$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: H8Jk/b9FEP5P1nWYf3p3gS5y90IvrQbBxZivpvwjh/E= Subject key identifier: 26:35:EA:B6:1B:2F:A1:90:7E:B0:F8:91:DB:19:49:8C:26:AB:FF:3E Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: E3 Signing time: Sat 31 May 2025 05:05:34 +0000 Manifest this update: Sat 31 May 2025 05:05:33 +0000 Manifest next update: Sat 07 Jun 2025 05:05:33 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: yjVZFc+k5VftLT2L+U/wi17xqK/pvlo7P8BMb7I++/k=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: May 31 05:05:33 2025 GMT Not After : Jun 7 05:05:33 2025 GMT Subject: CN=683a8e1e-168c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:76:e8:13:a5:37:f8:43:de:a1:5d:83:8d: 3f:83:1e:90:e1:5b:b9:e7:39:39:99:3e:22:bd:a3: 69:fc:f5:86:78:cd:b5:06:4f:67:77:e3:32:19:e5: 29:8a:ee:ba:76:96:ca:17:58:cc:38:44:9c:13:2b: be:bf:45:1d:b0:e3:70:6c:03:90:49:a4:a5:66:63: 88:13:d8:74:ad:ef:d5:61:7b:74:38:90:93:95:c5: 34:1b:e3:e8:51:97:22:81:aa:7f:59:cc:d6:bd:bd: 62:79:d8:88:60:74:dd:56:73:95:7a:30:c2:20:88: 73:d7:70:79:9b:e7:68:34:c7:99:e6:b2:fd:9b:f5: c9:d5:e3:d0:b6:96:ee:0c:41:73:a7:95:26:fb:4f: 18:1d:0d:9d:f5:f1:e8:ed:ea:d6:81:d4:34:4f:14: 50:2d:ff:38:80:19:bc:19:e4:54:32:3d:f9:34:3b: 94:a7:32:53:be:29:ee:13:db:91:78:b6:71:c1:d8: 3a:3e:ab:92:fb:00:d1:cd:e2:34:5f:5d:1a:32:43: 4b:a8:cb:18:e4:0a:e0:a8:f7:1c:df:0c:44:70:01: ec:d7:c4:df:69:ef:08:f3:d2:32:f9:14:fb:51:fc: fa:35:5e:3b:4c:e6:e0:46:6d:d2:97:9c:a1:42:19: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:EA:B6:1B:2F:A1:90:7E:B0:F8:91:DB:19:49:8C:26:AB:FF:3E X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:e4:e2:2d:ef:91:7c:17:fe:22:4b:d3:db:0d:c1:f7:03: 50:e7:10:bd:39:54:02:3e:df:a1:31:db:cf:c8:8d:40:48:5c: c4:91:e9:e3:74:2c:5e:78:6b:0b:8f:4c:00:f9:dc:12:7f:a6: 46:dd:cd:40:06:a2:ce:9f:07:2c:c2:1f:bb:72:b7:bd:16:c0: ca:46:bc:71:f6:69:1a:f3:56:9d:56:f6:5a:c9:1e:05:11:a5: 19:3c:c3:78:66:5a:0f:95:85:30:c7:c3:6f:2d:16:e6:1e:12: b7:ce:e6:68:d6:c1:64:be:02:e1:ee:16:3f:fd:d9:02:98:32: 28:f7:4c:f7:16:fa:bb:70:53:54:e7:47:de:79:8f:5f:72:0c: 0e:a2:44:1a:8e:d5:37:7e:8c:be:5d:1c:50:58:0a:87:7e:54: f8:cd:8e:3d:84:1d:15:75:f5:c3:8c:f7:14:a6:8e:29:f4:f2: a3:22:dc:ed:e3:2f:26:f4:ca:16:1a:4c:ee:86:09:fb:0f:0d: bf:91:e6:e8:19:ed:86:62:e2:16:42:c5:10:32:bd:41:aa:93: b8:1e:57:40:5c:87:e4:d0:fe:98:92:e3:11:7d:76:1b:cc:c7: ca:60:2d:a7:e4:51:8b:dd:a1:6a:e4:d1:c0:cc:60:32:62:de: 0c:23:c9:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwNTMxMDUwNTMzWhcNMjUwNjA3MDUwNTMzWjAYMRYwFAYD VQQDEw02ODNhOGUxZS0xNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz926BOlN/hD3qFdg40/gx6Q4Vu55zk5mT4ivaNp/PWGeM21Bk9nd+MyGeUp iu66dpbKF1jMOEScEyu+v0UdsONwbAOQSaSlZmOIE9h0re/VYXt0OJCTlcU0G+Po UZcigap/WczWvb1iediIYHTdVnOVejDCIIhz13B5m+doNMeZ5rL9m/XJ1ePQtpbu DEFzp5Um+08YHQ2d9fHo7erWgdQ0TxRQLf84gBm8GeRUMj35NDuUpzJTvinuE9uR eLZxwdg6PquS+wDRzeI0X10aMkNLqMsY5ArgqPcc3wxEcAHs18Tfae8I89Iy+RT7 Ufz6NV47TObgRm3Sl5yhQhk0ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY16rYb L6GQfrD4kdsZSYwmq/8+MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHquTiLe+RfBf+IkvT2w3B9wNQ5xC9OVQCPt+hMdvPyI1ASFzEkenj dCxeeGsLj0wA+dwSf6ZG3c1ABqLOnwcswh+7cre9FsDKRrxx9mka81adVvZayR4F EaUZPMN4ZloPlYUwx8NvLRbmHhK3zuZo1sFkvgLh7hY//dkCmDIo90z3Fvq7cFNU 50feeY9fcgwOokQajtU3foy+XRxQWAqHflT4zY49hB0VdfXDjPcUpo4p9PKjItzt 4y8m9MoWGkzuhgn7Dw2/keboGe2GYuIWQsUQMr1BqpO4HldAXIfk0P6YkuMRfXYb zMfKYC2n5FGL3aFq5NHAzGAyYt4MI8kc -----END CERTIFICATE-----Generated at Sat May 31 16:29:42 2025 by rpki-client