$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: NBKHZLh84VsaGNr7TwH/KQX99KOFDt+96MHFvWUVN14= Subject key identifier: 44:03:AE:D2:15:AB:DA:78:51:E2:01:06:D4:81:CB:00:3B:BD:09:AD Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0544 Signing time: Fri 30 May 2025 23:39:29 +0000 Manifest this update: Fri 30 May 2025 23:39:29 +0000 Manifest next update: Fri 06 Jun 2025 23:39:29 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: xoDsJfPiNw5jANW4IjauhdHd0W1sUZ0UkGkDc0WMyKk=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: N3l8NbXI6PWZv8XLkMHP80swkTXCmSPPyHudla60h0Y=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: +s3RfgfZleOkFSX6tECNHJYojBeQ3ve3IeKnyvn0+N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: May 30 23:39:29 2025 GMT Not After : Jun 6 23:39:29 2025 GMT Subject: CN=683a41b1-36ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:b9:7d:ba:7a:0f:1d:43:0a:5e:6c:00:1e: bd:d3:8b:0c:09:46:72:8d:64:ab:11:80:e4:61:6e: 63:c9:06:d3:55:1d:41:cd:5e:82:d6:53:95:a9:b0: 47:e3:48:af:69:87:67:92:42:ea:77:80:7f:3e:21: 23:99:17:54:eb:41:9f:eb:3d:11:b9:59:42:52:25: 60:42:ef:bd:e3:39:fa:db:9c:d6:a6:63:49:98:91: 3d:ef:ca:00:1c:a2:0d:90:6b:66:ad:a0:b3:59:0d: 72:ca:d3:6f:4c:5a:a1:a6:af:29:d0:3e:b9:3e:60: 49:30:eb:7c:4b:70:f0:5a:e6:a2:b8:d5:ae:98:db: 93:14:f3:37:f8:83:4b:a9:27:59:02:95:5d:b7:d2: 0a:97:c6:b9:b1:b4:25:3c:d3:f5:d7:d0:5b:27:8f: c6:e6:9f:fb:0b:f5:7e:e7:22:ec:00:ec:05:0b:66: b7:97:9a:94:50:f5:d4:ca:3f:45:7b:74:6a:bd:d5: 75:ff:57:6a:a7:22:91:7c:dc:be:47:74:44:06:ad: 3d:e9:34:23:20:c3:3a:cb:21:d9:6d:42:11:10:12: b8:c6:3f:c9:3e:61:32:42:3f:ac:8b:a1:3a:15:c0: 69:cb:ee:6c:f6:e6:bc:40:9d:ef:4d:09:1d:da:e5: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:AE:D2:15:AB:DA:78:51:E2:01:06:D4:81:CB:00:3B:BD:09:AD X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:0b:0f:13:33:35:a8:26:6e:25:f0:f7:dd:8a:bb:9e:0a: 1b:71:5c:c5:af:d1:63:bb:eb:aa:42:8d:9e:ef:0a:b6:54:94: f6:7c:b3:0e:26:a6:a0:18:bb:d1:7c:fe:d7:1f:d8:63:3b:f7: 96:a5:08:93:a5:33:38:32:d8:a7:b6:6d:97:32:e1:bd:97:bc: b1:a7:38:54:ab:c7:c8:70:40:8d:35:e7:70:26:f9:e7:ce:a9: 14:36:f7:d0:66:be:16:eb:73:86:c5:cf:ee:a7:92:b1:c0:0c: a5:20:aa:24:66:40:8d:7d:33:18:24:23:ae:73:9c:a9:eb:f4: 5b:ff:56:64:5e:b9:e5:75:64:c2:62:c9:4d:04:ca:79:76:0c: d2:6a:79:0c:4d:b8:27:22:aa:d9:36:2d:84:20:17:83:c3:6c: 1b:29:10:41:cd:a2:79:02:6f:e8:6f:07:e8:f2:ae:8e:04:8e: 61:da:9a:61:01:74:57:15:a4:b3:45:7a:af:bc:0d:d1:83:58: fe:e1:2a:f6:b0:89:56:c6:49:eb:a2:3b:c6:5e:8b:b5:47:8c: 13:0d:eb:96:8c:64:73:41:69:e0:a1:3c:4c:10:2f:db:09:13: ea:8c:6e:ee:8a:a6:38:5c:89:74:eb:e3:de:dc:97:34:a1:89: d6:21:cd:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUwNTMwMjMzOTI5WhcNMjUwNjA2MjMzOTI5WjAYMRYwFAYD VQQDEw02ODNhNDFiMS0zNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv765fbp6Dx1DCl5sAB6904sMCUZyjWSrEYDkYW5jyQbTVR1BzV6C1lOVqbBH 40ivaYdnkkLqd4B/PiEjmRdU60Gf6z0RuVlCUiVgQu+94zn625zWpmNJmJE978oA HKINkGtmraCzWQ1yytNvTFqhpq8p0D65PmBJMOt8S3DwWuaiuNWumNuTFPM3+INL qSdZApVdt9IKl8a5sbQlPNP119BbJ4/G5p/7C/V+5yLsAOwFC2a3l5qUUPXUyj9F e3RqvdV1/1dqpyKRfNy+R3REBq096TQjIMM6yyHZbUIREBK4xj/JPmEyQj+si6E6 FcBpy+5s9ua8QJ3vTQkd2uWgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQDrtIV q9p4UeIBBtSBywA7vQmtMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tgsPEzM1qCZuJfD33Yq7ngobcVzFr9Fju+uqQo2e7wq2VJT2fLMO JqagGLvRfP7XH9hjO/eWpQiTpTM4Mtintm2XMuG9l7yxpzhUq8fIcECNNedwJvnn zqkUNvfQZr4W63OGxc/up5KxwAylIKokZkCNfTMYJCOuc5yp6/Rb/1ZkXrnldWTC YslNBMp5dgzSankMTbgnIqrZNi2EIBeDw2wbKRBBzaJ5Am/obwfo8q6OBI5h2pph AXRXFaSzRXqvvA3Rg1j+4Sr2sIlWxknrojvGXou1R4wTDeuWjGRzQWngoTxMEC/b CRPqjG7uiqY4XIl06+Pe3Jc0oYnWIc2H -----END CERTIFICATE-----Generated at Sat May 31 16:45:42 2025 by rpki-client