$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: m9jx214K2ARE5oxsAUNKmt+ipCU+8UvzHPkEj1+3XK0= Subject key identifier: 6B:A8:5B:C3:82:7F:EF:0A:3C:25:D1:F6:76:4C:39:7B:49:E1:72:A4 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 04D9 Signing time: Sun 04 May 2025 23:24:52 +0000 Manifest this update: Sun 04 May 2025 23:24:51 +0000 Manifest next update: Sun 11 May 2025 23:24:51 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: ZDbuj2KPF3vVOIUIEWkR53hQw54CoNgYiSD2CaFistw=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: May 4 23:24:51 2025 GMT Not After : May 11 23:24:51 2025 GMT Subject: CN=6817f743-5b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:3c:b9:64:ce:4f:66:0d:e1:52:07:08:e0: 9c:50:c2:a4:fd:67:d7:37:3b:c0:a2:9b:91:e1:09: 8f:d4:8a:ce:4e:cd:1b:2e:d7:5d:59:78:7c:76:ec: 69:02:cd:26:42:de:37:3a:05:41:f2:76:45:ad:70: 61:e9:e4:bb:01:98:be:06:d4:98:bb:50:fc:09:27: cc:a0:a3:07:ca:6a:4b:36:27:e8:74:db:6c:ab:3b: ec:26:27:b7:15:3c:9b:61:2d:93:09:f8:7f:8d:59: 68:db:0d:a5:f5:a5:65:94:5a:ba:c3:8f:a8:f7:ce: 95:eb:71:38:aa:e6:fa:23:dd:96:f9:d2:ca:4c:8f: 1e:4a:a2:e9:34:66:52:08:7d:26:03:4e:ea:08:92: 03:e5:d7:a6:17:b6:34:cf:6c:41:d5:50:21:c6:ac: a5:09:db:71:34:17:e9:ec:dd:49:62:44:fc:98:43: a7:c1:ed:8b:00:2e:71:57:4d:9e:38:82:a3:a0:39: 91:26:85:4b:ad:3c:87:14:92:3e:28:54:4c:d2:96: 40:02:d9:14:d7:71:df:10:ce:37:58:b1:7c:a2:3a: 15:c9:1a:c8:34:19:65:73:e2:cc:f1:cb:3b:d7:ed: fa:8f:a0:7e:78:97:18:31:cc:1b:c1:b5:83:82:45: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A8:5B:C3:82:7F:EF:0A:3C:25:D1:F6:76:4C:39:7B:49:E1:72:A4 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ea:16:2f:83:5a:78:f7:84:37:f1:30:e3:65:4c:ff:11:7e: b5:b5:7b:67:a9:4e:27:ea:99:ea:1d:1e:f8:e3:63:0e:27:6a: 6d:f3:80:9d:61:35:69:67:82:d1:ba:ba:78:03:25:cd:f1:d0: a9:d6:76:bb:73:37:b2:a8:b2:6f:ec:6b:97:c2:f1:c9:44:67: d4:8a:1f:12:95:41:bd:b5:cd:0a:2f:c6:1e:cf:67:27:39:6e: b6:23:3f:e9:47:94:df:a6:66:b0:ac:a4:3f:90:23:d6:02:74: c9:c4:d6:c6:36:16:29:e2:44:93:a0:66:58:4f:37:53:11:89: ab:ec:6a:d3:f3:53:15:1a:36:c4:ea:a4:5e:e5:d0:a0:b0:65: f3:5a:07:69:e6:7e:a6:07:63:77:39:18:f8:aa:ad:09:f8:d6: fc:b5:9a:25:bf:ca:94:fc:21:0e:d8:0d:45:37:47:3c:67:89: 6c:1e:90:6e:8f:91:fd:a3:e2:31:5a:5d:c4:5c:eb:37:01:d9: f0:9b:e4:ce:73:d5:d0:7c:95:76:55:30:56:80:c5:cf:15:19: b3:84:93:76:4b:cf:fd:d1:64:ed:ab:ad:04:ff:bf:01:95:42: c9:7b:d4:dc:2b:db:e1:97:68:15:9c:5e:0b:ba:14:8f:9d:da: e9:5f:00:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwNTA0MjMyNDUxWhcNMjUwNTExMjMyNDUxWjAYMRYwFAYD VQQDEw02ODE3Zjc0My01YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJE8uWTOT2YN4VIHCOCcUMKk/WfXNzvAopuR4QmP1IrOTs0bLtddWXh8duxp As0mQt43OgVB8nZFrXBh6eS7AZi+BtSYu1D8CSfMoKMHympLNifodNtsqzvsJie3 FTybYS2TCfh/jVlo2w2l9aVllFq6w4+o986V63E4qub6I92W+dLKTI8eSqLpNGZS CH0mA07qCJID5demF7Y0z2xB1VAhxqylCdtxNBfp7N1JYkT8mEOnwe2LAC5xV02e OIKjoDmRJoVLrTyHFJI+KFRM0pZAAtkU13HfEM43WLF8ojoVyRrINBllc+LM8cs7 1+36j6B+eJcYMcwbwbWDgkVCAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuoW8OC f+8KPCXR9nZMOXtJ4XKkMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA46hYvg1p494Q38TDjZUz/EX61tXtnqU4n6pnqHR7442MOJ2pt84Cd YTVpZ4LRurp4AyXN8dCp1na7czeyqLJv7GuXwvHJRGfUih8SlUG9tc0KL8Yez2cn OW62Iz/pR5TfpmawrKQ/kCPWAnTJxNbGNhYp4kSToGZYTzdTEYmr7GrT81MVGjbE 6qRe5dCgsGXzWgdp5n6mB2N3ORj4qq0J+Nb8tZolv8qU/CEO2A1FN0c8Z4lsHpBu j5H9o+IxWl3EXOs3Adnwm+TOc9XQfJV2VTBWgMXPFRmzhJN2S8/90WTtq60E/78B lULJe9TcK9vhl2gVnF4LuhSPndrpXwBK -----END CERTIFICATE-----Generated at Mon May 5 03:15:31 2025 by rpki-client