$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: kGT4KoWcpIyxItbNELMLD5Kcm2kuzN07LRRXy07OlN8= Subject key identifier: C5:72:D0:CE:7D:0D:CC:05:71:D6:99:85:7E:C1:4A:AF:E2:F0:41:12 Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 033B Signing time: Mon 09 Jun 2025 00:38:20 +0000 Manifest this update: Mon 09 Jun 2025 00:38:19 +0000 Manifest next update: Mon 16 Jun 2025 00:38:19 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: 6AhwADxhtLgf6CAyLbsqmCz5ssR/6Zj51o/rJca+PSU=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Jun 9 00:38:19 2025 GMT Not After : Jun 16 00:38:19 2025 GMT Subject: CN=68462cfc-a8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ce:f2:df:12:d5:8c:42:6a:9f:48:a6:6f:df: db:f3:be:dd:8f:dd:5d:d0:28:b2:56:4b:29:fc:d3: de:a2:4f:00:d9:b3:89:9f:79:8c:3a:93:a9:95:16: fa:eb:9f:fa:81:38:86:55:40:32:18:c1:42:10:c7: 25:24:82:d1:b2:53:a9:f5:ed:b4:d2:38:68:31:52: 47:a9:f8:6a:d7:76:2f:09:d5:cf:37:d2:59:ae:dd: 06:5d:6d:f8:b2:e6:00:87:11:d0:f1:a3:f0:59:7f: 70:a9:63:df:53:26:89:c1:28:b9:39:9d:53:6b:d5: 54:83:2f:05:e0:fc:0c:e1:7e:7f:80:0e:b8:70:16: fa:9c:b7:1a:25:ae:85:30:27:b0:89:a6:2e:81:df: a9:62:bc:6b:e7:77:81:2b:f5:7a:c8:2c:23:c6:d3: da:72:a7:a2:05:0c:44:ff:af:ae:17:ef:5b:4a:91: 05:0b:06:32:02:38:79:95:73:f2:9a:f8:f2:2f:eb: 3f:af:74:7e:f0:a7:14:8b:bf:e0:6c:a2:fd:87:62: 9b:42:00:85:d6:b7:72:9a:90:22:11:89:51:57:99: b7:e2:89:78:84:5b:ec:85:68:38:25:82:60:49:20: 8d:2c:59:67:0a:00:de:3a:ef:91:45:e0:f0:eb:98: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:72:D0:CE:7D:0D:CC:05:71:D6:99:85:7E:C1:4A:AF:E2:F0:41:12 X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:16:7c:2d:14:13:68:cd:0c:f4:29:f3:e4:ec:21:dc:6f:73: 89:24:36:dd:22:a6:b4:d4:ff:d3:f3:ce:43:ac:26:be:58:db: 6b:6e:07:0c:cb:32:c3:fa:02:c0:86:b0:5d:4a:f9:6c:7d:03: 73:38:51:20:7e:d7:6e:26:41:96:cc:2f:22:77:6b:95:a6:b2: fb:f9:95:d0:b0:0a:53:18:09:95:e1:db:fc:bb:02:bd:38:65: a1:87:01:ba:03:60:93:d9:56:54:07:d6:b2:e9:27:df:c0:d5: 4f:e0:25:1f:a5:f4:9f:c2:c4:91:33:bf:94:42:df:d3:b1:13: ea:86:96:04:29:d1:d7:ad:c0:d2:14:3f:c5:e8:c3:0e:b4:2e: ba:64:bb:9e:19:d9:61:c0:c3:ff:06:68:50:d4:a2:6f:e2:80: 71:35:56:66:1d:b4:38:0a:4b:47:88:fc:d8:a9:7f:7c:85:15: 73:84:4d:83:32:dc:ca:d1:e3:45:fd:14:79:70:ac:b1:59:69: 3a:32:18:69:6c:97:bd:ea:85:76:b4:25:02:41:eb:a9:5d:fd: 62:76:5b:66:fb:c8:e5:7c:1f:ff:33:0e:4a:5a:86:5a:9d:be: 49:8a:e8:5f:f9:85:86:e0:a0:17:d7:56:bd:e9:d5:66:4d:3e: f7:d6:26:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUwNjA5MDAzODE5WhcNMjUwNjE2MDAzODE5WjAYMRYwFAYD VQQDEw02ODQ2MmNmYy1hOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M7y3xLVjEJqn0imb9/b877dj91d0CiyVksp/NPeok8A2bOJn3mMOpOplRb6 65/6gTiGVUAyGMFCEMclJILRslOp9e200jhoMVJHqfhq13YvCdXPN9JZrt0GXW34 suYAhxHQ8aPwWX9wqWPfUyaJwSi5OZ1Ta9VUgy8F4PwM4X5/gA64cBb6nLcaJa6F MCewiaYugd+pYrxr53eBK/V6yCwjxtPacqeiBQxE/6+uF+9bSpEFCwYyAjh5lXPy mvjyL+s/r3R+8KcUi7/gbKL9h2KbQgCF1rdympAiEYlRV5m34ol4hFvshWg4JYJg SSCNLFlnCgDeOu+RReDw65hELwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVy0M59 DcwFcdaZhX7BSq/i8EESMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALFnwtFBNozQz0KfPk7CHcb3OJJDbdIqa01P/T885DrCa+WNtrbgcM yzLD+gLAhrBdSvlsfQNzOFEgftduJkGWzC8id2uVprL7+ZXQsApTGAmV4dv8uwK9 OGWhhwG6A2CT2VZUB9ay6SffwNVP4CUfpfSfwsSRM7+UQt/TsRPqhpYEKdHXrcDS FD/F6MMOtC66ZLueGdlhwMP/BmhQ1KJv4oBxNVZmHbQ4CktHiPzYqX98hRVzhE2D MtzK0eNF/RR5cKyxWWk6MhhpbJe96oV2tCUCQeupXf1idltm+8jlfB//Mw5KWoZa nb5Jiuhf+YWG4KAX11a96dVmTT731iYf -----END CERTIFICATE-----Generated at Mon Jun 9 18:19:03 2025 by rpki-client