$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: kMejJohwOcNCnDCPZCHno85B275+LNVIpnmkDxNEwK4= Subject key identifier: E0:01:4C:AF:91:59:20:E3:17:FD:69:0F:85:3D:FA:92:B5:FC:D0:AA Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D09 Signing time: Sat 10 May 2025 17:54:57 +0000 Manifest this update: Sat 10 May 2025 17:54:57 +0000 Manifest next update: Sat 17 May 2025 17:54:57 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: 3Tm2oiZh7LszIuI3WF6onId/2faHWW7FX8lHc8F0TTQ=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: May 10 17:54:57 2025 GMT Not After : May 17 17:54:57 2025 GMT Subject: CN=681f92f1-5a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:39:d3:d4:6d:70:8b:ae:e8:11:55:0b:53: 1f:2e:cb:1b:22:8b:f8:bf:b1:b0:06:79:8c:91:bc: 56:f1:bc:0b:69:fc:de:15:22:f0:d2:45:f1:0a:8a: 4b:f4:66:1b:79:69:89:73:70:88:7d:f5:d2:56:1d: 3d:53:e8:88:93:c0:7f:99:b7:66:78:e4:04:2b:84: 92:75:20:1e:30:9e:98:e4:aa:3e:3d:55:18:67:51: 81:a6:e8:94:cb:cd:c3:9e:46:53:2c:1e:75:05:90: 39:f1:03:dd:63:16:9d:13:a0:26:35:0c:ba:86:6e: e9:9d:b2:9f:58:ea:bf:9b:c4:53:dd:8d:47:0e:0b: 92:55:2a:06:a5:b3:11:b2:02:cb:bf:72:4f:82:6d: 0e:df:0f:4a:be:ab:e2:f1:bd:37:71:39:49:1a:53: 4d:a5:2d:26:1f:86:e6:14:ae:23:df:7e:74:c5:10: e6:3b:bf:45:62:e7:0f:8e:fb:ec:df:a6:ba:b6:fa: 1e:33:0d:14:34:06:99:28:c8:ca:3c:4d:53:6b:21: 05:19:0e:8c:ff:6d:07:58:b8:73:6d:96:d9:88:17: 11:fe:ac:bf:97:7d:ad:c0:5e:a5:45:7a:90:4a:37: b7:0f:73:d0:f2:48:a5:18:53:c6:cc:e4:2b:12:a1: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:01:4C:AF:91:59:20:E3:17:FD:69:0F:85:3D:FA:92:B5:FC:D0:AA X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:23:20:dd:f0:b6:72:a1:15:35:b2:d0:20:18:e6:37:3b: 18:08:ef:d6:e6:88:12:f7:ad:41:02:06:54:d9:7c:d2:32:cd: 3a:06:c5:ef:1d:7b:5f:98:f1:c9:28:86:f9:ac:b3:4c:3d:cf: 12:41:5c:62:94:1a:27:6f:b1:63:74:c4:86:0a:31:d7:0a:04: 6d:73:ac:74:b4:78:77:55:fd:b6:00:73:d5:43:c6:44:da:aa: 0d:43:63:23:34:10:d7:42:1c:f5:15:aa:2f:a9:9d:4e:8f:ae: 2d:e4:7e:ad:c5:b6:fe:90:14:dd:fa:35:de:74:d7:2d:4a:e2: 78:00:78:05:dc:e6:5d:67:a9:c6:2f:9f:a9:7b:93:31:e1:46: d2:e9:d6:45:f2:14:47:e8:ed:b4:5b:0f:f4:0b:ec:82:74:a7: 58:44:0f:74:56:0f:fd:51:0e:41:ec:23:85:22:49:c9:55:82: e0:70:4c:41:0d:ba:28:0d:fc:c5:57:56:80:3e:8f:b7:a7:e5: 69:72:22:22:b8:d6:f1:46:d1:02:94:89:44:14:37:41:99:df: 2b:b5:d9:53:8f:a3:64:1e:e0:b3:a4:8c:73:f5:4b:04:43:4a: 97:f5:23:07:16:0c:12:01:18:0a:50:44:11:c9:83:32:ba:15: 78:38:a2:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNTEwMTc1NDU3WhcNMjUwNTE3MTc1NDU3WjAYMRYwFAYD VQQDEw02ODFmOTJmMS01YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4M509RtcIuu6BFVC1MfLssbIov4v7GwBnmMkbxW8bwLafzeFSLw0kXxCopL 9GYbeWmJc3CIffXSVh09U+iIk8B/mbdmeOQEK4SSdSAeMJ6Y5Ko+PVUYZ1GBpuiU y83DnkZTLB51BZA58QPdYxadE6AmNQy6hm7pnbKfWOq/m8RT3Y1HDguSVSoGpbMR sgLLv3JPgm0O3w9Kvqvi8b03cTlJGlNNpS0mH4bmFK4j3350xRDmO79FYucPjvvs 36a6tvoeMw0UNAaZKMjKPE1TayEFGQ6M/20HWLhzbZbZiBcR/qy/l32twF6lRXqQ Sje3D3PQ8kilGFPGzOQrEqGHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOABTK+R WSDjF/1pD4U9+pK1/NCqMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmjCMg3fC2cqEVNbLQIBjmNzsYCO/W5ogS961BAgZU2XzSMs06BsXv HXtfmPHJKIb5rLNMPc8SQVxilBonb7FjdMSGCjHXCgRtc6x0tHh3Vf22AHPVQ8ZE 2qoNQ2MjNBDXQhz1FaovqZ1Oj64t5H6txbb+kBTd+jXedNctSuJ4AHgF3OZdZ6nG L5+pe5Mx4UbS6dZF8hRH6O20Ww/0C+yCdKdYRA90Vg/9UQ5B7COFIknJVYLgcExB DbooDfzFV1aAPo+3p+VpciIiuNbxRtEClIlEFDdBmd8rtdlTj6NkHuCzpIxz9UsE Q0qX9SMHFgwSARgKUEQRyYMyuhV4OKKx -----END CERTIFICATE-----Generated at Mon May 12 19:22:25 2025 by rpki-client