$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: 3u5TBeT12azbK2Tt1EPvE7CeSfnAkFsTc5vFYP9D5eY= Subject key identifier: 78:7F:4C:60:AC:A9:5F:24:CF:A8:F2:04:77:47:81:63:99:3A:CB:CA Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 01EE Signing time: Fri 09 May 2025 01:57:39 +0000 Manifest this update: Fri 09 May 2025 01:57:38 +0000 Manifest next update: Fri 16 May 2025 01:57:38 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: XaRKLcrQ8lVc0ywBP0DRW56zRrvGPULXR3B0XKCnvrQ=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: May 9 01:57:38 2025 GMT Not After : May 16 01:57:38 2025 GMT Subject: CN=681d6112-b1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:e0:4f:fc:b9:23:c1:bc:3f:f0:37:3d:15: b4:dc:00:04:ba:79:b1:e8:ea:12:ec:a1:af:d3:4d: 80:70:9d:61:64:35:30:c9:07:7f:16:6c:64:70:c4: 8d:7c:98:5a:77:a8:f2:c5:48:9e:0a:77:24:c1:eb: 71:70:c1:05:d7:44:f4:e0:89:cd:e6:06:c3:b5:c2: 70:bc:47:45:3b:42:a2:69:fe:73:61:84:46:ad:ea: 53:89:d1:9c:a5:c5:62:01:91:5f:a9:c7:89:7b:79: 01:e9:2c:3a:a0:53:8f:bc:a1:da:6d:41:b0:83:37: 4c:1e:8e:1f:2f:3d:8f:21:1e:47:e0:95:c3:4a:9a: a8:cb:4b:7f:ef:9a:ae:66:00:93:cd:6d:65:c8:5d: 85:78:d2:3a:77:e8:4b:f6:b6:da:ce:54:65:89:d6: ec:d9:c6:d2:00:24:42:cd:8d:e5:28:26:a8:92:9b: cd:b8:c0:27:c4:80:be:37:b7:89:48:ac:62:de:ea: 3b:99:05:45:df:cf:03:5a:ea:9d:e8:eb:f1:c9:ad: 65:45:36:e9:7e:51:89:80:5f:6a:e4:6b:e8:da:a0: f8:c4:04:64:ab:e0:06:33:64:e8:46:8a:4d:9a:44: fd:9c:bb:66:f5:c5:b2:18:ef:a9:2e:e2:59:31:e0: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:4C:60:AC:A9:5F:24:CF:A8:F2:04:77:47:81:63:99:3A:CB:CA X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c0:36:a6:40:13:43:d5:7f:45:1e:b6:9d:8e:b8:8b:c2:76: c1:c5:88:8d:54:0c:32:da:a3:ed:88:af:8d:76:22:97:1e:6c: 8e:cd:3f:4d:77:fb:af:3a:00:5e:82:d5:b6:59:38:f6:b8:49: aa:53:b5:a4:ec:f9:1e:4b:82:f4:d9:8e:eb:ce:ee:1f:24:f7: f6:31:38:04:c5:f7:10:b7:3f:cf:4e:ff:2b:be:93:b0:bf:79: 86:20:a0:e5:de:1b:75:fb:c4:a1:1b:77:7c:28:b0:a0:8f:b2: a2:8d:dd:1e:1c:6c:d2:02:69:c9:e9:79:26:63:c8:33:6a:c8: 62:5a:9d:d2:83:c6:82:83:56:72:06:90:19:ba:bc:de:a1:68: 16:11:be:02:5b:2e:83:65:6d:8a:78:bc:9e:ac:bd:f7:09:ef: 1d:f7:fa:df:1f:30:a0:3a:cf:79:8d:4c:90:7c:9e:d5:9e:da: 7e:01:10:49:d3:0f:4a:dd:f5:03:9b:a2:1e:c3:da:1f:d0:df: 2d:8c:85:8e:42:9d:6f:de:80:fc:27:7d:9b:04:1a:10:fa:10: 6c:30:36:a9:87:c4:44:cd:17:c2:91:8f:4d:95:e3:eb:09:c3: 21:7d:ad:4e:8d:a9:3a:cc:4b:eb:25:09:e3:7a:2a:c6:ca:2d: 49:8b:c7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwNTA5MDE1NzM4WhcNMjUwNTE2MDE1NzM4WjAYMRYwFAYD VQQDEw02ODFkNjExMi1iMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVzgT/y5I8G8P/A3PRW03AAEunmx6OoS7KGv002AcJ1hZDUwyQd/FmxkcMSN fJhad6jyxUieCnckwetxcMEF10T04InN5gbDtcJwvEdFO0Kiaf5zYYRGrepTidGc pcViAZFfqceJe3kB6Sw6oFOPvKHabUGwgzdMHo4fLz2PIR5H4JXDSpqoy0t/75qu ZgCTzW1lyF2FeNI6d+hL9rbazlRlidbs2cbSACRCzY3lKCaokpvNuMAnxIC+N7eJ SKxi3uo7mQVF388DWuqd6Ovxya1lRTbpflGJgF9q5Gvo2qD4xARkq+AGM2ToRopN mkT9nLtm9cWyGO+pLuJZMeAg1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHh/TGCs qV8kz6jyBHdHgWOZOsvKMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwDamQBND1X9FHradjriLwnbBxYiNVAwy2qPtiK+NdiKXHmyOzT9N d/uvOgBegtW2WTj2uEmqU7Wk7PkeS4L02Y7rzu4fJPf2MTgExfcQtz/PTv8rvpOw v3mGIKDl3ht1+8ShG3d8KLCgj7Kijd0eHGzSAmnJ6XkmY8gzashiWp3Sg8aCg1Zy BpAZurzeoWgWEb4CWy6DZW2KeLyerL33Ce8d9/rfHzCgOs95jUyQfJ7Vntp+ARBJ 0w9K3fUDm6Iew9of0N8tjIWOQp1v3oD8J32bBBoQ+hBsMDaph8REzRfCkY9NlePr CcMhfa1Ojak6zEvrJQnjeirGyi1Ji8eG -----END CERTIFICATE-----Generated at Sat May 10 21:20:05 2025 by rpki-client