$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: Lzoa/BKlbNV4LuRecV4jDukzzKnkRYmIyAt+TJhWJes= Subject key identifier: E2:70:AD:43:85:BE:9E:2D:2D:E7:1A:3B:7D:79:16:9E:51:B0:41:81 Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: 6D Signing time: Thu 15 May 2025 04:46:57 +0000 Manifest this update: Thu 15 May 2025 04:46:57 +0000 Manifest next update: Thu 22 May 2025 04:46:57 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: 6MLgjxKR6zBS0npkfoNAsAWdsWuVVSslkvHMC96gyS8=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: May 15 04:46:57 2025 GMT Not After : May 22 04:46:57 2025 GMT Subject: CN=682571c1-d5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:fb:3e:2d:a0:ff:13:34:e8:78:ba:53:d8: 0f:f1:c4:c9:5c:b3:15:78:b7:df:26:09:89:69:69: 30:9e:57:4d:c9:3c:25:77:42:3d:b3:72:fc:6c:64: 78:e0:8b:cd:ea:79:68:35:aa:72:a8:eb:bd:86:c2: 74:3b:d7:b9:cc:d7:c5:f3:6f:98:b2:2a:1d:00:93: cf:c4:12:29:2d:64:d8:14:29:87:aa:f4:69:ee:52: 3f:33:68:e1:26:83:f7:e4:9c:80:56:34:54:9f:22: 41:13:b7:d6:87:3e:37:f0:0f:6a:a8:fd:ac:eb:6d: d4:de:8d:a3:f8:82:20:82:00:71:6f:8c:79:67:16: 86:f5:6e:75:4b:2f:8b:b5:06:ea:33:86:4a:bd:d7: cf:27:68:8f:f6:d9:63:48:ad:e0:d4:62:32:0f:25: e5:33:79:35:f0:7d:34:f5:b1:5c:d6:ff:1b:19:c2: 33:25:0a:b5:da:60:0e:55:43:2d:5e:95:3a:ab:bc: 2a:55:ed:62:3b:34:97:3a:35:f2:c3:65:c7:e6:18: 11:bd:48:7e:3c:ec:c4:97:2d:15:8a:93:8b:d9:52: cb:d7:74:b6:c9:08:5b:3a:d7:5c:ea:03:71:47:09: 73:0c:3e:56:a6:05:20:dd:78:8d:c5:da:90:c3:13: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:AD:43:85:BE:9E:2D:2D:E7:1A:3B:7D:79:16:9E:51:B0:41:81 X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0e:e9:e3:35:95:4d:6c:e2:e2:25:a4:e4:d3:bf:a6:bb:5f: ff:5f:d9:81:ba:25:a1:99:4f:cb:3a:ab:a6:22:f5:74:e6:69: c3:50:0b:b3:1a:e0:66:ae:7f:03:6e:43:48:46:f5:c0:00:9d: 47:a3:24:21:db:44:8b:f8:80:92:f9:8f:3c:a1:9b:10:31:9d: 9e:e0:9e:ef:c6:61:db:da:cd:a0:41:e7:45:05:16:da:3a:2c: 67:26:09:98:bf:b1:6f:ac:fe:8a:25:db:98:f1:c3:0e:00:28: f2:11:dc:6a:2f:bb:ee:01:e7:fa:c6:6d:b6:48:a4:75:8f:37: 32:94:63:4c:a8:cf:95:b2:5d:3e:05:68:30:8e:67:0c:63:7d: c0:49:3b:4a:b0:9b:46:9e:6f:f1:24:97:6f:ef:13:d1:2e:03: 1a:ef:f2:29:e5:07:ef:db:76:9d:73:b3:f9:e9:af:e7:4d:27: 3a:9a:44:b2:3a:9f:f7:9d:37:e4:b6:0d:bb:90:e9:f8:8f:e9: 53:d9:b8:7e:ca:bf:1c:c9:80:5d:a1:8f:f5:7c:5f:ea:ca:90: f5:5e:28:05:c2:79:31:69:ce:4d:e2:80:01:67:b6:ee:32:c5: 66:07:65:82:02:15:61:b0:23:9e:58:bf:b9:fa:3d:1c:3c:e0: 89:18:d7:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTUzQzExMC8GA1UEBRMoNzQ0NTkzMzYzN0NDQTMwOUE0QzE2MUFCRkVERjg3NzlD QjJBQjEzRjAeFw0yNTA1MTUwNDQ2NTdaFw0yNTA1MjIwNDQ2NTdaMBgxFjAUBgNV BAMTDTY4MjU3MWMxLWQ1YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb7Ps+LaD/EzToeLpT2A/xxMlcsxV4t98mCYlpaTCeV03JPCV3Qj2zcvxsZHjg i83qeWg1qnKo672GwnQ717nM18Xzb5iyKh0Ak8/EEiktZNgUKYeq9GnuUj8zaOEm g/fknIBWNFSfIkETt9aHPjfwD2qo/azrbdTejaP4giCCAHFvjHlnFob1bnVLL4u1 Buozhkq9188naI/22WNIreDUYjIPJeUzeTXwfTT1sVzW/xsZwjMlCrXaYA5VQy1e lTqrvCpV7WI7NJc6NfLDZcfmGBG9SH487MSXLRWKk4vZUsvXdLbJCFs611zqA3FH CXMMPlamBSDdeI3F2pDDExu5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4nCtQ4W+ ni0t5xo7fXkWnlGwQYEwHwYDVR0jBBgwFoAUdEWTNjfMowmkwWGr/t+HecsqsT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFNTNDLzI5Qjg2OTk0OTAz QTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEVXVE5qZk1vd21rd1dHcl90LUhlY3Nxc1Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF NTNDLzI5Qjg2OTk0OTAzQTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dt a3dXR3JfdC1IZWNzcXNUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcO6eM1lU1s4uIlpOTTv6a7X/9f2YG6JaGZT8s6q6Yi9XTmacNQC7Ma 4GaufwNuQ0hG9cAAnUejJCHbRIv4gJL5jzyhmxAxnZ7gnu/GYdvazaBB50UFFto6 LGcmCZi/sW+s/ool25jxww4AKPIR3Govu+4B5/rGbbZIpHWPNzKUY0yoz5WyXT4F aDCOZwxjfcBJO0qwm0aeb/Ekl2/vE9EuAxrv8inlB+/bdp1zs/npr+dNJzqaRLI6 n/edN+S2DbuQ6fiP6VPZuH7KvxzJgF2hj/V8X+rKkPVeKAXCeTFpzk3igAFntu4y xWYHZYICFWGwI55Yv7n6PRw84IkY1+I= -----END CERTIFICATE-----Generated at Fri May 16 14:35:58 2025 by rpki-client