$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: 0Y4pm6X2Swvsyt50ZJq2Rh56NUs/espxCoqdLgyIsEg= Subject key identifier: BD:E3:27:B8:BF:CC:C0:88:21:CE:B3:6A:D3:D6:97:BB:75:6E:95:F6 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: F4 Signing time: Sat 31 May 2025 04:55:42 +0000 Manifest this update: Sat 31 May 2025 04:55:41 +0000 Manifest next update: Sat 07 Jun 2025 04:55:41 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: 9n7y7D9teVa3mfeFvXgt+OJuhYpsz7PNk0gTBrzQUic=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: May 31 04:55:41 2025 GMT Not After : Jun 7 04:55:41 2025 GMT Subject: CN=683a8bcd-f145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:7a:aa:12:08:3f:d6:a2:f3:b4:d9:35:97: 95:7d:2f:8d:33:ff:61:e3:81:7d:cb:29:8c:8e:83: 1f:13:12:52:8c:b0:01:90:90:6e:b1:d8:01:c1:ac: 49:2d:a8:e2:36:f2:88:f6:3a:4a:a3:88:33:64:aa: f8:df:9f:a0:ff:34:a0:48:67:19:89:92:ab:5e:aa: cb:40:da:37:71:ce:0e:db:57:e4:4a:85:e7:85:8a: b2:b6:0a:e6:97:a9:68:e5:ba:6b:e6:8a:63:65:72: af:6b:e6:2f:0d:bf:2c:8d:0a:24:21:6a:d8:d7:2e: 70:67:83:b1:9e:aa:41:b6:6d:e1:53:6f:eb:7c:00: a8:25:84:a6:2f:c0:a0:56:41:58:28:5c:ed:8e:8d: 52:9e:76:95:cd:f1:6e:df:b8:e5:21:fd:8c:6d:f2: 72:03:97:40:4c:43:f0:ab:27:d1:0a:a9:9c:14:74: 46:7e:47:da:12:86:ca:6b:93:41:fd:4c:86:24:46: db:6e:e6:e1:03:96:4a:55:93:87:a9:d0:06:03:e4: 14:af:c7:6e:07:41:54:2d:56:99:45:70:74:99:2b: 97:b7:e3:da:45:b5:90:9a:d4:91:15:97:85:c1:b1: bd:81:6b:2e:b4:ea:46:4e:0c:81:81:6a:8f:1f:82: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:27:B8:BF:CC:C0:88:21:CE:B3:6A:D3:D6:97:BB:75:6E:95:F6 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:e0:7b:38:fb:f1:ef:eb:4c:18:ab:da:58:6a:48:49:6f: b7:25:f3:15:fb:92:14:e7:ff:e2:35:62:fe:5e:25:cf:7a:72: e3:19:c2:ad:e2:c4:6d:8e:65:ee:9c:c0:70:6c:c8:7a:8f:9f: 8e:72:34:64:f9:ae:2a:b8:54:8c:90:2d:00:6a:8c:88:1a:4f: ad:cb:99:12:2b:71:63:6b:a9:b1:ac:3f:7f:bf:84:33:0d:44: 02:b5:2b:57:7e:3d:c0:0d:a8:0e:b4:b8:61:56:f3:35:13:6e: 95:a1:30:f6:14:a6:77:01:25:dd:4b:50:45:69:80:82:eb:0d: bf:7a:21:d9:91:2b:51:ff:bc:b4:aa:87:2d:8d:89:19:64:ae: 82:3a:fc:ca:e6:5b:1d:a9:e0:15:d0:e7:15:01:67:41:3e:6c: a7:53:fc:5c:da:6e:df:22:e4:6a:82:5f:31:15:45:99:75:0b: 6b:6e:96:f2:76:d3:09:57:fd:06:b8:95:97:ca:da:43:1a:d6: fd:2c:10:ab:78:8a:db:3d:a1:db:ad:c8:99:43:be:96:93:18: bf:4a:a3:d4:75:8a:07:4b:eb:56:b8:d6:41:26:eb:a5:ee:90: 37:97:d9:01:38:c3:e4:6c:b1:15:f3:da:f4:86:32:c1:1c:95: c5:ee:34:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUwNTMxMDQ1NTQxWhcNMjUwNjA3MDQ1NTQxWjAYMRYwFAYD VQQDEw02ODNhOGJjZC1mMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhF6qhIIP9ai87TZNZeVfS+NM/9h44F9yymMjoMfExJSjLABkJBusdgBwaxJ LajiNvKI9jpKo4gzZKr435+g/zSgSGcZiZKrXqrLQNo3cc4O21fkSoXnhYqytgrm l6lo5bpr5opjZXKva+YvDb8sjQokIWrY1y5wZ4OxnqpBtm3hU2/rfACoJYSmL8Cg VkFYKFztjo1SnnaVzfFu37jlIf2MbfJyA5dATEPwqyfRCqmcFHRGfkfaEobKa5NB /UyGJEbbbubhA5ZKVZOHqdAGA+QUr8duB0FULVaZRXB0mSuXt+PaRbWQmtSRFZeF wbG9gWsutOpGTgyBgWqPH4LG7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3jJ7i/ zMCIIc6zatPWl7t1bpX2MB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH+OB7OPvx7+tMGKvaWGpISW+3JfMV+5IU5//iNWL+XiXPenLjGcKt 4sRtjmXunMBwbMh6j5+OcjRk+a4quFSMkC0AaoyIGk+ty5kSK3Fja6mxrD9/v4Qz DUQCtStXfj3ADagOtLhhVvM1E26VoTD2FKZ3ASXdS1BFaYCC6w2/eiHZkStR/7y0 qoctjYkZZK6COvzK5lsdqeAV0OcVAWdBPmynU/xc2m7fIuRqgl8xFUWZdQtrbpby dtMJV/0GuJWXytpDGtb9LBCreIrbPaHbrciZQ76Wkxi/SqPUdYoHS+tWuNZBJuul 7pA3l9kBOMPkbLEV89r0hjLBHJXF7jRM -----END CERTIFICATE-----Generated at Sat May 31 16:38:07 2025 by rpki-client