$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json) Hash identifier: mOHmLfNT8hiqeUL2DY4fbw3DFzw70NzVyfx5r1EU5Lo= Subject key identifier: 89:D4:1F:B1:BB:76:D7:DD:FC:C3:47:44:68:12:05:78:F0:28:7B:3C Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft Manifest number: 0156 Signing time: Thu 15 May 2025 03:35:07 +0000 Manifest this update: Thu 15 May 2025 03:35:07 +0000 Manifest next update: Thu 22 May 2025 03:35:07 +0000 Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 0lahUfIW6cmozg8wlXMUyNON/xF+A/QAXmxJg/IGNC4=) 2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Validity Not Before: May 15 03:35:07 2025 GMT Not After : May 22 03:35:07 2025 GMT Subject: CN=682560eb-eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:a7:4b:a4:2e:49:01:cc:d2:60:71:07:f3: 7a:92:34:41:00:fc:42:3a:01:42:5e:88:ec:1f:68: 54:74:19:ad:f6:01:bd:61:b6:73:6e:3e:60:51:44: a5:1d:e1:fc:63:06:32:62:78:bb:a9:c0:67:b8:15: b2:36:1e:f1:5a:f6:85:9b:76:05:64:1a:59:c0:a9: 91:e0:37:d3:0d:73:ec:74:17:c0:b9:5a:b2:bc:3f: 72:d6:e6:38:dd:44:88:f3:35:25:80:6e:dd:ac:71: 74:07:85:8e:c9:34:84:e6:79:ae:04:9e:31:78:f2: 57:f7:92:00:f2:28:e7:6e:04:40:fd:c0:94:d9:a4: 54:03:f2:c1:23:5c:73:1a:a5:4d:f2:49:fa:b5:8e: c9:f0:3e:f8:0d:17:8b:0f:f2:5f:19:d6:f1:64:09: f6:13:cb:30:2c:4f:d0:f8:02:4e:aa:5f:ad:3b:ca: 81:aa:b3:a8:d6:0e:b4:f7:29:9a:e3:39:ca:cf:f9: bc:6c:7d:d1:b0:e4:a1:1e:27:1f:7e:7d:cc:23:45: db:3a:93:0b:d0:11:0e:fc:ea:4f:79:23:30:18:64: 7f:c6:97:99:1b:84:a6:00:07:fe:ce:64:e1:77:71: 1c:ac:5d:e8:36:c6:2d:12:d9:31:a4:55:61:50:38: 2d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:1F:B1:BB:76:D7:DD:FC:C3:47:44:68:12:05:78:F0:28:7B:3C X509v3 Authority Key Identifier: keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:77:5a:b5:0c:44:d6:4c:a6:10:0c:ee:7c:d2:40:93:84:81: 01:47:d4:c2:48:95:21:2c:d6:5c:2e:6e:65:64:85:2d:63:80: 4b:d2:18:2b:b3:82:8d:73:d5:1f:26:cb:03:b9:8c:da:71:a8: a9:e3:b3:aa:80:72:ed:e5:62:63:ea:55:a8:73:25:79:d0:2f: 2f:76:28:95:2a:77:08:40:fc:ea:89:17:72:9a:89:fb:9a:b5: df:87:8f:79:af:d5:c6:3f:01:6c:49:0c:e4:76:f1:c0:43:50: 5a:6d:a4:a6:e0:92:b8:99:d2:76:72:41:a2:e6:24:a3:aa:69: 20:df:d5:81:ac:47:7c:5d:b3:9b:e1:42:56:95:8b:30:e0:12: 37:2e:58:a3:01:42:d4:31:ec:12:84:ec:71:5f:30:41:49:9e: 38:f9:0a:ed:d6:bb:0d:2f:5c:31:d1:3e:df:cd:fe:91:c8:8b: 3b:1e:6c:3a:68:36:72:b3:94:04:7f:ec:bf:32:52:74:0a:1b: 6b:f7:b3:7f:ab:71:6d:0f:d4:26:c5:40:d4:56:06:31:1e:08: 7f:a0:c0:98:69:06:e3:9c:b2:2b:06:3b:51:c3:b4:cc:b8:e8: 42:31:d5:c7:a9:98:4f:e3:a0:28:04:11:e9:42:80:b0:8a:b0: 17:81:d7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw RDZFM0U3QzkwHhcNMjUwNTE1MDMzNTA3WhcNMjUwNTIyMDMzNTA3WjAYMRYwFAYD VQQDEw02ODI1NjBlYi1lYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1anS6QuSQHM0mBxB/N6kjRBAPxCOgFCXojsH2hUdBmt9gG9YbZzbj5gUUSl HeH8YwYyYni7qcBnuBWyNh7xWvaFm3YFZBpZwKmR4DfTDXPsdBfAuVqyvD9y1uY4 3USI8zUlgG7drHF0B4WOyTSE5nmuBJ4xePJX95IA8ijnbgRA/cCU2aRUA/LBI1xz GqVN8kn6tY7J8D74DReLD/JfGdbxZAn2E8swLE/Q+AJOql+tO8qBqrOo1g609yma 4znKz/m8bH3RsOShHicffn3MI0XbOpML0BEO/OpPeSMwGGR/xpeZG4SmAAf+zmTh d3EcrF3oNsYtEtkxpFVhUDgtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInUH7G7 dtfd/MNHRGgSBXjwKHs8MB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1 alItV1dfb2RRS0VOYmo1OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjd1q1DETWTKYQDO580kCThIEBR9TCSJUhLNZcLm5lZIUtY4BL0hgr s4KNc9UfJssDuYzacaip47OqgHLt5WJj6lWocyV50C8vdiiVKncIQPzqiRdymon7 mrXfh495r9XGPwFsSQzkdvHAQ1BabaSm4JK4mdJ2ckGi5iSjqmkg39WBrEd8XbOb 4UJWlYsw4BI3LlijAULUMewShOxxXzBBSZ44+Qrt1rsNL1wx0T7fzf6RyIs7Hmw6 aDZys5QEf+y/MlJ0Chtr97N/q3FtD9QmxUDUVgYxHgh/oMCYaQbjnLIrBjtRw7TM uOhCMdXHqZhP46AoBBHpQoCwirAXgdeu -----END CERTIFICATE-----Generated at Thu May 15 23:21:35 2025 by rpki-client