$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: E7jooX7BLjW3GiCxHXQwW1gfpaxqq6uTfBlrVH/fzwA= Subject key identifier: 18:67:C6:2E:40:23:E1:35:F9:0C:0D:81:37:7E:D1:0F:4C:59:25:71 Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 0371 Signing time: Sun 11 May 2025 00:30:36 +0000 Manifest this update: Sun 11 May 2025 00:30:36 +0000 Manifest next update: Sun 18 May 2025 00:30:36 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: QmhLGTOLHsy418m4SymZSlfZfCjxnG72tPAegL7s5GI=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: May 11 00:30:36 2025 GMT Not After : May 18 00:30:36 2025 GMT Subject: CN=681fefac-fb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:22:89:3b:89:29:14:be:eb:f3:81:f8:88: ce:19:b0:b8:fc:08:bf:85:f9:e8:12:4f:0d:c6:20: a8:c2:b7:a8:c5:9f:7b:f7:81:6b:c0:47:92:22:bd: c3:c5:0a:3d:a0:72:76:6e:3a:63:2f:57:c4:83:da: 68:05:44:a6:54:95:f3:e8:0c:ec:5b:76:3a:7d:e7: 59:36:a5:65:83:48:c7:4f:78:46:05:72:6f:34:d0: 4f:11:df:69:d6:5f:6e:05:13:99:62:1f:f7:b9:02: 0a:7e:f0:3d:32:e9:d4:00:17:b3:56:3c:dd:0b:2b: 43:05:29:fd:f9:a9:41:cf:c9:a0:ce:02:67:27:0e: 63:a9:f6:f2:42:2c:d2:64:93:08:4a:18:bc:c4:94: 1d:f7:e0:99:80:56:f6:c6:3a:be:f7:47:44:fb:82: bb:60:32:9e:d9:df:24:7e:d3:04:18:e2:09:1d:aa: b3:6f:03:a0:f6:d0:96:3e:a6:af:9c:27:95:2c:8b: e8:74:2b:91:cb:83:5c:23:89:9c:40:1e:05:00:42: b8:a8:a7:10:c8:82:38:fb:11:05:49:56:07:04:81: 08:7b:07:d7:c3:c4:0e:cf:2b:bd:13:40:1c:df:da: 3c:97:0d:a8:a3:ee:88:b8:80:32:ac:63:07:ba:84: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:67:C6:2E:40:23:E1:35:F9:0C:0D:81:37:7E:D1:0F:4C:59:25:71 X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8b:57:24:a9:73:27:bf:28:90:db:44:7b:5a:a8:ea:10:6a: 5b:c4:92:78:87:ea:27:9a:ca:5c:75:69:51:33:3a:bd:97:d3: 5e:f8:40:11:c4:eb:ec:ab:92:ce:20:4c:18:85:6e:c4:35:bb: 66:50:5a:21:74:9e:2b:3b:2e:27:c9:0b:a1:99:16:9c:0e:55: 40:a0:55:0f:9a:09:33:e0:43:d2:e6:41:98:85:be:2c:38:9a: 34:f8:b0:d6:0c:94:52:ee:6c:75:a1:f1:80:7d:a7:10:7b:39: ed:3b:a3:07:d3:fd:ed:8a:68:51:e4:47:72:0c:40:1c:57:cb: d5:53:25:c7:a6:40:41:fe:b9:10:d8:64:9c:26:05:f5:88:f2: 95:86:d3:aa:0c:de:5c:e3:73:75:f8:9f:6e:d3:2b:07:cd:ef: 10:3d:d4:ca:9b:8d:48:f2:87:bd:0c:7a:3d:26:2d:10:91:a6: 14:25:69:b8:bd:4f:14:93:58:30:93:0d:f0:6e:ab:83:a4:3c: 4d:e5:35:53:12:e0:ab:c6:21:98:e9:c1:6f:ba:23:47:52:09: 8f:67:26:6f:a1:27:1b:d5:06:17:f3:d0:a5:a3:4d:9f:02:4c: ed:e0:71:06:c0:89:64:b0:8f:ff:d6:aa:28:a0:44:fc:76:6a: 1b:5f:bc:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwNTExMDAzMDM2WhcNMjUwNTE4MDAzMDM2WjAYMRYwFAYD VQQDEw02ODFmZWZhYy1mYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4EiiTuJKRS+6/OB+IjOGbC4/Ai/hfnoEk8NxiCowreoxZ9794FrwEeSIr3D xQo9oHJ2bjpjL1fEg9poBUSmVJXz6AzsW3Y6fedZNqVlg0jHT3hGBXJvNNBPEd9p 1l9uBROZYh/3uQIKfvA9MunUABezVjzdCytDBSn9+alBz8mgzgJnJw5jqfbyQizS ZJMIShi8xJQd9+CZgFb2xjq+90dE+4K7YDKe2d8kftMEGOIJHaqzbwOg9tCWPqav nCeVLIvodCuRy4NcI4mcQB4FAEK4qKcQyII4+xEFSVYHBIEIewfXw8QOzyu9E0Ac 39o8lw2oo+6IuIAyrGMHuoTD2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhnxi5A I+E1+QwNgTd+0Q9MWSVxMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKi1ckqXMnvyiQ20R7WqjqEGpbxJJ4h+onmspcdWlRMzq9l9Ne+EAR xOvsq5LOIEwYhW7ENbtmUFohdJ4rOy4nyQuhmRacDlVAoFUPmgkz4EPS5kGYhb4s OJo0+LDWDJRS7mx1ofGAfacQezntO6MH0/3timhR5EdyDEAcV8vVUyXHpkBB/rkQ 2GScJgX1iPKVhtOqDN5c43N1+J9u0ysHze8QPdTKm41I8oe9DHo9Ji0QkaYUJWm4 vU8Uk1gwkw3wbquDpDxN5TVTEuCrxiGY6cFvuiNHUgmPZyZvoScb1QYX89Clo02f Akzt4HEGwIlksI//1qoooET8dmobX7xx -----END CERTIFICATE-----Generated at Mon May 12 22:10:18 2025 by rpki-client