$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: r9m8jeKKrRKtdXhtn3wORAJqbAH4Z6QQJSPDLX+YgOU= Subject key identifier: 21:B4:BB:18:20:35:07:4F:BE:D8:5D:47:97:7A:39:7F:AB:A8:6D:05 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 03CD Signing time: Thu 15 May 2025 00:38:53 +0000 Manifest this update: Thu 15 May 2025 00:38:53 +0000 Manifest next update: Thu 22 May 2025 00:38:53 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: ixxMrJ3pIAHK3kry6/NCFAiNWHOO51ilMLxs6YXZM5k=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: May 15 00:38:53 2025 GMT Not After : May 22 00:38:53 2025 GMT Subject: CN=6825379d-b82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:40:28:bd:e6:f5:dd:97:7d:d0:bf:5b:01: 77:2d:29:46:c0:ec:9e:52:33:81:99:03:b7:0c:ac: fb:49:12:ec:b4:54:86:5c:9d:ce:c2:4f:59:bd:30: 11:d4:1c:04:0a:6c:25:e0:4d:79:1e:a7:e4:c3:e1: 55:ab:97:eb:2d:d1:05:18:19:61:f2:d4:79:b6:6e: 9a:76:4b:90:83:d5:39:1a:c0:98:fa:bd:30:69:ed: 7a:d1:72:60:35:db:ae:41:08:73:85:ce:33:da:4c: a9:2e:2e:a8:6c:c5:52:d2:bf:be:a6:c2:d7:36:89: 96:c2:60:a5:5d:f8:95:8c:6f:1d:ec:a1:0d:25:23: 66:3d:21:77:e6:a9:88:12:fa:e4:88:47:b7:2e:d2: d8:f0:8a:3c:6f:44:9b:60:6b:ea:0c:93:7e:8e:2e: 13:c6:8a:91:42:89:aa:0e:29:05:8e:83:16:da:41: 9f:8c:e5:24:f1:f3:fa:6f:d4:76:92:a3:b0:ac:9c: 0a:5c:f0:ec:73:e4:2a:18:ea:0e:75:be:59:3a:fe: cb:f0:cd:9d:20:aa:f7:67:27:42:9a:c0:5a:2d:d4: e4:5f:78:41:6b:d9:3b:d5:97:96:1b:fb:6b:78:d7: 62:72:26:d0:08:3e:18:74:1d:95:e8:3f:fa:77:0e: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:BB:18:20:35:07:4F:BE:D8:5D:47:97:7A:39:7F:AB:A8:6D:05 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fb:2a:21:21:46:eb:48:ce:f1:85:89:49:21:d1:02:9d:72: d6:43:3f:78:69:b2:c4:e2:f4:2f:d5:0c:9e:f0:4c:56:b8:78: ff:44:2c:18:07:cc:25:49:2d:84:37:9b:bc:1d:cf:da:04:63: 1d:d2:12:8b:fe:cb:0c:a7:84:8f:14:e4:4e:c3:62:69:7e:4c: 4e:24:03:93:d4:f8:f6:80:ce:74:48:cf:79:ad:3f:d5:2c:73: bc:3a:44:14:16:06:56:81:55:88:22:4f:8e:f8:83:f7:8d:f6: 53:2b:68:e1:a5:a4:81:03:bf:90:8f:12:0c:f1:7a:ec:e0:6d: 9d:d4:ab:1a:22:f1:3d:43:13:03:6d:33:29:9b:93:7e:76:dd: f6:6a:28:05:2d:f6:cf:cf:f6:b9:9f:ec:0a:4f:d7:e4:fb:58: 96:28:7d:07:b4:28:a2:7b:90:aa:a8:70:37:1e:9c:39:2d:ce: d8:79:e7:51:88:80:a4:45:bc:d1:d9:59:23:05:60:5a:87:b8: 42:ff:0b:b4:79:0c:85:7b:10:c5:d5:f5:9c:4a:35:7b:7f:4b: 4f:35:73:b3:0b:fa:0c:c2:9c:84:dd:0b:11:cb:39:fe:51:b7: 35:56:29:02:c7:a8:4f:ed:06:23:34:96:6b:28:19:14:98:3f: 24:0d:dd:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUwNTE1MDAzODUzWhcNMjUwNTIyMDAzODUzWjAYMRYwFAYD VQQDEw02ODI1Mzc5ZC1iODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0pAKL3m9d2XfdC/WwF3LSlGwOyeUjOBmQO3DKz7SRLstFSGXJ3Owk9ZvTAR 1BwECmwl4E15Hqfkw+FVq5frLdEFGBlh8tR5tm6adkuQg9U5GsCY+r0wae160XJg NduuQQhzhc4z2kypLi6obMVS0r++psLXNomWwmClXfiVjG8d7KENJSNmPSF35qmI EvrkiEe3LtLY8Io8b0SbYGvqDJN+ji4TxoqRQomqDikFjoMW2kGfjOUk8fP6b9R2 kqOwrJwKXPDsc+QqGOoOdb5ZOv7L8M2dIKr3ZydCmsBaLdTkX3hBa9k71ZeWG/tr eNdicibQCD4YdB2V6D/6dw5CPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG0uxgg NQdPvthdR5d6OX+rqG0FMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+yohIUbrSM7xhYlJIdECnXLWQz94abLE4vQv1Qye8ExWuHj/RCwY B8wlSS2EN5u8Hc/aBGMd0hKL/ssMp4SPFOROw2JpfkxOJAOT1Pj2gM50SM95rT/V LHO8OkQUFgZWgVWIIk+O+IP3jfZTK2jhpaSBA7+QjxIM8Xrs4G2d1KsaIvE9QxMD bTMpm5N+dt32aigFLfbPz/a5n+wKT9fk+1iWKH0HtCiie5CqqHA3Hpw5Lc7YeedR iICkRbzR2VkjBWBah7hC/wu0eQyFexDF1fWcSjV7f0tPNXOzC/oMwpyE3QsRyzn+ Ubc1VikCx6hP7QYjNJZrKBkUmD8kDd2Q -----END CERTIFICATE-----Generated at Thu May 15 19:28:05 2025 by rpki-client