$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: 6oJnh75x2wqG8wC2GWBJ8yG3dJCGeD8OUgH7dzx23gw= Subject key identifier: D4:B3:A4:66:80:53:19:CE:B3:F4:10:44:A8:DB:57:1C:8E:F4:0B:6E Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 0475 Signing time: Sat 31 May 2025 00:17:41 +0000 Manifest this update: Sat 31 May 2025 00:17:41 +0000 Manifest next update: Sat 07 Jun 2025 00:17:41 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: 1JJfx3i3jzp19zFTW2bP/ReVn8OHmizEGmQ5QvVajZk=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: May 31 00:17:41 2025 GMT Not After : Jun 7 00:17:41 2025 GMT Subject: CN=683a4aa5-8cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:a9:b6:53:01:9d:48:e1:be:f4:84:1b:00: 6b:1c:7c:24:f7:c5:a9:9e:25:50:95:46:12:77:dc: f8:b7:a8:bb:4b:45:56:da:70:f1:5d:a8:83:c7:3a: 25:c2:7a:c7:2d:48:ed:a2:ec:e1:d1:61:5b:30:2f: 4d:ec:4f:b6:7d:94:55:e1:3b:47:39:cd:32:4b:e7: 76:40:9a:28:e1:bb:e9:50:56:62:29:fc:87:9e:c0: 93:9c:b4:1f:80:14:f7:3e:43:8b:3c:97:b6:7e:ea: 45:93:02:d4:9a:ec:4c:78:13:e5:b1:1b:b8:b5:4f: de:a1:74:80:d2:dc:ed:d5:30:3f:e8:33:a7:61:0c: 75:a1:af:10:45:67:ed:73:0f:4c:86:0b:61:e4:b0: ad:3a:3d:67:48:5f:94:f7:87:55:ca:8d:20:6f:87: d0:00:3b:c7:09:30:6c:c0:8b:ea:6d:80:f7:7d:e2: e5:fc:c6:47:2b:0c:35:8d:2f:ba:4e:25:69:52:93: 8d:01:98:c1:41:fd:ef:72:89:a9:2b:26:00:2e:1d: 88:7c:8b:ce:10:bf:2f:6c:21:56:7d:0e:30:59:fd: 4c:43:a9:67:11:e8:27:38:ae:ed:00:d1:5e:05:2f: 12:80:41:e8:8a:b3:38:af:4f:a3:2c:bd:7b:3d:41: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:A4:66:80:53:19:CE:B3:F4:10:44:A8:DB:57:1C:8E:F4:0B:6E X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:79:3b:a8:e2:5a:e2:6b:ee:45:04:4a:ac:28:f6:09:08:0b: 5b:1e:51:8d:91:8a:e6:de:41:e6:e5:2d:98:db:bb:42:27:05: 1b:fb:3a:1d:bd:9a:e9:f2:15:b2:70:e9:68:48:5e:32:fd:e0: 7e:e6:c2:08:55:6c:7e:5c:70:3d:59:f5:07:79:1e:6b:87:d3: 6d:9c:90:41:1f:18:a2:07:eb:73:83:bf:dc:0d:f4:64:33:7f: 80:d4:98:89:fb:48:96:3d:e8:d6:3d:87:ca:cb:19:f0:9f:9f: b9:70:f7:23:8d:71:38:47:40:2d:9f:45:40:14:c9:01:65:96: 07:3a:c3:51:1b:97:cc:cb:8d:31:b3:aa:ab:51:e1:c7:f4:5f: 3f:5a:b7:99:15:ec:11:10:c9:25:c4:17:33:e2:10:e7:2a:6b: 87:0f:87:2d:47:8e:81:47:35:45:db:bf:df:21:88:28:00:fc: 64:db:90:bd:00:3b:d4:21:66:46:cb:17:68:fa:22:dd:59:43: 3d:4b:a7:f3:e7:6d:d5:d4:8b:29:cc:9b:d9:9d:38:9a:09:5b: ac:33:c2:dd:dd:dc:b5:72:46:4a:da:ba:50:92:51:ea:84:87: 4b:97:f1:f8:34:85:e3:45:e8:64:07:bb:9a:1e:50:0d:3e:0d: 6d:52:f4:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUwNTMxMDAxNzQxWhcNMjUwNjA3MDAxNzQxWjAYMRYwFAYD VQQDEw02ODNhNGFhNS04Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuSptlMBnUjhvvSEGwBrHHwk98WpniVQlUYSd9z4t6i7S0VW2nDxXaiDxzol wnrHLUjtouzh0WFbMC9N7E+2fZRV4TtHOc0yS+d2QJoo4bvpUFZiKfyHnsCTnLQf gBT3PkOLPJe2fupFkwLUmuxMeBPlsRu4tU/eoXSA0tzt1TA/6DOnYQx1oa8QRWft cw9Mhgth5LCtOj1nSF+U94dVyo0gb4fQADvHCTBswIvqbYD3feLl/MZHKww1jS+6 TiVpUpONAZjBQf3vcompKyYALh2IfIvOEL8vbCFWfQ4wWf1MQ6lnEegnOK7tANFe BS8SgEHoirM4r0+jLL17PUFXUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSzpGaA UxnOs/QQRKjbVxyO9AtuMB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/eTuo4lria+5FBEqsKPYJCAtbHlGNkYrm3kHm5S2Y27tCJwUb+zod vZrp8hWycOloSF4y/eB+5sIIVWx+XHA9WfUHeR5rh9NtnJBBHxiiB+tzg7/cDfRk M3+A1JiJ+0iWPejWPYfKyxnwn5+5cPcjjXE4R0Atn0VAFMkBZZYHOsNRG5fMy40x s6qrUeHH9F8/WreZFewREMklxBcz4hDnKmuHD4ctR46BRzVF27/fIYgoAPxk25C9 ADvUIWZGyxdo+iLdWUM9S6fz523V1IspzJvZnTiaCVusM8Ld3dy1ckZK2rpQklHq hIdLl/H4NIXjRehkB7uaHlANPg1tUvRz -----END CERTIFICATE-----Generated at Sat May 31 17:26:10 2025 by rpki-client