$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: bkvJOJc7+Ltr9AapmuAYgXdLPOq+4n0ftl1YkHZbGY0= Subject key identifier: 64:55:C5:F6:24:47:10:75:2C:ED:CA:0B:7E:A7:54:03:CF:55:76:4B Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 02F3 Signing time: Sun 11 May 2025 00:50:47 +0000 Manifest this update: Sun 11 May 2025 00:50:47 +0000 Manifest next update: Sun 18 May 2025 00:50:47 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: fg2x2HOTFv8l2ksixUzM5Mee+qW2A/OmIewDpoU0/a0=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dQViwk1iBrJGr2fBwaPfSS5giTEUliECggf7nT0Erg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: May 11 00:50:47 2025 GMT Not After : May 18 00:50:47 2025 GMT Subject: CN=681ff467-a376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:c2:4b:16:4a:c4:fa:15:da:e6:9c:04:10: 69:e3:ab:b8:0b:e7:00:59:5c:ed:8d:bc:7d:96:52: 94:67:ee:ac:45:6d:4b:c5:eb:56:92:61:f8:41:86: b1:5c:2f:1e:83:ff:32:44:ff:f1:30:af:77:8a:4a: 24:82:e6:73:b9:d0:f3:2d:35:f3:9f:e9:28:33:ee: 4a:0e:06:8a:4c:c3:81:40:a0:6e:39:fe:e3:e1:64: fa:c7:97:8d:11:26:bf:f7:95:bb:55:9a:b5:96:f9: 3c:24:45:ce:f4:13:4f:c4:9e:f3:9d:83:6a:e6:c0: ba:9c:3f:2d:1c:d5:b5:ed:7f:4c:7c:3a:71:6b:ad: ba:f3:fd:13:78:fc:b9:71:84:ee:e7:a5:95:25:aa: ff:c8:37:e9:c3:5f:3f:be:19:01:16:d7:97:9d:b2: 38:59:c1:c6:bd:c7:40:d7:11:59:ce:2e:78:e0:65: 40:98:87:ce:46:61:fd:57:73:42:ac:d6:ec:e6:bb: f0:ec:98:72:15:36:39:5a:31:30:77:9f:67:7c:7e: 23:2f:48:89:39:66:2a:95:28:e9:c7:6c:de:2a:a3: a6:a0:42:59:82:5c:2f:84:09:30:0d:96:2b:51:84: 4e:24:e4:e1:84:87:13:fd:11:c7:41:00:0b:35:65: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:C5:F6:24:47:10:75:2C:ED:CA:0B:7E:A7:54:03:CF:55:76:4B X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:8f:09:ee:73:e3:0b:8a:6d:6b:bb:95:8c:f7:65:53:31:9a: 39:1f:ce:79:d6:68:b4:f6:2d:4c:f4:c4:c2:00:bc:e4:14:8b: 12:c3:37:dd:dd:73:76:02:90:28:50:1e:4f:af:a7:c6:bf:21: d0:79:16:8a:4e:19:b1:a8:f8:2c:c4:9b:03:c4:81:82:6a:3e: 0d:e9:59:2a:00:73:a6:d5:3c:f0:24:77:63:40:7d:43:56:77: f2:9b:ec:df:68:40:a8:5e:52:2c:fa:51:73:c3:95:b0:9a:de: 2c:fa:7a:96:56:ab:f2:12:d8:c7:d9:89:00:60:bd:70:96:e8: 7d:74:13:4f:2e:dc:e0:93:76:6e:86:8b:f9:3a:6a:7d:16:6d: 18:bc:f5:ca:c1:07:13:d2:ed:09:56:89:d3:43:fa:f2:90:77: a9:3f:6b:b6:39:ce:28:4f:a6:eb:1c:1e:aa:81:a7:d2:4a:fb: 2f:ec:81:aa:2b:19:83:ca:35:ab:48:10:c2:5b:1f:4c:45:3c: b4:9c:a3:35:2c:4d:d9:c4:d8:fd:a9:8d:9e:9b:55:5a:a2:d7: fa:33:27:84:ba:e0:91:ba:da:26:da:ec:c4:52:37:80:19:cd: 07:cf:ce:8f:1a:eb:02:16:73:07:a2:49:bc:fe:16:5d:96:b2: a9:89:68:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjUwNTExMDA1MDQ3WhcNMjUwNTE4MDA1MDQ3WjAYMRYwFAYD VQQDEw02ODFmZjQ2Ny1hMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOzCSxZKxPoV2uacBBBp46u4C+cAWVztjbx9llKUZ+6sRW1LxetWkmH4QYax XC8eg/8yRP/xMK93ikokguZzudDzLTXzn+koM+5KDgaKTMOBQKBuOf7j4WT6x5eN ESa/95W7VZq1lvk8JEXO9BNPxJ7znYNq5sC6nD8tHNW17X9MfDpxa6268/0TePy5 cYTu56WVJar/yDfpw18/vhkBFteXnbI4WcHGvcdA1xFZzi544GVAmIfORmH9V3NC rNbs5rvw7JhyFTY5WjEwd59nfH4jL0iJOWYqlSjpx2zeKqOmoEJZglwvhAkwDZYr UYROJOThhIcT/RHHQQALNWWScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRVxfYk RxB1LO3KC36nVAPPVXZLMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQjwnuc+MLim1ru5WM92VTMZo5H8551mi09i1M9MTCALzkFIsSwzfd 3XN2ApAoUB5Pr6fGvyHQeRaKThmxqPgsxJsDxIGCaj4N6VkqAHOm1TzwJHdjQH1D Vnfym+zfaECoXlIs+lFzw5Wwmt4s+nqWVqvyEtjH2YkAYL1wluh9dBNPLtzgk3Zu hov5Omp9Fm0YvPXKwQcT0u0JVonTQ/rykHepP2u2Oc4oT6brHB6qgafSSvsv7IGq KxmDyjWrSBDCWx9MRTy0nKM1LE3ZxNj9qY2em1Vaotf6MyeEuuCRutom2uzEUjeA Gc0Hz86PGusCFnMHokm8/hZdlrKpiWh5 -----END CERTIFICATE-----Generated at Sun May 11 03:42:10 2025 by rpki-client