$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: UUTnM1hQFrOKnxfcLa+JU7GQHrQzZCPvsYVDHHztTbM= Subject key identifier: 29:B4:8C:7F:AE:BB:62:64:CB:EA:90:E1:E3:C1:59:FA:DF:9B:37:AC Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2512 Signing time: Fri 30 May 2025 15:55:29 +0000 Manifest this update: Fri 30 May 2025 15:55:28 +0000 Manifest next update: Fri 06 Jun 2025 15:55:28 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: IsrnvVUivEvlunuC+0oleiZunJazhhqDggrpDBnkCK0=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9510 (0x2526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: May 30 15:55:28 2025 GMT Not After : Jun 6 15:55:28 2025 GMT Subject: CN=6839d4f0-b1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:c5:7e:9c:c1:c9:c0:99:12:97:93:3c:18: 3d:be:a9:fd:eb:bb:b8:51:5e:d9:12:67:4e:45:70: 6a:ce:a1:a1:10:8d:83:b3:12:6f:b4:e2:1e:73:8e: 40:a1:cd:d6:5c:b0:f3:a4:83:d2:be:ed:35:a0:26: ba:9c:44:68:49:c4:9b:6c:08:5a:23:0e:75:79:ea: fa:ad:30:30:ed:8d:be:71:14:1f:51:e3:19:58:5e: 20:df:21:b9:58:6a:fc:fb:d7:48:f7:78:34:fb:9c: 9e:23:2f:db:e3:ff:fc:19:9e:4e:72:28:2b:d1:6b: 38:32:77:d4:5c:98:dc:59:cb:c6:aa:a1:52:90:68: 3b:fa:eb:af:ac:35:ab:24:38:e8:d8:13:1f:74:eb: 40:1a:cd:9f:3d:c2:f2:a9:a3:d8:ee:53:6e:d0:10: f9:1a:3d:06:47:ff:c2:c8:aa:db:06:4d:f9:63:3d: 05:32:c0:43:8f:e9:32:40:5a:81:60:40:1d:c3:df: b7:8f:f3:e9:82:b0:02:30:e6:9a:ec:8b:0a:c8:12: 3e:36:8e:ce:57:90:6e:f4:8f:d0:47:31:64:ce:ae: 13:a1:de:47:10:37:4e:73:d5:df:f1:20:e7:1e:83: d6:b6:8e:e3:a0:ad:b3:2e:ed:1a:0f:96:81:d6:c4: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B4:8C:7F:AE:BB:62:64:CB:EA:90:E1:E3:C1:59:FA:DF:9B:37:AC X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:81:23:a5:d3:18:68:ac:3a:02:2c:27:b8:0c:2d:f3:15:f2: 32:07:68:30:bf:e1:44:95:ea:17:7c:9a:04:e5:68:ef:e7:3c: 0c:0b:e3:7e:4d:2e:8b:7d:3a:8e:76:30:c9:de:00:06:f5:4d: 6a:7c:6c:64:f9:15:d4:3b:0c:63:aa:5b:28:7f:c0:2a:9c:6c: d1:85:c7:1d:09:f1:98:d2:1e:ee:59:98:32:a1:2d:20:7c:48: a7:70:14:79:86:8e:ec:23:76:23:ba:b5:fc:b9:84:3e:5c:a0: 3f:47:64:46:91:9d:28:44:75:d3:2e:61:f8:01:56:0f:ef:47: 87:72:7b:d1:f0:94:08:89:10:35:c0:fd:e7:7a:51:ae:2c:ba: 79:b6:2c:02:f1:e9:4e:72:a4:cb:f7:0e:a9:b2:3a:e9:ce:0a: 5a:e1:07:38:6d:36:e0:7a:49:14:22:6b:80:46:48:6c:7d:b0: 41:e5:76:98:8c:b6:5c:fe:cf:6b:5f:ac:0f:e4:cf:c7:dc:38: af:9f:0f:7b:cf:75:bd:90:2d:b7:e8:ae:73:21:f5:f7:dc:e2: bc:11:5e:a5:df:5c:72:67:00:c1:ef:7f:5f:2e:3a:a0:1e:97: e5:1d:c1:e6:06:92:be:eb:ac:cb:e3:f2:56:c9:33:46:54:c6: 42:1e:4d:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwNTMwMTU1NTI4WhcNMjUwNjA2MTU1NTI4WjAYMRYwFAYD VQQDEw02ODM5ZDRmMC1iMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh7FfpzBycCZEpeTPBg9vqn967u4UV7ZEmdORXBqzqGhEI2DsxJvtOIec45A oc3WXLDzpIPSvu01oCa6nERoScSbbAhaIw51eer6rTAw7Y2+cRQfUeMZWF4g3yG5 WGr8+9dI93g0+5yeIy/b4//8GZ5Ocigr0Ws4MnfUXJjcWcvGqqFSkGg7+uuvrDWr JDjo2BMfdOtAGs2fPcLyqaPY7lNu0BD5Gj0GR//CyKrbBk35Yz0FMsBDj+kyQFqB YEAdw9+3j/PpgrACMOaa7IsKyBI+No7OV5Bu9I/QRzFkzq4Tod5HEDdOc9Xf8SDn HoPWto7joK2zLu0aD5aB1sQgIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm0jH+u u2Jky+qQ4ePBWfrfmzesMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2gSOl0xhorDoCLCe4DC3zFfIyB2gwv+FEleoXfJoE5Wjv5zwMC+N+ TS6LfTqOdjDJ3gAG9U1qfGxk+RXUOwxjqlsof8AqnGzRhccdCfGY0h7uWZgyoS0g fEincBR5ho7sI3YjurX8uYQ+XKA/R2RGkZ0oRHXTLmH4AVYP70eHcnvR8JQIiRA1 wP3nelGuLLp5tiwC8elOcqTL9w6psjrpzgpa4Qc4bTbgekkUImuARkhsfbBB5XaY jLZc/s9rX6wP5M/H3Divnw97z3W9kC236K5zIfX33OK8EV6l31xyZwDB739fLjqg HpflHcHmBpK+66zL4/JWyTNGVMZCHk1Y -----END CERTIFICATE-----Generated at Sat May 31 16:31:23 2025 by rpki-client