$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: XZkLdcJu9URcgjUnusCcWoNgM5X/kJv8KdJ8VyYQzwo= Subject key identifier: 48:5D:F9:77:5B:F4:8A:2B:03:35:73:35:CA:37:76:0A:40:CC:44:EE Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1765 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1741 Signing time: Mon 02 Jun 2025 16:47:47 +0000 Manifest this update: Mon 02 Jun 2025 16:47:46 +0000 Manifest next update: Mon 09 Jun 2025 16:47:46 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: S4pQ0uWsS3FTcwk5lN0+MsMDA+5MnazQBf219/5GtNQ=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5989 (0x1765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Jun 2 16:47:46 2025 GMT Not After : Jun 9 16:47:46 2025 GMT Subject: CN=683dd5b2-544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:ad:05:0e:04:0b:0f:f5:0f:3b:d6:28:45: 1e:9e:15:57:38:55:47:f9:fb:af:cc:2b:aa:5f:90: f2:b5:78:22:ac:6f:d5:a3:66:a9:ce:91:6e:2d:45: da:45:30:f8:89:ba:ce:65:9b:76:f1:37:5b:9c:8a: 10:20:e7:be:c0:e9:fb:ce:5c:9c:5d:4d:19:f6:2f: 78:d6:04:23:c2:de:70:03:44:43:08:75:53:b6:ae: 15:9d:53:68:0d:35:96:37:9f:eb:2c:21:56:56:ab: 52:61:3e:0f:df:f0:ee:8a:30:a6:7d:b9:7d:72:02: 10:31:ab:28:7f:f0:cc:e5:1c:a3:cb:50:36:69:01: b4:31:d7:39:b0:22:58:6d:fb:22:dd:08:a5:93:c4: 00:d9:21:c5:d5:cc:1d:b7:d8:71:92:38:90:ac:f8: aa:7a:61:c6:66:b2:3b:fc:4e:a4:fe:ec:b4:0b:d8: f6:64:b2:c0:37:f1:b8:f4:c2:52:ac:28:ee:c5:10: 4b:70:d6:3a:3a:44:8a:47:0b:44:84:dd:33:ef:98: a8:0c:82:bf:5a:3e:f8:39:9c:b7:a4:6e:3b:4a:bc: 9c:b6:3c:ec:cd:91:97:d0:79:ef:e9:4c:07:23:e0: 1e:37:d8:80:31:12:8b:ed:c7:73:30:56:ac:d4:5c: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:F9:77:5B:F4:8A:2B:03:35:73:35:CA:37:76:0A:40:CC:44:EE X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1b:f3:21:ac:9f:77:96:54:fd:24:0a:e3:fa:10:ea:4e:a3: 06:44:9e:b9:dd:c1:d4:83:45:89:08:bf:d6:61:88:d2:fb:58: 4b:3a:49:10:24:d0:c7:47:4d:4f:76:83:a4:10:25:bc:8a:69: d0:9c:89:7b:83:16:e0:b6:3f:cd:67:b0:68:d9:3d:d7:65:d1: 94:4e:89:a9:51:92:8b:a6:2a:28:38:9d:37:ba:af:d3:9e:f7: 04:80:80:39:9c:ae:73:52:d6:58:7a:4a:8d:01:37:b7:08:3e: 6f:49:d1:f8:2c:bb:0c:a7:d8:0d:55:68:a8:ce:be:39:cf:0a: c6:78:f1:85:be:5c:76:9e:29:ac:2f:2a:65:c0:5c:98:f8:0d: 2f:ed:43:8f:e6:c4:ae:8a:d7:28:04:e3:89:ea:b0:9f:6f:30: 2e:ad:7e:d1:cc:31:8f:56:6a:2c:15:ee:1c:75:59:d9:04:20: d3:22:5e:58:45:9d:77:d6:59:31:14:e5:21:29:79:c5:13:eb: 02:9d:7a:78:82:75:06:28:c8:14:e1:e6:a8:3a:b2:ce:ac:44: 0d:b7:c9:a8:48:81:13:e6:8d:9d:d2:b6:03:13:93:c8:cd:96: 1a:90:2d:41:f2:ad:2b:68:99:f2:9b:44:29:16:2b:41:f4:54: 28:14:6d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwNjAyMTY0NzQ2WhcNMjUwNjA5MTY0NzQ2WjAYMRYwFAYD VQQDEw02ODNkZDViMi01NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaCtBQ4ECw/1DzvWKEUenhVXOFVH+fuvzCuqX5DytXgirG/Vo2apzpFuLUXa RTD4ibrOZZt28TdbnIoQIOe+wOn7zlycXU0Z9i941gQjwt5wA0RDCHVTtq4VnVNo DTWWN5/rLCFWVqtSYT4P3/DuijCmfbl9cgIQMasof/DM5Ryjy1A2aQG0Mdc5sCJY bfsi3Qilk8QA2SHF1cwdt9hxkjiQrPiqemHGZrI7/E6k/uy0C9j2ZLLAN/G49MJS rCjuxRBLcNY6OkSKRwtEhN0z75ioDIK/Wj74OZy3pG47SryctjzszZGX0Hnv6UwH I+AeN9iAMRKL7cdzMFas1FyEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhd+Xdb 9IorAzVzNco3dgpAzETuMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJG/MhrJ93llT9JArj+hDqTqMGRJ653cHUg0WJCL/WYYjS+1hLOkkQ JNDHR01PdoOkECW8imnQnIl7gxbgtj/NZ7Bo2T3XZdGUTompUZKLpiooOJ03uq/T nvcEgIA5nK5zUtZYekqNATe3CD5vSdH4LLsMp9gNVWiozr45zwrGePGFvlx2nims LyplwFyY+A0v7UOP5sSuitcoBOOJ6rCfbzAurX7RzDGPVmosFe4cdVnZBCDTIl5Y RZ131lkxFOUhKXnFE+sCnXp4gnUGKMgU4eaoOrLOrEQNt8moSIET5o2d0rYDE5PI zZYakC1B8q0raJnym0QpFitB9FQoFG3T -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:50 2025 by rpki-client