$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json) Hash identifier: +D8hoVhDIsX+HJRlD2LNTPlNt5maXsWhY4dvIUwpfdk= Subject key identifier: 43:90:09:03:98:C5:4E:E4:57:65:7C:F4:CE:D2:F7:29:E3:44:BC:F5 Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft Manifest number: 3495 Signing time: Sat 28 Jun 2025 14:53:09 +0000 Manifest this update: Sat 28 Jun 2025 14:53:08 +0000 Manifest next update: Sat 05 Jul 2025 14:53:08 +0000 Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: DiSExRQPCZCiLqiXuEsCUKRJ9fb7qerQoC7nAbaCtgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Validity Not Before: Jun 28 14:53:08 2025 GMT Not After : Jul 5 14:53:08 2025 GMT Subject: CN=686001d4-c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:b5:ad:07:5c:90:3d:3d:6e:2d:58:2e:ee: 9c:7d:d4:1a:ca:21:08:7e:02:78:d3:e4:88:0f:36: af:d2:18:95:18:93:58:b5:97:74:63:4d:82:90:48: 56:5f:96:6e:c6:37:36:a4:08:a6:04:88:bf:bf:1a: 8d:7a:43:51:db:34:a8:eb:85:ac:ba:45:a5:9d:a6: 82:0f:e3:61:58:c5:18:6f:48:63:f0:77:dd:6a:6f: e6:5a:1f:52:58:2f:66:3d:05:86:78:58:3a:71:14: bc:52:ce:98:0e:2f:24:ea:c8:6f:68:fc:f7:72:9f: 26:fa:80:28:59:68:cf:b6:34:45:de:17:97:53:17: 80:80:6a:24:46:88:71:54:ba:e8:d6:11:17:ff:f0: 88:56:53:07:2f:f4:5c:62:f3:de:d6:e3:f9:36:6f: b0:97:b8:f6:11:23:dd:f7:ca:54:b8:f1:c9:ed:17: 3f:86:c1:5c:c2:84:69:7d:c0:d7:7a:71:6d:61:5a: 49:7a:8e:b1:9f:d4:90:25:0c:b9:95:a5:66:e4:26: 4a:43:f0:55:d1:d0:ab:22:13:9a:42:4c:79:7b:69: 64:80:e3:29:4c:a5:d8:75:93:65:4f:2c:16:aa:84: d5:ac:8a:17:52:6b:82:cd:1e:6a:cf:63:50:28:27: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:09:03:98:C5:4E:E4:57:65:7C:F4:CE:D2:F7:29:E3:44:BC:F5 X509v3 Authority Key Identifier: keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2a:77:b2:6f:ca:07:b3:10:f4:ed:01:18:de:a1:a9:c1:f8: 5b:b4:ee:24:b1:d1:ad:ce:36:7d:ad:8b:f1:ce:93:93:25:00: 3e:16:dd:2c:14:9f:14:06:c1:d3:58:10:8d:ca:78:5f:d0:68: 57:41:e4:7a:23:5a:77:c2:09:85:37:3f:95:d5:8c:de:3d:13: 10:cd:a9:15:41:b7:e8:1d:3c:a7:0b:00:87:30:11:58:f3:c0: e2:6e:f8:e5:ec:3d:6a:5c:9a:32:f6:62:11:54:66:64:34:8f: ca:04:db:f8:a5:42:f7:a8:95:27:c4:4c:78:22:43:c0:10:8f: 79:c3:1d:ec:f8:08:bf:7d:2a:ad:74:a0:8e:d9:c3:33:fe:8f: 19:e4:96:94:3b:03:28:4e:ee:c0:e7:b9:ef:5e:9e:7c:49:d8: 26:cc:b4:a3:5d:c7:65:74:aa:90:9a:ba:7e:1f:3f:d4:9d:85: 4e:7f:de:68:10:70:b3:e6:ed:58:2a:59:78:61:55:e5:81:53: af:db:96:93:94:a2:ca:4a:e4:78:11:3f:de:d4:57:f5:ba:fb: 66:77:8a:92:59:a2:db:8a:d4:35:8b:c9:a7:86:66:25:8e:27: d6:e8:76:07:e5:a5:ca:53:03:48:9c:c6:74:b6:75:44:ae:dc: a2:3f:0f:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5 MkQ5RTZFQzMwHhcNMjUwNjI4MTQ1MzA4WhcNMjUwNzA1MTQ1MzA4WjAYMRYwFAYD VQQDEw02ODYwMDFkNC1jM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWm1rQdckD09bi1YLu6cfdQayiEIfgJ40+SIDzav0hiVGJNYtZd0Y02CkEhW X5Zuxjc2pAimBIi/vxqNekNR2zSo64WsukWlnaaCD+NhWMUYb0hj8Hfdam/mWh9S WC9mPQWGeFg6cRS8Us6YDi8k6shvaPz3cp8m+oAoWWjPtjRF3heXUxeAgGokRohx VLro1hEX//CIVlMHL/RcYvPe1uP5Nm+wl7j2ESPd98pUuPHJ7Rc/hsFcwoRpfcDX enFtYVpJeo6xn9SQJQy5laVm5CZKQ/BV0dCrIhOaQkx5e2lkgOMpTKXYdZNlTywW qoTVrIoXUmuCzR5qz2NQKCcvlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOQCQOY xU7kV2V89M7S9ynjRLz1MB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKneyb8oHsxD07QEY3qGpwfhbtO4ksdGtzjZ9rYvxzpOTJQA+Ft0s FJ8UBsHTWBCNynhf0GhXQeR6I1p3wgmFNz+V1YzePRMQzakVQbfoHTynCwCHMBFY 88Dibvjl7D1qXJoy9mIRVGZkNI/KBNv4pUL3qJUnxEx4IkPAEI95wx3s+Ai/fSqt dKCO2cMz/o8Z5JaUOwMoTu7A57nvXp58SdgmzLSjXcdldKqQmrp+Hz/UnYVOf95o EHCz5u1YKll4YVXlgVOv25aTlKLKSuR4ET/e1Ff1uvtmd4qSWaLbitQ1i8mnhmYl jifW6HYH5aXKUwNInMZ0tnVErtyiPw8P -----END CERTIFICATE-----Generated at Sun Jun 29 17:03:29 2025 by rpki-client