$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft File: dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json) Hash identifier: Hqvz84ja0N804XJUoSvAdxun4DRh+O663iCtXNUgdSU= Subject key identifier: 4C:AD:1A:67:0F:8C:0C:25:A5:26:60:B1:ED:AB:7D:F8:4B:2F:AA:31 Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E Certificate issuer: /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft Manifest number: 0C39 Signing time: Mon 12 May 2025 18:30:52 +0000 Manifest this update: Mon 12 May 2025 18:30:51 +0000 Manifest next update: Mon 19 May 2025 18:30:51 +0000 Files and hashes: 1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: rdDCoFFove247BYB9GfviRaI4cgx0dnlEthQ9mGcU+w=) 2: 554FA970134B11F086B29E87C4F9AE02.roa (hash: lElr8UuU72HaGdKc4l83MtravhdES9u5a7CA+J7QNtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Validity Not Before: May 12 18:30:51 2025 GMT Not After : May 19 18:30:51 2025 GMT Subject: CN=68223e5b-be18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:af:7c:d5:35:a6:a3:2a:c1:96:5f:8a:70: 4b:22:e2:19:02:c2:77:54:97:8b:51:3e:92:e8:a4: 9e:d9:40:b8:4b:bf:f3:6b:ce:b6:67:87:24:ba:c2: fa:2d:ac:e3:1f:20:07:a5:e1:8e:26:26:35:b7:c6: a4:e2:c6:02:d0:51:1b:48:d3:04:90:50:4b:d9:71: 91:8c:ab:13:9e:f0:da:94:be:c6:c5:14:60:46:54: 7f:70:4c:93:d9:05:bc:60:d0:79:d2:00:ee:97:94: 61:d0:a5:cc:0b:46:51:5b:fa:ff:4f:6f:75:08:bd: 78:ce:39:a7:d6:21:05:52:3f:7e:1d:f3:8b:7b:3e: c3:31:1f:b1:74:86:a3:ba:a2:05:af:6a:5a:4a:51: 13:2e:90:be:83:53:8d:f5:2c:ea:0f:7c:3a:a2:dd: 60:1b:85:0c:61:fe:2b:fc:53:fe:65:fc:d8:5c:ad: c1:39:24:8d:a8:01:3d:ca:f8:eb:83:72:b9:e8:6f: e3:30:79:b3:79:fc:f3:bb:69:6d:bd:88:3a:84:be: a9:9c:12:74:59:88:60:fc:ac:fc:9d:2c:84:7c:d8: f5:ba:be:65:13:fc:67:57:f1:c0:63:91:27:1c:8a: 4c:d0:00:45:72:36:fc:5e:cc:76:d2:c6:88:49:17: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AD:1A:67:0F:8C:0C:25:A5:26:60:B1:ED:AB:7D:F8:4B:2F:AA:31 X509v3 Authority Key Identifier: keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3d:c8:c7:0b:1b:4a:86:f5:54:04:24:be:02:f3:4f:ec:ad: ac:ed:16:58:48:bd:c5:7d:d8:7e:00:43:c1:39:de:1c:34:1c: 2c:b9:0f:c9:cf:ad:2c:d7:e7:03:d0:c7:79:cb:35:d1:eb:ad: c1:2a:78:b4:88:60:a1:fc:72:2e:b3:50:b0:fe:be:2c:4f:1d: 5f:a1:ed:6e:3d:e0:9f:a8:40:4c:36:b4:df:45:2d:35:6c:85: bf:1c:33:2c:0e:2b:65:fe:0e:b1:e7:5d:ee:74:cd:a7:37:c4: f8:cc:59:37:a9:c6:bc:c2:cf:cc:e5:37:44:1b:8d:e3:f5:7d: 36:11:87:39:e6:42:db:93:3c:99:ad:90:d9:12:6a:65:12:d2: 90:0b:88:64:ca:f3:93:c9:15:da:18:84:01:61:09:33:00:7f: 01:db:53:8f:e8:fb:04:b0:93:10:09:75:80:7c:a3:69:69:42: 79:8e:ab:ed:c9:63:02:07:5f:db:29:12:ef:13:68:02:74:05: 5b:ca:52:37:bc:16:0e:89:fb:95:6f:05:d9:2f:54:5e:78:ab: a9:f6:ee:9f:3d:d9:82:2d:86:00:22:e0:5c:b4:36:2c:6d:f7: 7c:be:72:5f:7c:b5:5f:4b:8a:6c:fb:12:4f:cc:ea:6b:8c:4b: 9b:c5:f2:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTAxMDExMC8GA1UEBRMoNzUxQThCM0Q1QjYyRTgxRjQ2QTRDN0JENDY5NUJGM0E4 MDY5Q0EzRTAeFw0yNTA1MTIxODMwNTFaFw0yNTA1MTkxODMwNTFaMBgxFjAUBgNV BAMTDTY4MjIzZTViLWJlMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Ka981TWmoyrBll+KcEsi4hkCwndUl4tRPpLopJ7ZQLhLv/NrzrZnhyS6wvot rOMfIAel4Y4mJjW3xqTixgLQURtI0wSQUEvZcZGMqxOe8NqUvsbFFGBGVH9wTJPZ Bbxg0HnSAO6XlGHQpcwLRlFb+v9Pb3UIvXjOOafWIQVSP34d84t7PsMxH7F0hqO6 ogWvalpKURMukL6DU431LOoPfDqi3WAbhQxh/iv8U/5l/NhcrcE5JI2oAT3K+OuD crnob+MwebN5/PO7aW29iDqEvqmcEnRZiGD8rPydLIR82PW6vmUT/GdX8cBjkScc ikzQAEVyNvxezHbSxohJFxttAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTK0aZw+M DCWlJmCx7at9+EsvqjEwHwYDVR0jBBgwFoAUdRqLPVti6B9GpMe9RpW/OoBpyj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MDEwLzZBN0U5NDBBMEMz QTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5R3BNZTlScFdfT29CcHlq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFJxTFBWdGk2QjlHcE1lOVJwV19Pb0JweWo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MDEwLzZBN0U5NDBBMEMzQTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5 R3BNZTlScFdfT29CcHlqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIg9yMcLG0qG9VQEJL4C80/sraztFlhIvcV92H4AQ8E53hw0HCy5D8nP rSzX5wPQx3nLNdHrrcEqeLSIYKH8ci6zULD+vixPHV+h7W494J+oQEw2tN9FLTVs hb8cMywOK2X+DrHnXe50zac3xPjMWTepxrzCz8zlN0QbjeP1fTYRhznmQtuTPJmt kNkSamUS0pALiGTK85PJFdoYhAFhCTMAfwHbU4/o+wSwkxAJdYB8o2lpQnmOq+3J YwIHX9spEu8TaAJ0BVvKUje8Fg6J+5VvBdkvVF54q6n27p892YIthgAi4Fy0Nixt 93y+cl98tV9Limz7Ek/M6muMS5vF8gU= -----END CERTIFICATE-----Generated at Wed May 14 06:30:53 2025 by rpki-client