$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: 0elO4l45T7+eaMQq+IS3sukBw45rW5HUQGZJR/MZRCc= Subject key identifier: CA:38:D2:19:DF:4B:65:C6:0F:A8:59:02:50:E4:E2:C9:5C:EE:95:04 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D23 Signing time: Mon 30 Jun 2025 18:14:57 +0000 Manifest this update: Mon 30 Jun 2025 18:14:56 +0000 Manifest next update: Mon 07 Jul 2025 18:14:56 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: DFZpDgsSupt+6JIKtRpmtZN1k7QVgdbG2PsPLpl5vqA=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Jun 30 18:14:56 2025 GMT Not After : Jul 7 18:14:56 2025 GMT Subject: CN=6862d420-2f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:3b:bf:63:e2:c4:eb:25:60:66:ac:0d:37: 7d:34:b3:25:7f:83:0b:08:51:ac:ce:c4:12:94:1e: 6f:4d:f9:ef:21:e2:7d:a8:f3:5d:2c:09:0d:5b:43: 55:39:39:76:a6:f3:78:67:8b:6b:70:12:47:de:49: f6:e4:38:0c:14:80:21:d7:db:35:01:87:25:5f:8d: 5d:49:58:e3:88:44:3a:b7:fd:35:76:34:35:bd:73: 38:b0:a2:92:04:c6:24:7e:e3:82:4d:44:6c:e1:56: 28:58:d1:73:bf:13:4b:13:87:35:e2:4c:88:fb:45: a0:9a:82:cf:49:15:23:fb:fb:74:a2:bb:f1:bc:54: ff:aa:df:71:ff:47:b1:b9:5b:41:03:1a:f8:5a:15: e4:ad:ee:26:a1:fe:bc:a5:0c:d5:fe:63:35:4f:84: 13:02:71:6c:08:cd:75:2b:bc:f8:f2:71:ea:2d:ef: b5:1d:3f:8c:f1:79:e7:bb:25:c2:7e:d4:b5:a8:fb: 17:44:17:48:13:d3:83:57:db:47:57:e6:fc:82:b9: 13:b8:ae:3a:8a:9d:f5:ba:50:6e:30:16:64:eb:02: 12:b6:76:a6:4a:8f:43:19:9e:d2:c6:bc:9c:5c:fa: b3:03:2e:3c:49:51:39:e7:3b:11:e6:c8:ed:f0:af: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:D2:19:DF:4B:65:C6:0F:A8:59:02:50:E4:E2:C9:5C:EE:95:04 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e4:c0:8d:4b:a9:55:46:44:20:6e:2e:88:0d:5a:03:2e:b0: 52:d1:4a:3b:4d:b2:54:a5:0a:a1:08:84:7d:53:a4:f0:5b:d4: 3a:db:90:5b:1f:04:13:f3:72:e2:ba:2d:99:c3:6c:f5:1e:29: c9:20:0a:5c:a7:0a:01:e4:b8:3c:55:cb:f1:ad:69:ee:37:82: 00:6d:60:8b:1f:31:ae:39:c3:51:0c:d5:e9:bd:fc:dd:55:31: 77:f8:75:4f:99:1c:00:24:1c:bf:3a:d1:f4:33:50:d4:d1:68: df:86:14:4c:01:d9:8f:c1:a2:d4:03:ba:43:2a:f8:55:b0:26: b8:fa:1d:e3:1d:fb:3d:e3:67:b8:82:fb:0f:bd:1e:90:d5:96: f7:f0:e8:19:45:dd:65:f2:9a:35:3f:2b:eb:63:a0:ab:a9:67: f1:40:a8:29:cc:19:05:18:9d:34:e3:13:f3:5b:9a:24:e0:1b: 11:19:fa:41:de:a6:db:27:0c:d4:ef:a5:f3:54:b4:b9:06:6c: 26:7f:55:0a:f4:3d:7d:fe:4d:91:9c:9f:cd:64:2e:2a:29:80: 61:b1:f4:04:e2:fd:31:24:c9:9e:bf:ea:40:59:d9:47:a0:ec: 7f:ed:0c:3d:9b:23:4f:20:12:23:7d:48:65:16:57:d4:29:16: 5c:63:d7:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNjMwMTgxNDU2WhcNMjUwNzA3MTgxNDU2WjAYMRYwFAYD VQQDEw02ODYyZDQyMC0yZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/o7v2PixOslYGasDTd9NLMlf4MLCFGszsQSlB5vTfnvIeJ9qPNdLAkNW0NV OTl2pvN4Z4trcBJH3kn25DgMFIAh19s1AYclX41dSVjjiEQ6t/01djQ1vXM4sKKS BMYkfuOCTURs4VYoWNFzvxNLE4c14kyI+0WgmoLPSRUj+/t0orvxvFT/qt9x/0ex uVtBAxr4WhXkre4mof68pQzV/mM1T4QTAnFsCM11K7z48nHqLe+1HT+M8XnnuyXC ftS1qPsXRBdIE9ODV9tHV+b8grkTuK46ip31ulBuMBZk6wIStnamSo9DGZ7Sxryc XPqzAy48SVE55zsR5sjt8K++OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo40hnf S2XGD6hZAlDk4slc7pUEMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg5MCNS6lVRkQgbi6IDVoDLrBS0Uo7TbJUpQqhCIR9U6TwW9Q625Bb HwQT83Liui2Zw2z1HinJIApcpwoB5Lg8VcvxrWnuN4IAbWCLHzGuOcNRDNXpvfzd VTF3+HVPmRwAJBy/OtH0M1DU0WjfhhRMAdmPwaLUA7pDKvhVsCa4+h3jHfs942e4 gvsPvR6Q1Zb38OgZRd1l8po1PyvrY6CrqWfxQKgpzBkFGJ004xPzW5ok4BsRGfpB 3qbbJwzU76XzVLS5Bmwmf1UK9D19/k2RnJ/NZC4qKYBhsfQE4v0xJMmev+pAWdlH oOx/7Qw9myNPIBIjfUhlFlfUKRZcY9dj -----END CERTIFICATE-----Generated at Wed Jul 2 16:34:15 2025 by rpki-client