$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: M3ZkNLjPxGtq2xO7TNBmzToI/EGB3gKOjZZXgl/tkIw= Subject key identifier: AF:20:D3:19:CF:68:A4:11:BC:9A:AA:97:1A:A2:1A:38:42:B7:EA:BD Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 037A Signing time: Sat 31 May 2025 01:07:00 +0000 Manifest this update: Sat 31 May 2025 01:06:59 +0000 Manifest next update: Sat 07 Jun 2025 01:06:59 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: kLLBcrRZE/9vSWSEumdr8yx7wc+LacVL85a6OzU6Juc=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: May 31 01:06:59 2025 GMT Not After : Jun 7 01:06:59 2025 GMT Subject: CN=683a5633-9150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:1a:d1:98:cd:0f:94:d4:d0:cb:07:da:ab: e4:d0:b3:73:da:0d:39:16:19:38:d8:79:1e:f6:b8: b2:bf:f6:a4:0f:7c:17:eb:38:28:77:90:6e:c5:ba: f1:0d:35:c2:ac:2d:c4:a8:17:4f:00:25:c3:fc:14: ca:b7:c2:dd:d0:47:e0:a1:f3:c9:d7:93:8c:f6:2f: ea:4b:04:22:a9:89:40:c7:65:ec:22:07:76:f0:66: 70:f7:43:54:82:a2:7c:0e:d4:92:aa:97:6e:32:32: 82:39:ca:9f:81:ad:3f:01:44:26:dd:b5:9a:50:62: 54:b4:9c:02:a6:92:3e:b3:c6:04:35:a0:d2:7d:46: f8:e2:15:8f:c5:da:91:85:0a:ae:6c:52:3d:1c:7b: f7:1e:c3:56:f5:9b:44:43:e7:65:ec:71:05:24:74: 40:1e:4f:7c:e6:08:4c:e0:8a:b7:d3:68:b7:31:8d: 3c:bc:32:fe:48:c0:35:b3:04:68:da:9f:34:97:df: 24:d0:ee:66:b6:69:37:bd:e4:fc:7f:e0:be:7c:ef: 8e:da:7b:cf:ff:60:4a:d6:e3:04:03:66:d4:dc:29: 8a:ac:dd:0a:42:22:17:e5:a3:a0:f9:69:a7:48:33: 83:2e:d9:43:8f:64:3e:70:9d:fa:37:5b:27:5c:05: fc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:D3:19:CF:68:A4:11:BC:9A:AA:97:1A:A2:1A:38:42:B7:EA:BD X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fa:9a:18:98:8e:90:66:41:51:f1:68:6d:34:a7:32:29:f8: 32:98:d2:41:28:1f:68:73:e0:09:28:62:23:72:af:5b:65:ea: a7:49:14:b4:3b:99:82:3b:27:79:8b:f7:7d:93:b8:7b:ca:75: e2:7a:d9:25:0a:35:21:8d:84:4a:bc:53:26:03:5d:77:28:50: d0:ab:3d:b5:2d:f0:76:a2:11:45:ab:c5:be:a9:3b:6a:90:6f: 33:fb:05:8f:64:3a:19:2c:9a:45:63:20:95:4e:0e:b2:db:4a: dc:6c:f0:92:66:67:70:18:b8:f4:42:ba:e3:17:c8:88:2e:a7: 3a:bc:9d:4e:85:48:91:e3:ac:01:f9:b4:9b:3c:1b:61:c9:50: c7:9a:c1:e7:88:df:fe:fc:ab:65:31:5a:f9:4c:78:0a:9f:47: 4a:5d:3c:5c:07:3b:67:b4:33:60:d5:5d:2c:9b:d8:66:32:f9: 0d:77:04:17:48:2f:8d:00:04:d1:c5:de:49:31:2d:f1:6b:4c: 54:7a:1e:fd:35:b1:88:9c:06:1c:d4:4a:39:89:dc:fa:c6:a2: 2e:96:48:02:aa:8d:57:66:8a:d6:c0:e2:e8:f7:04:fd:09:bd: ab:62:68:72:fe:ae:51:de:4d:c8:90:8c:73:9a:f8:27:d7:fd: 27:65:48:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwNTMxMDEwNjU5WhcNMjUwNjA3MDEwNjU5WjAYMRYwFAYD VQQDEw02ODNhNTYzMy05MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpsa0ZjND5TU0MsH2qvk0LNz2g05Fhk42Hke9riyv/akD3wX6zgod5Buxbrx DTXCrC3EqBdPACXD/BTKt8Ld0EfgofPJ15OM9i/qSwQiqYlAx2XsIgd28GZw90NU gqJ8DtSSqpduMjKCOcqfga0/AUQm3bWaUGJUtJwCppI+s8YENaDSfUb44hWPxdqR hQqubFI9HHv3HsNW9ZtEQ+dl7HEFJHRAHk985ghM4Iq302i3MY08vDL+SMA1swRo 2p80l98k0O5mtmk3veT8f+C+fO+O2nvP/2BK1uMEA2bU3CmKrN0KQiIX5aOg+Wmn SDODLtlDj2Q+cJ36N1snXAX8JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8g0xnP aKQRvJqqlxqiGjhCt+q9MB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+poYmI6QZkFR8WhtNKcyKfgymNJBKB9oc+AJKGIjcq9bZeqnSRS0 O5mCOyd5i/d9k7h7ynXietklCjUhjYRKvFMmA113KFDQqz21LfB2ohFFq8W+qTtq kG8z+wWPZDoZLJpFYyCVTg6y20rcbPCSZmdwGLj0QrrjF8iILqc6vJ1OhUiR46wB +bSbPBthyVDHmsHniN/+/KtlMVr5THgKn0dKXTxcBztntDNg1V0sm9hmMvkNdwQX SC+NAATRxd5JMS3xa0xUeh79NbGInAYc1Eo5idz6xqIulkgCqo1XZorWwOLo9wT9 Cb2rYmhy/q5R3k3IkIxzmvgn1/0nZUha -----END CERTIFICATE-----Generated at Sat May 31 16:57:49 2025 by rpki-client