$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: YwtUV/RlM1zhpckQBskEABJtrdBrQXfmk4pJilydsv4= Subject key identifier: D4:08:66:61:C3:02:AC:48:27:38:C1:BE:31:DB:49:AE:E7:32:C2:34 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01C7 Signing time: Thu 05 Jun 2025 02:21:54 +0000 Manifest this update: Thu 05 Jun 2025 02:21:54 +0000 Manifest next update: Thu 12 Jun 2025 02:21:54 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: Qw/7vnP+u2HKfN7mUelQXYqs21ohDkolvqLhSiz+j3o=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Jun 5 02:21:54 2025 GMT Not After : Jun 12 02:21:54 2025 GMT Subject: CN=6840ff42-e67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:9e:f8:9e:96:17:b1:75:61:ef:02:ff:6d: de:3e:e9:48:51:e8:ea:d2:c2:bd:1f:b7:45:7d:73: 1a:1c:14:4d:45:cd:82:ec:9d:c5:2e:7e:1a:40:35: 8e:e8:c3:43:51:c1:e7:64:ea:41:19:1b:05:e5:df: 1a:ac:3b:bd:35:ea:f0:e0:ac:c9:a4:c0:6e:b8:b7: 0b:d5:4a:79:45:16:30:70:b9:25:3e:ac:9b:87:80: 9a:95:8d:1f:39:f2:dc:d8:95:0d:32:43:80:47:fc: 71:8a:39:3f:d3:27:a1:23:74:7e:92:8a:5d:d0:7a: 00:8c:f4:03:06:fd:7f:52:26:47:b1:de:f1:10:3f: 8e:95:9e:ba:b9:59:12:75:5f:3d:b1:c1:79:ac:8d: 51:96:c8:b8:76:91:73:84:af:56:72:ae:34:78:6e: 41:4f:f7:4a:ee:7b:eb:8a:bf:9f:35:ee:ef:1a:cb: d2:c0:7f:e3:da:d5:a5:27:d5:f0:4d:f6:12:a5:1f: 05:ce:74:34:8e:10:a4:4e:39:b5:f2:6c:e6:8e:be: 37:1b:65:94:a7:09:24:3e:4e:51:64:7a:cf:6a:93: b4:4a:2d:85:79:9f:10:73:b5:21:59:fe:f7:1d:f8: 86:a1:7c:37:a3:1d:8a:6d:17:37:76:63:93:7f:33: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:08:66:61:C3:02:AC:48:27:38:C1:BE:31:DB:49:AE:E7:32:C2:34 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5a:a5:f3:6a:9d:44:22:90:ea:c2:79:8c:78:9a:e9:69:af: f0:7a:35:a5:88:a8:a1:eb:44:6c:41:14:6d:33:12:33:36:a5: 99:66:f5:82:d4:65:10:92:cf:8d:cc:7e:a5:9b:dd:a8:93:b7: 96:fd:b9:4f:fb:34:d8:32:d6:1b:04:53:ac:7a:02:0d:8d:dd: 96:b4:eb:ef:f6:5f:5c:2b:d4:7c:58:fd:be:e2:c1:76:20:55: bb:d2:9c:61:7a:20:76:be:a8:37:42:b7:7b:fd:5c:8c:7b:24: 7b:49:a1:29:4f:00:82:80:ae:71:ad:3b:72:8c:86:55:65:98: 90:de:bb:f5:71:5e:8e:1a:90:c6:3a:67:39:b6:31:e2:2b:ed: f3:34:84:06:3e:f4:26:19:cc:44:d6:ed:2d:8a:32:93:3d:ec: 0b:2c:1f:71:36:62:c6:7a:24:c2:fe:a5:10:95:a4:d9:ee:2e: a6:79:a9:32:9d:e8:e7:8c:0f:49:9b:c5:8a:a3:ef:8f:a6:64: f0:f7:3f:d0:71:0f:11:88:53:9c:6e:52:c1:43:82:f0:3f:65: 16:35:7a:77:43:1b:8b:a0:4a:5a:97:2a:93:49:80:f5:8a:60: 43:4f:5c:d7:41:da:6f:8e:3f:27:39:ca:22:c9:6f:cf:92:6d: 1a:a2:e4:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwNjA1MDIyMTU0WhcNMjUwNjEyMDIyMTU0WjAYMRYwFAYD VQQDEw02ODQwZmY0Mi1lNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM2e+J6WF7F1Ye8C/23ePulIUejq0sK9H7dFfXMaHBRNRc2C7J3FLn4aQDWO 6MNDUcHnZOpBGRsF5d8arDu9Nerw4KzJpMBuuLcL1Up5RRYwcLklPqybh4CalY0f OfLc2JUNMkOAR/xxijk/0yehI3R+kopd0HoAjPQDBv1/UiZHsd7xED+OlZ66uVkS dV89scF5rI1Rlsi4dpFzhK9Wcq40eG5BT/dK7nvrir+fNe7vGsvSwH/j2tWlJ9Xw TfYSpR8FznQ0jhCkTjm18mzmjr43G2WUpwkkPk5RZHrPapO0Si2FeZ8Qc7UhWf73 HfiGoXw3ox2KbRc3dmOTfzOETwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQIZmHD AqxIJzjBvjHbSa7nMsI0MB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEWqXzap1EIpDqwnmMeJrpaa/wejWliKih60RsQRRtMxIzNqWZZvWC 1GUQks+NzH6lm92ok7eW/blP+zTYMtYbBFOsegINjd2WtOvv9l9cK9R8WP2+4sF2 IFW70pxheiB2vqg3Qrd7/VyMeyR7SaEpTwCCgK5xrTtyjIZVZZiQ3rv1cV6OGpDG Omc5tjHiK+3zNIQGPvQmGcxE1u0tijKTPewLLB9xNmLGeiTC/qUQlaTZ7i6meaky nejnjA9Jm8WKo++PpmTw9z/QcQ8RiFOcblLBQ4LwP2UWNXp3QxuLoEpalyqTSYD1 imBDT1zXQdpvjj8nOcoiyW/Pkm0aouQA -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:20 2025 by rpki-client