$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft File: DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json) Hash identifier: nnTflFCp6wFVSDnzITWwQT58jpbG/gh8YVT4/5BDGX4= Subject key identifier: 82:4B:23:F9:92:A8:B2:43:35:A5:F5:C2:72:2C:63:47:13:F6:11:E6 Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft Manifest number: 5D Signing time: Thu 03 Jul 2025 07:21:42 +0000 Manifest this update: Thu 03 Jul 2025 07:21:42 +0000 Manifest next update: Thu 10 Jul 2025 07:21:42 +0000 Files and hashes: 1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: YjhMbVjiBET+kh/2YJ5OwlPTuFTLwzUmXPjPtfIt7kQ=) 2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Validity Not Before: Jul 3 07:21:42 2025 GMT Not After : Jul 10 07:21:42 2025 GMT Subject: CN=68662f86-e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:ae:7a:43:b2:24:da:63:f7:9f:51:01:17: 92:89:bd:1c:81:0c:bc:ee:b2:00:7a:77:59:81:0d: 17:6e:25:0a:a4:a9:a3:52:7a:df:08:77:d2:ca:12: e9:27:b3:ef:a1:c9:9a:f5:82:eb:98:15:c0:a6:2b: 39:83:02:be:52:1a:de:03:6b:20:ab:38:2c:f9:e4: 65:1a:20:fe:82:e5:ff:c0:4e:87:ac:b2:06:63:8b: e8:66:9e:31:49:8b:0c:ab:df:e2:a1:da:21:73:de: 86:b5:3d:1b:dd:f5:84:af:ff:69:de:82:ae:04:f4: 06:37:f4:ac:5d:eb:9b:48:ed:41:5d:48:13:f3:8a: a0:b0:fa:15:56:4b:12:28:64:63:58:60:f3:9d:17: af:39:28:80:3c:79:80:ad:ff:74:0f:47:c4:47:17: c6:a5:80:c3:8a:0e:c4:32:24:3a:54:93:58:78:5b: 03:e5:4c:a5:1a:8d:b9:cf:b8:53:65:2a:f7:3a:e3: a3:a1:d3:8f:ed:89:a9:67:4d:1b:8b:66:e6:40:93: 34:17:b5:79:5c:6d:58:31:6f:63:16:50:01:d5:d0: 2b:22:59:b4:69:01:8e:43:66:86:fa:0f:01:f7:96: fd:77:97:81:9f:d7:03:37:b0:d5:70:28:f5:ff:25: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:23:F9:92:A8:B2:43:35:A5:F5:C2:72:2C:63:47:13:F6:11:E6 X509v3 Authority Key Identifier: keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:58:18:5f:c4:88:24:ae:a8:30:fb:92:93:b6:27:d8:95:85: 56:08:f2:34:2c:c5:88:53:4f:ef:52:67:be:0f:90:ec:38:71: 96:9d:4d:14:51:43:6b:c7:89:7b:ad:6a:5e:ff:af:d0:7e:2a: 4e:a7:ce:4d:b8:fb:24:18:35:a5:60:83:ff:ff:93:52:cb:34: 62:2e:99:65:77:3b:d3:6a:42:72:89:e8:1e:12:ba:24:76:ce: 81:4e:06:67:3e:68:a3:fe:4c:04:2d:9b:ca:86:89:f6:00:dc: b0:ca:79:a4:e6:cb:54:fc:0f:86:b1:66:6d:16:61:94:a1:f6: 26:b6:be:3e:6a:ba:9c:10:c6:49:62:24:57:dd:e7:88:44:b9: 8d:3a:04:84:bf:57:2a:17:aa:95:b4:54:39:db:f2:93:09:84: cd:5a:13:b0:c8:09:d6:8c:d9:2a:6b:fc:f7:d3:ff:fe:09:e2: cd:b8:5c:a9:be:92:08:e0:08:41:41:e8:8b:8e:24:6e:d7:4f: 94:eb:9e:0a:7e:fa:37:53:32:bf:0b:08:b4:6d:2a:8d:c1:60: ea:f1:20:8f:74:08:07:81:82:78:e8:e9:92:6c:8b:83:6f:9b: c5:c2:b5:58:2f:29:e0:a2:5f:20:5e:60:96:0b:3d:1f:7b:74: 38:ff:71:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODk1OTExMC8GA1UEBRMoMEU5MzY2MUFDMTYxNTRGNjVEMkEyRjc4MUEwMzFGMzVD OTMxMDEwMzAeFw0yNTA3MDMwNzIxNDJaFw0yNTA3MTAwNzIxNDJaMBgxFjAUBgNV BAMTDTY4NjYyZjg2LWUzM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuSa56Q7Ik2mP3n1EBF5KJvRyBDLzusgB6d1mBDRduJQqkqaNSet8Id9LKEukn s++hyZr1guuYFcCmKzmDAr5SGt4DayCrOCz55GUaIP6C5f/AToessgZji+hmnjFJ iwyr3+Kh2iFz3oa1PRvd9YSv/2negq4E9AY39Kxd65tI7UFdSBPziqCw+hVWSxIo ZGNYYPOdF685KIA8eYCt/3QPR8RHF8algMOKDsQyJDpUk1h4WwPlTKUajbnPuFNl Kvc646Oh04/tialnTRuLZuZAkzQXtXlcbVgxb2MWUAHV0CsiWbRpAY5DZob6DwH3 lv13l4Gf1wM3sNVwKPX/JdQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgksj+ZKo skM1pfXCcixjRxP2EeYwHwYDVR0jBBgwFoAUDpNmGsFhVPZdKi94GgMfNckxAQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OTU5L0JCRDE0MDhDQ0RF QjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBaZEtpOTRHZ01mTmNreEFR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHBObUdzRmhWUFpkS2k5NEdnTWZOY2t4QVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OTU5L0JCRDE0MDhDQ0RFQjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBa ZEtpOTRHZ01mTmNreEFRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZYGF/EiCSuqDD7kpO2J9iVhVYI8jQsxYhTT+9SZ74PkOw4cZadTRRR Q2vHiXutal7/r9B+Kk6nzk24+yQYNaVgg///k1LLNGIumWV3O9NqQnKJ6B4SuiR2 zoFOBmc+aKP+TAQtm8qGifYA3LDKeaTmy1T8D4axZm0WYZSh9ia2vj5qupwQxkli JFfd54hEuY06BIS/VyoXqpW0VDnb8pMJhM1aE7DICdaM2Spr/PfT//4J4s24XKm+ kgjgCEFB6IuOJG7XT5Trngp++jdTMr8LCLRtKo3BYOrxII90CAeBgnjo6ZJsi4Nv m8XCtVgvKeCiXyBeYJYLPR97dDj/cWA= -----END CERTIFICATE-----Generated at Fri Jul 4 12:02:39 2025 by rpki-client