$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: OEFEAFAVkuWoasJEVCUVKzpZK28HRVdEty14LutLv+I= Subject key identifier: 10:F9:D9:4D:9A:E0:9C:FD:14:11:EA:9B:E9:5A:7E:CE:8E:2E:9D:D6 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 3491 Signing time: Sat 31 May 2025 14:17:08 +0000 Manifest this update: Sat 31 May 2025 14:17:08 +0000 Manifest next update: Sat 07 Jun 2025 14:17:08 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: YuxSJrT/4OllgZ42rYtuLZsYqyQJ+PN/cEEoDoGc/+Y=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: May 31 14:17:08 2025 GMT Not After : Jun 7 14:17:08 2025 GMT Subject: CN=683b0f64-d2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:26:e2:0a:4c:b9:1a:46:ea:8f:6f:f4:d1: 32:6e:a0:93:32:2f:dd:37:af:0d:b5:7d:e9:de:f6: c7:a1:ba:9a:b6:f5:c8:6f:53:ec:4c:46:9a:60:ba: 08:98:6e:d9:8f:47:49:85:45:c0:ad:36:a1:8f:7b: 8e:e5:b1:69:2a:8d:11:2a:5f:0e:86:0c:9f:cc:1d: 87:42:05:13:65:43:bf:03:93:5f:de:47:d2:2f:89: be:c3:3e:8c:1b:db:37:3e:29:3d:92:df:05:a3:6a: 1b:d3:5d:35:13:c8:90:72:00:73:3c:7e:ef:14:3a: 1b:00:46:d2:a9:0a:bd:1f:04:ef:32:3e:b1:0c:82: 81:c2:7a:d5:c6:16:ea:09:0c:8a:73:9a:29:a6:4f: 2f:46:cc:d6:72:a4:65:fc:c4:1f:0e:26:0d:39:06: 1a:70:e7:45:c4:36:c2:09:72:02:18:bd:2d:fd:06: 79:a2:54:9e:f2:89:81:0d:23:97:c0:6e:7b:67:7e: 36:e3:8e:b3:97:32:9d:8e:40:9b:03:a0:8e:25:e7: a4:fd:53:e1:07:7f:8f:fc:e9:bc:25:26:e9:40:25: bf:27:3b:91:59:b0:32:bf:f0:71:57:d4:d4:6c:ac: 64:9a:59:dc:27:f8:d8:99:9f:a0:52:49:0a:ee:9a: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:D9:4D:9A:E0:9C:FD:14:11:EA:9B:E9:5A:7E:CE:8E:2E:9D:D6 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:16:50:24:66:6b:ca:19:ab:17:8c:63:f1:f1:8d:c0:ac:b3: 11:05:c4:29:39:37:d6:d6:95:13:2a:55:23:3f:5d:6e:a7:55: ab:da:78:bb:e1:38:ec:d9:1d:e1:2b:cf:24:d9:6c:d0:bf:6a: cc:0e:76:bd:62:7f:48:0e:9f:2d:f3:34:27:35:c9:35:04:a8: f0:c4:94:73:6d:5e:29:9e:ac:5e:5f:06:06:87:3b:34:82:85: 66:4a:80:cc:d5:cf:fd:e0:f6:02:2c:43:32:7b:a0:81:75:0c: fc:22:44:f4:39:c9:44:be:da:13:7d:2e:46:f2:3c:bb:a7:52: ae:89:46:56:f7:c9:04:72:01:81:11:6d:22:da:bc:eb:a5:ae: 11:94:04:e2:dc:86:e9:36:2b:c4:6e:df:14:be:ef:ae:44:c5: 2c:52:56:5d:08:20:20:4e:69:ce:6e:d3:b7:e2:52:ad:63:f1: 21:6d:cf:82:30:30:9a:e0:32:92:bd:f0:5f:36:e1:5c:5b:a0: e9:79:58:95:0c:bc:be:92:c4:18:10:84:47:09:d2:a4:fa:34: 6b:dd:73:38:79:70:63:c6:bb:a6:b6:a7:3e:1f:d3:d4:94:09: bf:7f:b4:b1:3c:14:b9:a5:f9:1b:52:82:be:3a:48:3d:8e:c5: 70:60:cf:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUwNTMxMTQxNzA4WhcNMjUwNjA3MTQxNzA4WjAYMRYwFAYD VQQDEw02ODNiMGY2NC1kMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYYm4gpMuRpG6o9v9NEybqCTMi/dN68NtX3p3vbHobqatvXIb1PsTEaaYLoI mG7Zj0dJhUXArTahj3uO5bFpKo0RKl8OhgyfzB2HQgUTZUO/A5Nf3kfSL4m+wz6M G9s3Pik9kt8Fo2ob0101E8iQcgBzPH7vFDobAEbSqQq9HwTvMj6xDIKBwnrVxhbq CQyKc5oppk8vRszWcqRl/MQfDiYNOQYacOdFxDbCCXICGL0t/QZ5olSe8omBDSOX wG57Z342446zlzKdjkCbA6COJeek/VPhB3+P/Om8JSbpQCW/JzuRWbAyv/BxV9TU bKxkmlncJ/jYmZ+gUkkK7pp/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD52U2a 4Jz9FBHqm+lafs6OLp3WMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfFlAkZmvKGasXjGPx8Y3ArLMRBcQpOTfW1pUTKlUjP11up1Wr2ni7 4Tjs2R3hK88k2WzQv2rMDna9Yn9IDp8t8zQnNck1BKjwxJRzbV4pnqxeXwYGhzs0 goVmSoDM1c/94PYCLEMye6CBdQz8IkT0OclEvtoTfS5G8jy7p1KuiUZW98kEcgGB EW0i2rzrpa4RlATi3IbpNivEbt8Uvu+uRMUsUlZdCCAgTmnObtO34lKtY/Ehbc+C MDCa4DKSvfBfNuFcW6DpeViVDLy+ksQYEIRHCdKk+jRr3XM4eXBjxrumtqc+H9PU lAm/f7SxPBS5pfkbUoK+Okg9jsVwYM/Q -----END CERTIFICATE-----Generated at Sat May 31 16:26:58 2025 by rpki-client