$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft File: DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json) Hash identifier: rAgYmkZqBhY+zYf50JWVZAcTCVVe1FokLk6XAfxlg1A= Subject key identifier: 7D:05:06:DB:23:82:A1:91:F2:D3:7B:FC:C4:97:BE:26:97:CC:D8:96 Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft Manifest number: 02AD Signing time: Sun 11 May 2025 01:02:38 +0000 Manifest this update: Sun 11 May 2025 01:02:37 +0000 Manifest next update: Sun 18 May 2025 01:02:37 +0000 Files and hashes: 1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: EXJKY0XIVz6iTZtsP8GSKJrI0x5PbpxP6swiDZ6riCU=) 2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: iIYe3iAqeI3EEeITOhoXPScYKg3h3YTnGvgaSVvgFv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Validity Not Before: May 11 01:02:37 2025 GMT Not After : May 18 01:02:37 2025 GMT Subject: CN=681ff72e-0e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:30:5d:3b:be:32:70:b0:8f:d6:93:2d:3d: 05:9f:eb:f9:9f:fc:7d:8f:14:dd:5d:72:0a:eb:7e: af:1a:fa:06:bc:c8:e7:7a:ed:74:7e:aa:02:97:8e: 6b:75:bd:aa:e9:f5:bd:75:fb:98:c5:28:e3:b1:4f: 72:4c:72:57:f6:aa:18:ac:23:19:1e:18:0f:76:47: a0:b9:3f:a6:94:69:a9:55:4f:2c:2c:62:29:ec:13: ac:d2:66:3d:76:1c:9e:e0:f0:28:ca:41:90:35:9a: da:32:c9:cb:b9:58:24:8f:ce:be:81:b7:bb:e8:27: 04:e8:65:2b:ea:03:07:60:a0:64:b8:d4:b2:e6:24: 33:e9:df:4f:5f:2c:55:46:5b:51:ec:e8:ac:ab:7b: 53:ea:a2:49:60:fe:b8:08:8a:47:22:7c:80:2b:be: 24:f8:7d:14:07:ff:22:3f:ce:95:64:10:12:aa:df: c9:4b:12:01:40:db:57:09:28:7d:9c:d7:01:94:29: e7:0b:54:5b:a0:e6:be:68:4f:f8:b5:b9:38:f6:fa: 8c:38:54:0c:a0:93:cf:32:9f:3a:cb:a9:8f:bd:e9: 54:0d:cb:09:76:31:8b:ec:25:7e:de:f0:ad:aa:e1: f1:dc:10:6d:be:76:65:3a:a5:3f:b9:36:62:b0:75: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:06:DB:23:82:A1:91:F2:D3:7B:FC:C4:97:BE:26:97:CC:D8:96 X509v3 Authority Key Identifier: keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:2e:e4:20:2e:04:40:01:3b:64:59:99:d3:9c:0b:43:03: b6:36:bc:e3:65:76:e9:2a:0b:f2:f2:c7:a4:a3:d6:bc:18:da: 9d:26:67:9c:01:0f:fd:4e:19:bf:9a:20:28:c5:dd:fc:8e:db: 0c:b7:c3:75:9e:42:2f:8f:66:e8:45:6f:bb:b8:77:80:f4:83: a4:3f:0e:07:cc:b2:19:2c:d1:91:dd:42:06:d1:ed:1b:7b:f6: d6:59:24:61:e1:6d:f4:58:2d:44:47:14:fd:49:d4:50:3b:f8: 23:b6:26:52:89:e0:4d:3d:21:19:4f:78:4e:cb:8c:1a:9d:ee: 3f:ea:c1:d5:3a:4b:69:7b:5f:6c:f8:ad:2a:8f:3c:d1:fc:56: 23:19:0c:d3:5f:9c:54:89:59:cd:23:d0:79:ae:ce:ed:3a:12: ec:86:04:54:64:a8:99:a6:a5:f1:7f:d7:35:37:73:6a:f1:e6: ce:ea:8a:85:b8:7e:9a:33:4a:8d:db:28:5d:59:30:e7:79:5f: d0:a1:7b:30:98:24:be:ca:88:de:91:c5:5f:03:b9:ee:81:95: 1d:1f:80:be:b1:a3:53:35:bd:0d:4b:60:98:4f:d0:0b:69:dc: d3:3f:e2:01:83:c7:a7:c3:6b:2e:68:e6:ae:25:05:00:37:f3: f6:3a:f3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1 QkU2MzVDRUEwHhcNMjUwNTExMDEwMjM3WhcNMjUwNTE4MDEwMjM3WjAYMRYwFAYD VQQDEw02ODFmZjcyZS0wZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9owXTu+MnCwj9aTLT0Fn+v5n/x9jxTdXXIK636vGvoGvMjneu10fqoCl45r db2q6fW9dfuYxSjjsU9yTHJX9qoYrCMZHhgPdkeguT+mlGmpVU8sLGIp7BOs0mY9 dhye4PAoykGQNZraMsnLuVgkj86+gbe76CcE6GUr6gMHYKBkuNSy5iQz6d9PXyxV RltR7Oisq3tT6qJJYP64CIpHInyAK74k+H0UB/8iP86VZBASqt/JSxIBQNtXCSh9 nNcBlCnnC1RboOa+aE/4tbk49vqMOFQMoJPPMp86y6mPvelUDcsJdjGL7CV+3vCt quHx3BBtvnZlOqU/uTZisHWopQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0FBtsj gqGR8tN7/MSXviaXzNiWMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4 OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZ MnU0bUVNR24yb2RiNWpYT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbHy7kIC4EQAE7ZFmZ05wLQwO2NrzjZXbpKgvy8seko9a8GNqdJmec AQ/9Thm/miAoxd38jtsMt8N1nkIvj2boRW+7uHeA9IOkPw4HzLIZLNGR3UIG0e0b e/bWWSRh4W30WC1ERxT9SdRQO/gjtiZSieBNPSEZT3hOy4wane4/6sHVOktpe19s +K0qjzzR/FYjGQzTX5xUiVnNI9B5rs7tOhLshgRUZKiZpqXxf9c1N3Nq8ebO6oqF uH6aM0qN2yhdWTDneV/QoXswmCS+yojekcVfA7nugZUdH4C+saNTNb0NS2CYT9AL adzTP+IBg8enw2suaOauJQUAN/P2OvNy -----END CERTIFICATE-----Generated at Sun May 11 13:38:28 2025 by rpki-client