$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: BNLqKfHU6WzwzRdA7zmhi9D258rt2blHf0Kg1Ailc3w= Subject key identifier: FF:4F:DF:59:8D:90:76:21:4E:DF:D6:22:DC:11:9B:35:9C:20:2B:E1 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 08FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 08F5 Signing time: Mon 12 May 2025 20:11:54 +0000 Manifest this update: Mon 12 May 2025 20:11:53 +0000 Manifest next update: Mon 19 May 2025 20:11:53 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: hrwqpcybdajMCS5xjdf2SaCsxvJUXny5A2QlHNYDTd4=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: May 12 20:11:53 2025 GMT Not After : May 19 20:11:53 2025 GMT Subject: CN=68225609-0963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:2e:80:2c:18:2b:6a:2c:d4:64:c0:e1:c3: d2:64:6c:c6:25:c4:a2:48:40:d2:44:8e:dd:9b:cc: 37:83:64:0c:79:43:5c:08:7a:70:3e:05:a5:28:88: 3e:ba:31:88:a0:20:19:a4:1e:d2:59:51:5a:6d:87: 9d:d1:7f:56:99:6b:d6:dd:2e:6d:41:41:74:98:7c: 0a:5b:df:42:e7:dc:3c:0e:d9:6e:c3:f2:d7:62:47: c6:98:f5:6b:c6:48:19:36:fa:6b:91:7d:e7:35:0c: 73:2d:d2:6a:33:4d:7d:ab:4c:3d:dd:03:10:81:3f: 1f:b8:98:49:34:fe:ee:35:47:9d:b0:35:e0:46:44: b7:e2:14:65:3c:a6:6e:2d:92:e5:5d:0b:85:81:3d: aa:04:e1:db:33:da:17:13:25:07:ca:e3:f3:38:d5: ca:71:bc:16:29:e3:fd:fb:21:6d:fe:5d:26:5d:c1: 3c:c0:b7:92:5b:73:ee:ac:0a:7d:a9:3b:1b:09:78: f8:a5:d9:3f:f8:41:f6:44:e1:06:d2:29:83:5d:0c: 41:01:27:df:76:a6:7e:2b:67:e7:e9:b5:d6:a7:b0: 18:9b:e9:22:d2:d6:f7:af:31:ff:e2:5f:c7:da:62: 23:b3:50:1d:ac:ae:b7:ca:08:f9:a0:db:87:10:f6: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:DF:59:8D:90:76:21:4E:DF:D6:22:DC:11:9B:35:9C:20:2B:E1 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f2:92:0a:1b:e5:2e:6f:cc:f0:b4:fc:3c:88:66:ec:29:64: 5a:67:30:e2:f6:2c:a8:f6:8c:75:20:80:a9:d8:ba:12:96:3c: 53:e1:e4:56:ff:38:76:ce:f7:33:21:41:1f:ff:1b:f8:98:8f: 38:c6:1a:59:9c:77:79:b4:92:bc:84:a2:05:92:12:d4:1a:4f: 55:3d:61:dd:c4:b8:c4:35:7b:10:47:e0:77:23:6f:26:72:9f: 81:7c:37:6f:90:6d:60:12:94:9f:06:b8:19:f9:7c:99:a7:a7: ea:62:33:19:18:8f:6d:14:3c:cb:2b:56:fa:86:28:82:e8:f5: 6b:ec:e0:88:f7:fd:de:38:70:94:58:23:d1:ea:7a:8f:b4:bc: 49:f4:8f:9b:ae:4f:e1:e6:19:6b:8a:1d:8d:71:80:57:6f:5e: f0:08:66:df:d0:1b:22:f0:72:c9:d8:01:20:e1:0f:d6:58:b8: c4:8a:a8:fb:5d:8d:55:7b:5b:f9:4a:65:01:ac:d6:5d:bd:5d: 6d:ea:f8:f5:19:ce:c3:fb:a3:3c:bd:9a:92:a1:74:6a:0d:96: f9:a7:88:91:23:49:76:f2:b6:03:b0:0a:3d:8d:98:46:64:65: c5:a7:fe:3f:15:60:ad:7e:80:b8:ad:8c:4c:e4:7b:25:1e:e3: 52:c7:cb:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUwNTEyMjAxMTUzWhcNMjUwNTE5MjAxMTUzWjAYMRYwFAYD VQQDEw02ODIyNTYwOS0wOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kEugCwYK2os1GTA4cPSZGzGJcSiSEDSRI7dm8w3g2QMeUNcCHpwPgWlKIg+ ujGIoCAZpB7SWVFabYed0X9WmWvW3S5tQUF0mHwKW99C59w8Dtluw/LXYkfGmPVr xkgZNvprkX3nNQxzLdJqM019q0w93QMQgT8fuJhJNP7uNUedsDXgRkS34hRlPKZu LZLlXQuFgT2qBOHbM9oXEyUHyuPzONXKcbwWKeP9+yFt/l0mXcE8wLeSW3PurAp9 qTsbCXj4pdk/+EH2ROEG0imDXQxBASffdqZ+K2fn6bXWp7AYm+ki0tb3rzH/4l/H 2mIjs1AdrK63ygj5oNuHEPaHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9P31mN kHYhTt/WItwRmzWcICvhMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE8pIKG+Uub8zwtPw8iGbsKWRaZzDi9iyo9ox1IICp2LoSljxT4eRW /zh2zvczIUEf/xv4mI84xhpZnHd5tJK8hKIFkhLUGk9VPWHdxLjENXsQR+B3I28m cp+BfDdvkG1gEpSfBrgZ+XyZp6fqYjMZGI9tFDzLK1b6hiiC6PVr7OCI9/3eOHCU WCPR6nqPtLxJ9I+brk/h5hlrih2NcYBXb17wCGbf0Bsi8HLJ2AEg4Q/WWLjEiqj7 XY1Ve1v5SmUBrNZdvV1t6vj1Gc7D+6M8vZqSoXRqDZb5p4iRI0l28rYDsAo9jZhG ZGXFp/4/FWCtfoC4rYxM5HslHuNSx8uC -----END CERTIFICATE-----Generated at Wed May 14 08:23:12 2025 by rpki-client