$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: EaSL5n9BW8Wv0qHkKEIvvN5vL0gPsEGlU8ovhCJ07qo= Subject key identifier: EB:C0:1F:20:92:DF:1E:45:66:63:02:5D:35:20:C5:39:C4:4A:F8:CD Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0460 Signing time: Sat 31 May 2025 00:21:53 +0000 Manifest this update: Sat 31 May 2025 00:21:53 +0000 Manifest next update: Sat 07 Jun 2025 00:21:53 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: M+HIOIc3E7wlQSRPqL5S6E5i9R9ASICpxBhlukNXC0A=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: May 31 00:21:53 2025 GMT Not After : Jun 7 00:21:53 2025 GMT Subject: CN=683a4ba1-702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:01:38:1b:38:e3:d8:77:a3:f3:cd:05:f0: 15:d1:45:99:7a:db:eb:a2:6a:04:1b:cd:7c:9a:15: c9:dc:4d:c7:69:f9:4c:f0:96:63:01:54:c5:c1:79: 48:f1:82:18:21:ba:d0:e9:38:b1:68:e0:d2:a2:60: 4f:ce:ff:d7:23:55:f6:1d:31:e9:bf:59:b4:dc:dc: 39:7e:39:f7:d7:24:15:cb:a2:f9:25:fb:dc:ae:db: 0e:e6:94:a1:2b:6e:d7:0d:9f:ec:75:07:bb:7d:3d: a3:f1:ce:ee:87:d3:b6:a2:da:27:76:32:b0:c2:2c: b0:50:c5:b2:d1:72:0b:11:dc:3c:a0:1e:bc:13:82: cf:ea:d7:ef:a8:eb:91:78:4a:b1:7f:b7:60:d7:1c: fb:bc:3f:47:7f:15:e1:c8:47:f0:42:8a:64:94:00: 32:3c:2f:80:7d:db:c2:fc:b7:0f:c7:72:70:a6:3b: eb:98:ad:9d:d3:5a:b1:05:ca:4c:89:a5:95:9d:60: d5:18:62:61:c7:86:b0:93:08:4e:1b:60:b7:38:f0: 9d:58:18:fe:ec:59:ce:67:5d:f9:d6:88:90:14:f7: bc:11:bd:1b:94:a2:ef:63:7a:5b:ba:bc:31:26:e9: 6f:8b:8d:a2:44:2b:e6:bb:76:eb:4e:5e:82:67:0c: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C0:1F:20:92:DF:1E:45:66:63:02:5D:35:20:C5:39:C4:4A:F8:CD X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:c2:6e:16:3a:d3:da:3c:20:90:d3:78:e2:cb:d7:12:11: 19:9d:41:8c:5e:51:0c:eb:80:1e:ed:3e:d3:5e:99:71:12:fa: 63:f6:89:3f:5d:2b:a5:82:d2:bd:95:03:c5:f0:a3:13:85:4d: 5a:99:6e:bc:d2:6f:87:d8:84:77:aa:df:ec:38:45:31:21:7a: fa:39:15:c2:11:b7:37:74:d2:43:a5:bc:1b:a2:fd:57:84:04: b0:48:0e:81:64:0f:97:1c:83:e2:95:ea:0f:41:68:1f:3d:77: a5:dc:a6:87:76:d9:6f:ed:37:3d:d0:b5:6e:83:2e:1a:d3:25: 5b:6c:f1:75:79:2e:60:c1:96:32:98:12:bd:70:0f:a6:cd:c9: 05:0a:61:02:c1:72:bc:79:68:97:4a:70:05:20:fa:2b:e6:8b: a6:ef:49:10:ca:75:19:e2:a2:c5:fd:68:cf:71:d0:b8:f0:5e: 57:90:08:ed:b6:04:c6:66:7c:83:87:97:f6:c5:e5:29:ae:71: 72:5f:7f:76:4a:c6:e6:32:5e:5b:f6:69:03:16:2e:3b:0c:26: 7f:67:f6:84:b4:7a:57:0a:0b:ea:50:08:7e:24:88:0c:0e:19: 5f:75:ca:f5:9c:db:b2:f7:da:b2:f5:c3:54:3b:7f:b7:42:f5: b3:47:db:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwNTMxMDAyMTUzWhcNMjUwNjA3MDAyMTUzWjAYMRYwFAYD VQQDEw02ODNhNGJhMS03MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws8BOBs449h3o/PNBfAV0UWZetvromoEG818mhXJ3E3HaflM8JZjAVTFwXlI 8YIYIbrQ6TixaODSomBPzv/XI1X2HTHpv1m03Nw5fjn31yQVy6L5JfvcrtsO5pSh K27XDZ/sdQe7fT2j8c7uh9O2otondjKwwiywUMWy0XILEdw8oB68E4LP6tfvqOuR eEqxf7dg1xz7vD9HfxXhyEfwQopklAAyPC+AfdvC/LcPx3JwpjvrmK2d01qxBcpM iaWVnWDVGGJhx4awkwhOG2C3OPCdWBj+7FnOZ1351oiQFPe8Eb0blKLvY3pburwx Julvi42iRCvmu3brTl6CZwy6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvAHyCS 3x5FZmMCXTUgxTnESvjNMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBePcJuFjrT2jwgkNN44svXEhEZnUGMXlEM64Ae7T7TXplxEvpj9ok/ XSulgtK9lQPF8KMThU1amW680m+H2IR3qt/sOEUxIXr6ORXCEbc3dNJDpbwbov1X hASwSA6BZA+XHIPileoPQWgfPXel3KaHdtlv7Tc90LVugy4a0yVbbPF1eS5gwZYy mBK9cA+mzckFCmECwXK8eWiXSnAFIPor5oum70kQynUZ4qLF/WjPcdC48F5XkAjt tgTGZnyDh5f2xeUprnFyX392SsbmMl5b9mkDFi47DCZ/Z/aEtHpXCgvqUAh+JIgM Dhlfdcr1nNuy99qy9cNUO3+3QvWzR9sC -----END CERTIFICATE-----Generated at Sat May 31 16:56:09 2025 by rpki-client