$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json) Hash identifier: HbHb8bfJi/zmQZRkv6KjwaRtijRD11SSkrCo1m9FQXg= Subject key identifier: 06:F1:B2:8F:3E:1D:E6:B9:C4:77:06:9A:77:56:44:E8:EF:1E:50:25 Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft Manifest number: 0727 Signing time: Wed 04 Jun 2025 21:43:22 +0000 Manifest this update: Wed 04 Jun 2025 21:43:22 +0000 Manifest next update: Wed 11 Jun 2025 21:43:22 +0000 Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: 9mhkqwKokZJ4NZF7eZ344kbZFwNurq71hoFprtH3aOc=) 2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo=) 3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: 49sLLzSLtNmidSVGS5udGErAMHHN/OeLE93kClICECY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Jun 4 21:43:22 2025 GMT Not After : Jun 11 21:43:22 2025 GMT Subject: CN=6840bdfa-edf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:51:5d:5a:1a:cf:e5:d4:71:9b:4f:72:ad: 01:d3:11:ec:07:fb:fb:62:04:15:ba:87:5c:b9:1a: d8:91:9b:f5:97:d0:3d:0b:f3:60:0c:d0:29:39:fd: 06:80:e5:72:a7:a8:4a:e0:1d:ad:08:78:42:6b:a6: 87:5e:47:e5:2e:06:6b:ad:2b:7a:6a:ed:4b:f1:8a: d6:18:3d:72:a6:62:51:4a:f9:98:4e:fe:8b:d7:24: 53:ce:9e:a3:1b:3e:da:70:5a:ee:fa:8a:69:a7:ef: 84:9a:74:ea:14:91:57:4a:43:08:f3:1f:15:04:f7: f9:45:71:5c:fe:15:0b:97:74:e3:ab:e5:dc:93:3e: 38:b7:b1:52:ee:5f:97:ee:2e:29:98:0b:6b:32:17: 27:e9:86:98:7d:c9:1e:90:a2:fe:67:07:6e:58:a6: 5e:a5:89:09:24:23:dd:d0:d7:7e:2f:a4:76:20:9d: 17:79:ce:85:a5:cd:3e:c6:2f:71:7a:b9:1f:e8:84: 42:ae:7e:54:d9:f8:df:79:1a:d0:9c:fb:57:62:46: 8e:f0:11:bc:3b:12:9c:06:a7:4a:34:4b:1a:84:94: 78:64:09:8b:79:db:09:b1:7c:d5:99:4a:83:97:07: 5e:c2:f6:ad:06:d7:62:d3:37:5f:ec:e7:91:f1:44: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:B2:8F:3E:1D:E6:B9:C4:77:06:9A:77:56:44:E8:EF:1E:50:25 X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:6a:a4:83:28:18:14:75:dc:db:30:c8:3b:ea:7c:37:40: 17:0e:11:16:d0:0c:de:20:b2:f6:ae:bd:c7:ad:92:4d:45:9b: 1b:c5:2b:78:1d:3c:6a:c5:da:7c:13:0c:e4:5f:1c:17:64:45: 1f:66:c4:f3:12:2c:61:09:af:a0:97:9f:63:2d:bc:17:fd:c6: 35:35:48:34:24:16:2b:c1:83:e6:c3:bd:84:12:92:62:3e:1c: f4:a0:a2:cc:05:3b:51:1c:be:88:37:62:c6:04:c4:80:9b:55: 20:d4:c0:ae:db:07:97:8b:a1:10:11:c8:53:f2:bf:83:6f:ef: 25:cf:ab:9d:80:97:e7:15:80:3f:61:02:1f:17:d3:0f:7a:d6: 3a:08:2c:9e:6f:f4:5b:ba:41:6b:bb:1b:f4:13:c8:b0:7d:00: 4c:50:2d:69:7f:79:b7:2c:2d:33:7d:be:d4:3d:eb:b2:e6:f7: fa:7c:ff:f6:0e:a3:76:31:b3:bb:bf:b2:0e:97:67:7b:42:66: d1:37:00:15:26:b4:aa:a8:ce:05:90:e9:02:64:86:9a:24:fc: e7:23:23:70:c7:2e:1b:a1:e2:65:9e:83:2b:4c:e0:12:6f:db: b1:8a:95:54:dc:4e:89:3f:c7:d3:e0:b7:16:d3:6a:84:8b:93: 26:26:ed:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUwNjA0MjE0MzIyWhcNMjUwNjExMjE0MzIyWjAYMRYwFAYD VQQDEw02ODQwYmRmYS1lZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudBRXVoaz+XUcZtPcq0B0xHsB/v7YgQVuodcuRrYkZv1l9A9C/NgDNApOf0G gOVyp6hK4B2tCHhCa6aHXkflLgZrrSt6au1L8YrWGD1ypmJRSvmYTv6L1yRTzp6j Gz7acFru+oppp++EmnTqFJFXSkMI8x8VBPf5RXFc/hULl3Tjq+Xckz44t7FS7l+X 7i4pmAtrMhcn6YaYfckekKL+ZwduWKZepYkJJCPd0Nd+L6R2IJ0Xec6Fpc0+xi9x erkf6IRCrn5U2fjfeRrQnPtXYkaO8BG8OxKcBqdKNEsahJR4ZAmLedsJsXzVmUqD lwdewvatBtdi0zdf7OeR8UTRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbxso8+ Hea5xHcGmndWROjvHlAlMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzIzQy8wOTA3NDRDMjNBM0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVp NDZ5aGgwWTlxWjV6MWFyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASomqkgygYFHXc2zDIO+p8N0AXDhEW0AzeILL2rr3HrZJNRZsbxSt4 HTxqxdp8EwzkXxwXZEUfZsTzEixhCa+gl59jLbwX/cY1NUg0JBYrwYPmw72EEpJi Phz0oKLMBTtRHL6IN2LGBMSAm1Ug1MCu2weXi6EQEchT8r+Db+8lz6udgJfnFYA/ YQIfF9MPetY6CCyeb/RbukFruxv0E8iwfQBMUC1pf3m3LC0zfb7UPeuy5vf6fP/2 DqN2MbO7v7IOl2d7QmbRNwAVJrSqqM4FkOkCZIaaJPznIyNwxy4boeJlnoMrTOAS b9uxipVU3E6JP8fT4LcW02qEi5MmJu2n -----END CERTIFICATE-----Generated at Thu Jun 5 20:11:18 2025 by rpki-client