$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: u96HwyMcSaXbXDCeN1PONCXYqYg4tjdycMSvByaFkAY= Subject key identifier: 35:22:9E:0F:77:D0:BB:03:31:73:5B:34:9F:0B:42:8C:D5:09:84:14 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0DF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0E39 Signing time: Mon 02 Jun 2025 18:02:17 +0000 Manifest this update: Mon 02 Jun 2025 18:02:16 +0000 Manifest next update: Mon 09 Jun 2025 18:02:16 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: nbxOiLbK0unk6fGSlExsiA1UmIC2RKxBuyCsGdW4IyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Jun 2 18:02:16 2025 GMT Not After : Jun 9 18:02:16 2025 GMT Subject: CN=683de728-8e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:97:41:00:f1:2a:6d:15:0d:cc:59:7d:a3: ed:35:09:40:3a:fd:12:30:1a:a5:6c:31:6a:b1:0c: f0:4f:5e:fc:df:06:60:08:4a:24:40:62:5d:ce:fc: c9:ec:e0:2a:b9:8e:98:08:b3:6a:ee:3e:b4:1d:6f: 11:c9:42:96:cb:19:0c:ab:07:17:e1:2a:50:ff:6e: aa:3e:5a:a9:f2:32:74:ea:4d:26:38:f2:6e:91:52: 8f:ce:f8:25:7a:47:ce:82:27:43:be:03:0e:b9:49: 56:6c:55:b6:e5:12:e8:d2:52:ae:6a:34:14:f1:94: 8a:2c:16:4b:ab:70:db:5f:fe:9c:27:cf:5a:53:c2: 08:71:fe:44:cd:33:c0:3f:6c:c0:72:e4:3f:55:26: 42:31:eb:f3:05:cd:3a:6a:eb:20:73:a4:11:c9:e1: 03:2a:80:d4:44:57:4a:25:49:5d:4b:78:31:f0:be: 6d:99:85:84:11:1f:68:a1:88:70:14:ed:52:bc:25: ed:7d:f8:bf:2f:38:66:56:7d:a2:1e:d3:2f:ce:08: eb:1c:6d:27:00:fe:c8:9c:d5:34:31:84:f3:65:71: 43:e3:6e:bf:d9:bd:4e:a5:10:6f:f2:5a:4c:bb:0d: 5e:c9:8e:dc:c7:c3:52:b8:b3:39:e9:b1:ba:e5:c0: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:9E:0F:77:D0:BB:03:31:73:5B:34:9F:0B:42:8C:D5:09:84:14 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:cd:fa:79:91:a8:08:1f:60:cf:80:f5:93:d4:53:ef:cf: d7:4b:dc:71:2d:44:fc:f1:9e:57:3e:67:4c:05:e3:29:74:97: 6e:bf:38:e6:21:f5:19:5b:53:2a:7f:83:bc:d6:ad:e0:38:ef: 25:e7:b6:df:23:e6:06:00:ff:6f:12:36:4f:97:0c:34:b2:cd: f2:6e:0a:04:77:dd:9e:fa:7b:c7:05:d1:0c:ad:1e:2a:14:d9: a4:cf:f8:b2:21:a6:8c:81:8e:58:70:9d:f0:5e:5a:80:86:81: 53:0e:19:b5:67:55:4f:6b:6c:90:a3:f2:38:3b:45:af:c6:d9: 6d:aa:dc:20:c4:34:38:b4:5c:ca:4f:fc:4d:14:e4:6d:e9:ed: af:6c:87:9c:6d:85:8c:78:51:bd:90:3e:6b:fb:ff:44:e0:7c: 7f:45:e3:f2:69:dd:ac:05:1b:b0:dc:26:93:ac:5e:38:23:cc: e9:cb:12:54:57:67:0e:36:6d:ec:c4:c7:2c:dd:4a:12:d0:ad: 7d:f4:7f:69:21:93:a5:50:95:d5:87:b8:32:28:49:b9:52:fd: 72:db:81:64:02:58:c9:69:96:75:1d:1c:df:63:be:44:c0:fe: 02:51:82:bb:0d:24:81:47:86:8b:15:ea:4e:42:40:6f:a1:02: 78:3c:19:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjUwNjAyMTgwMjE2WhcNMjUwNjA5MTgwMjE2WjAYMRYwFAYD VQQDEw02ODNkZTcyOC04ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOuXQQDxKm0VDcxZfaPtNQlAOv0SMBqlbDFqsQzwT1783wZgCEokQGJdzvzJ 7OAquY6YCLNq7j60HW8RyUKWyxkMqwcX4SpQ/26qPlqp8jJ06k0mOPJukVKPzvgl ekfOgidDvgMOuUlWbFW25RLo0lKuajQU8ZSKLBZLq3DbX/6cJ89aU8IIcf5EzTPA P2zAcuQ/VSZCMevzBc06ausgc6QRyeEDKoDURFdKJUldS3gx8L5tmYWEER9ooYhw FO1SvCXtffi/LzhmVn2iHtMvzgjrHG0nAP7InNU0MYTzZXFD426/2b1OpRBv8lpM uw1eyY7cx8NSuLM56bG65cBYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUing93 0LsDMXNbNJ8LQozVCYQUMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeac36eZGoCB9gz4D1k9RT78/XS9xxLUT88Z5XPmdMBeMpdJduvzjm IfUZW1Mqf4O81q3gOO8l57bfI+YGAP9vEjZPlww0ss3ybgoEd92e+nvHBdEMrR4q FNmkz/iyIaaMgY5YcJ3wXlqAhoFTDhm1Z1VPa2yQo/I4O0WvxtltqtwgxDQ4tFzK T/xNFORt6e2vbIecbYWMeFG9kD5r+/9E4Hx/RePyad2sBRuw3CaTrF44I8zpyxJU V2cONm3sxMcs3UoS0K199H9pIZOlUJXVh7gyKEm5Uv1y24FkAljJaZZ1HRzfY75E wP4CUYK7DSSBR4aLFepOQkBvoQJ4PBl/ -----END CERTIFICATE-----Generated at Tue Jun 3 23:54:42 2025 by rpki-client