$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: H/8KPmApiGMQJvLvuMSnGnVJywTuMQ9xn9+ju6A8/zk= Subject key identifier: E3:9D:F2:06:EB:AB:EC:A1:16:6C:BA:94:46:64:D6:71:6B:D7:BE:4B Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: FC Signing time: Tue 13 May 2025 04:23:45 +0000 Manifest this update: Tue 13 May 2025 04:23:44 +0000 Manifest next update: Tue 20 May 2025 04:23:44 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: 9E1fG1O3dt23K7Xo+sCXBjV9gADzy7dgeGXgDosXG40=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Validity Not Before: May 13 04:23:44 2025 GMT Not After : May 20 04:23:44 2025 GMT Subject: CN=6822c951-2b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:62:d9:14:35:90:d8:34:bf:a7:a7:f8:26: 85:ec:26:a0:a6:28:c9:37:84:dd:09:cd:b8:3c:15: 80:3d:b2:8a:73:ec:90:01:5b:4e:a9:32:9e:9f:d1: aa:52:46:b0:b6:ae:6d:94:1b:fd:e6:45:d3:b8:55: 4f:47:9b:e5:9a:3f:22:d0:23:f6:7c:93:e9:eb:a7: 79:10:fc:d3:13:a8:76:df:51:37:09:45:bb:e2:0d: 62:70:17:06:ca:43:00:4c:b3:05:2d:a4:88:3b:40: 9d:3e:a2:88:7f:3d:7e:61:d2:9a:b7:c1:75:76:6f: fe:69:3e:24:80:98:55:63:4b:77:29:85:07:24:bc: 9f:66:bc:88:49:63:00:10:35:ce:73:2e:be:b6:64: 51:d8:65:34:3f:1e:45:81:23:f3:86:2b:9c:94:0a: a6:b0:28:7d:6c:75:18:58:8e:df:0f:97:b6:8d:ea: 08:25:10:37:1d:78:85:86:9a:6a:7f:4e:2a:ff:85: 0e:57:b7:76:73:f9:90:4b:3c:e8:5f:bc:c7:27:90: 89:91:5f:1d:94:ee:e0:63:7a:70:45:00:80:39:40: e3:60:79:e8:3e:4f:e1:3a:30:90:42:f5:ea:90:ab: 19:09:0e:68:30:97:1a:38:be:e9:20:47:80:3d:ac: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:F2:06:EB:AB:EC:A1:16:6C:BA:94:46:64:D6:71:6B:D7:BE:4B X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e8:05:a9:b8:27:2a:98:4b:1d:d8:26:a0:09:e0:f5:c4:d0: 93:3d:03:3f:6d:e1:1f:d3:3e:50:8f:a9:da:05:77:39:94:25: d9:24:22:f5:21:ab:61:dd:b9:c3:08:89:56:1a:fd:79:21:1e: 12:a6:ed:15:7f:7f:ff:8a:54:5c:05:14:13:c1:e5:36:20:7e: 2e:36:6e:83:f9:1d:b9:cc:6b:b4:2a:88:33:93:cd:a4:d2:ee: 82:da:f3:e2:b6:29:30:86:8e:ba:6c:ce:f4:5b:f6:af:f8:b9: 6e:2e:44:be:3c:ab:90:4f:96:e3:73:31:fb:9d:18:a2:78:d3: 89:1d:c6:ec:91:d0:e8:d3:3d:d4:08:09:3b:e1:f0:6f:b4:b5: ef:3a:6c:e2:4b:c7:36:99:d1:66:7c:7a:52:fb:b1:ba:3b:4d: fe:71:b0:89:3b:4b:b9:a3:56:6d:2d:b5:59:15:3d:38:c6:48: b5:f6:00:cb:c1:93:84:e0:00:b6:be:47:8b:1e:35:3b:ae:e1: 9d:f8:a5:a6:90:62:6f:98:db:52:7a:2a:bf:15:68:78:93:97: a3:22:ce:80:73:0e:7a:da:47:ce:54:ce:3e:dd:ac:3c:a7:bf: a3:4c:ce:9b:65:56:0a:22:4b:25:0a:bb:f1:9f:fd:23:25:3f: 02:66:84:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1 RTZEQjJCRDEwHhcNMjUwNTEzMDQyMzQ0WhcNMjUwNTIwMDQyMzQ0WjAYMRYwFAYD VQQDEw02ODIyYzk1MS0yYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1Bi2RQ1kNg0v6en+CaF7CagpijJN4TdCc24PBWAPbKKc+yQAVtOqTKen9Gq Ukawtq5tlBv95kXTuFVPR5vlmj8i0CP2fJPp66d5EPzTE6h231E3CUW74g1icBcG ykMATLMFLaSIO0CdPqKIfz1+YdKat8F1dm/+aT4kgJhVY0t3KYUHJLyfZryISWMA EDXOcy6+tmRR2GU0Px5FgSPzhiuclAqmsCh9bHUYWI7fD5e2jeoIJRA3HXiFhppq f04q/4UOV7d2c/mQSzzoX7zHJ5CJkV8dlO7gY3pwRQCAOUDjYHnoPk/hOjCQQvXq kKsZCQ5oMJcaOL7pIEeAPawUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOd8gbr q+yhFmy6lEZk1nFr175LMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1 QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6AWpuCcqmEsd2CagCeD1xNCTPQM/beEf0z5Qj6naBXc5lCXZJCL1 Iath3bnDCIlWGv15IR4Spu0Vf3//ilRcBRQTweU2IH4uNm6D+R25zGu0Kogzk82k 0u6C2vPitikwho66bM70W/av+LluLkS+PKuQT5bjczH7nRiieNOJHcbskdDo0z3U CAk74fBvtLXvOmziS8c2mdFmfHpS+7G6O03+cbCJO0u5o1ZtLbVZFT04xki19gDL wZOE4AC2vkeLHjU7ruGd+KWmkGJvmNtSeiq/FWh4k5ejIs6Acw562kfOVM4+3aw8 p7+jTM6bZVYKIkslCrvxn/0jJT8CZoRo -----END CERTIFICATE-----Generated at Wed May 14 10:36:25 2025 by rpki-client