:4d:05:2c:2d: d3:f4:b6:2a:24:74:ee:86:9b:84:20:d9:af:b2:50:72:f8:83: a2:0f:ea:32:a7:2c:d4:d7:14:e8:ce:f1:9c:e8:64:1b:05:4a: c1:0e:97:a7:00:e6:01:64:5a:b0:42:aa:a6:d9:75:37:d0:4c: 5f:a1:5d:30:a3:1b:86:4d:a2:69:8d:9c:f3:8f:de:5b:e3:17: e6:6a:41:3d:d3:ac:a7:2b:b4:a9:9b:63:50:ad:f8:49:3d:dd: 0e:ec:71:c9:c3:eb:30:2e:af:b9:66:9b:ac:f0:12:f8:7f:c9: 7e:c6:4f:8d:60:f9:56:1c:28:43:d0:8f:9f:af:f2:f3:08:88: 2f:87:14:ff:5b:ed:66:e9:c1:94:32:4d:39:bd:f5:3f:d9:2f: c4:ce:cd:da:af:61:66:43:f9:dc:5f:4a:35:5c:8c:6e:14:b0: 1e:ae:61:6e:94:f2:05:0a:11:5c:d4:07:92:93:80:71:7d:2d: 72:90:de:ae:2f:57:7e:af:29:84:21:29:e1:a5:53:b4:75:ed: 42:8b:c6:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTVBQTExMC8GA1UEBRMoMENGQ0NDNTk4MEY1N0U2QkM4NERGMTFCNEM1NzE5MzVE MjVEQUNDQTAeFw0yNTA1MzAxOTUwMTNaFw0yNTA2MDYxOTUwMTNaMBgxFjAUBgNV BAMTDTY4M2EwYmY2LWY5ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW2PldeE7WrTJKSFqJUL5OyFv1tfhAH6qPfKNjLRgz2nByhCEC6JTGmKXfa07Y uAFHSbDgEiNz5/JllSY41Sej1MIddSq7K3LvkmdU6h5ae1D4ZBOG4I9m9yIVAeqW VQQNczOhbvn63ZpjUAAHgWhL0qCyi7dmfkmpSD8+zeurftPfmCAuaawH70VB/uVi LvYXkmxINCAUqi703QtOlIE2vG3PtJFn59s/xTJcAxUQXbWRJcxTY0Jg43pX2fYf LTVm5iKUNXJJQ+jhuyxLAkZPxW9KMiKxfOaIdnIOvTeIxWGwm+Wvar2m3bXKlIOO YY/seBAXDqiAg0mAdcOFe9eVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2O1Z7Q/5 6cxCL1JCDf3q62sq6VwwHwYDVR0jBBgwFoAUDPzMWYD1fmvITfEbTFcZNdJdrMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNUFBLzNFRkEyNDE0NjJF MDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFB6TVdZRDFmbXZJVGZFYlRGY1pOZEpkck1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NUFBLzNFRkEyNDE0NjJFMDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12 SVRmRWJURmNaTmRKZHJNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxwy+Zzr5+H97qgnQmkWtmqzeL/XAq+pkghcOskYkb+vz7kMmIw1lly twHpEIdVexFlTQUsLdP0tiokdO6Gm4Qg2a+yUHL4g6IP6jKnLNTXFOjO8ZzoZBsF SsEOl6cA5gFkWrBCqqbZdTfQTF+hXTCjG4ZNommNnPOP3lvjF+ZqQT3TrKcrtKmb Y1Ct+Ek93Q7sccnD6zAur7lmm6zwEvh/yX7GT41g+VYcKEPQj5+v8vMIiC+HFP9b 7WbpwZQyTTm99T/ZL8TOzdqvYWZD+dxfSjVcjG4UsB6uYW6U8gUKEVzUB5KTgHF9 LXKQ3q4vV36vKYQhKeGlU7R17UKLxjo= -----END CERTIFICATE-----Generated at Sat May 31 16:46:47 2025 by rpki-client