$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: f1W3lLdO1Ikbz7GDoL9DrGEDFrSYSbf0PWGT4VY4o9g= Subject key identifier: 0B:E7:49:9D:BC:B8:CA:F6:3D:6C:32:26:09:1F:D8:33:8B:55:57:66 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 1273 Signing time: Fri 30 May 2025 20:16:13 +0000 Manifest this update: Fri 30 May 2025 20:16:13 +0000 Manifest next update: Fri 06 Jun 2025 20:16:13 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: /KMbkgTxDK7ISa8uTevBaACx3vP7kWcCzOmmal4rd1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: May 30 20:16:13 2025 GMT Not After : Jun 6 20:16:13 2025 GMT Subject: CN=683a120d-6bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:ff:42:48:5c:26:af:b1:33:64:4c:be:19: c1:00:93:26:ec:3a:92:20:f4:79:c3:67:d1:93:91: b0:f4:da:1a:25:34:a7:4a:b3:f4:30:d3:98:9f:02: 3b:5f:c6:fa:6b:50:b7:0d:f3:0b:69:8a:0d:ab:3e: 3e:fa:3c:f8:16:cd:4e:9e:7c:8e:83:76:8a:5a:b6: 35:2c:a6:02:9c:60:4a:6a:0f:b5:b1:60:d8:fe:47: 8b:49:a6:a3:fb:c0:7b:ba:b7:da:f9:4a:1b:c5:63: 7d:82:20:87:68:ec:97:76:c5:a7:77:da:ec:d2:47: a4:33:60:29:e1:ab:ed:a5:f8:c1:9c:5a:47:0b:b4: ca:62:21:c9:b6:82:0c:d2:bd:39:70:86:45:7a:9f: 72:c2:1b:01:90:af:8e:af:2e:e4:a0:52:56:db:c5: 9f:71:20:21:af:97:4c:53:7d:a5:8c:83:a5:f1:d5: 22:38:b5:21:93:f6:27:ba:d3:05:d1:a3:cb:03:c2: 41:06:42:a1:16:bf:2a:d4:9f:8f:07:18:f7:6d:19: 03:82:86:f5:13:e8:cf:b8:19:27:0f:83:8b:10:22: 8b:3c:ee:1c:08:c2:28:97:15:83:a9:e3:9e:c3:6f: fe:5b:c3:dd:ec:fe:66:01:a8:00:a6:4a:7d:8c:46: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:49:9D:BC:B8:CA:F6:3D:6C:32:26:09:1F:D8:33:8B:55:57:66 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:97:b9:6b:c3:f1:9f:99:10:89:e1:5c:7e:49:52:47:7e: 00:02:3b:8f:0e:30:a2:b7:14:c7:c1:d7:e2:d3:4a:af:7d:68: 0f:74:5f:22:d7:86:80:9b:b2:6b:81:0d:88:bc:2a:26:cc:8e: 75:38:93:62:e1:49:a0:67:27:b3:9f:15:52:05:29:f5:83:39: 8e:4c:06:8b:ea:70:e7:77:7d:1e:ca:84:68:3b:86:e1:21:74: 90:46:8c:b2:b0:e9:e4:8e:9c:34:31:0d:34:04:d7:71:b5:6f: de:b1:6d:9f:05:fd:b0:f7:a0:68:a5:85:6e:8e:30:d8:45:fd: 4f:3a:d9:fc:cd:4d:71:bc:d3:dd:39:25:5e:b1:8c:46:68:ad: 40:b8:6d:36:62:ec:ad:30:2c:0c:16:3f:a6:2e:6e:42:f7:b5: 8f:ae:05:19:31:92:5d:2d:20:63:9b:ef:2d:6f:72:53:e9:3a: 57:07:78:62:b1:3c:cb:2d:19:ed:e0:4c:bf:77:04:b8:28:56: 40:3a:e5:11:e2:2e:fa:1c:8e:a2:e8:3a:fd:cd:a4:ac:25:53: 68:f9:66:f5:13:8e:55:c7:3a:07:df:4b:e8:85:87:d8:9a:cf: c1:09:29:26:2e:1c:22:3a:7b:54:98:90:23:61:ce:43:ce:8d: 70:7e:18:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwNTMwMjAxNjEzWhcNMjUwNjA2MjAxNjEzWjAYMRYwFAYD VQQDEw02ODNhMTIwZC02YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteL/QkhcJq+xM2RMvhnBAJMm7DqSIPR5w2fRk5Gw9NoaJTSnSrP0MNOYnwI7 X8b6a1C3DfMLaYoNqz4++jz4Fs1OnnyOg3aKWrY1LKYCnGBKag+1sWDY/keLSaaj +8B7urfa+UobxWN9giCHaOyXdsWnd9rs0kekM2Ap4avtpfjBnFpHC7TKYiHJtoIM 0r05cIZFep9ywhsBkK+Ory7koFJW28WfcSAhr5dMU32ljIOl8dUiOLUhk/YnutMF 0aPLA8JBBkKhFr8q1J+PBxj3bRkDgob1E+jPuBknD4OLECKLPO4cCMIolxWDqeOe w2/+W8Pd7P5mAagApkp9jEaB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvnSZ28 uMr2PWwyJgkf2DOLVVdmMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMZe5a8Pxn5kQieFcfklSR34AAjuPDjCitxTHwdfi00qvfWgPdF8i 14aAm7JrgQ2IvComzI51OJNi4UmgZyeznxVSBSn1gzmOTAaL6nDnd30eyoRoO4bh IXSQRoyysOnkjpw0MQ00BNdxtW/esW2fBf2w96BopYVujjDYRf1POtn8zU1xvNPd OSVesYxGaK1AuG02YuytMCwMFj+mLm5C97WPrgUZMZJdLSBjm+8tb3JT6TpXB3hi sTzLLRnt4Ey/dwS4KFZAOuUR4i76HI6i6Dr9zaSsJVNo+Wb1E45VxzoH30vohYfY ms/BCSkmLhwiOntUmJAjYc5Dzo1wfhgU -----END CERTIFICATE-----Generated at Sat May 31 17:07:40 2025 by rpki-client