$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: XfE3cfHc9JrjtKtsTLi9LxXs1qCoLFVuU8OddKs5J5o= Subject key identifier: EC:A2:DB:01:AB:19:33:91:90:DE:19:DB:95:BB:21:97:7C:0D:10:6E Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 0220 Signing time: Thu 15 May 2025 01:57:25 +0000 Manifest this update: Thu 15 May 2025 01:57:25 +0000 Manifest next update: Thu 22 May 2025 01:57:25 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: oQIdLiECOwirQpbqwNFnspZWQPOYDLbGhlXx5LKi34k=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: XW5eQLHT9pjam4DydX+MPOf7MxBb8MiFoha5U/4pDCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: May 15 01:57:25 2025 GMT Not After : May 22 01:57:25 2025 GMT Subject: CN=68254a05-2a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2b:9c:0a:31:ee:11:b4:ce:f2:df:4b:55:9e: 31:fb:68:0d:b6:e5:e9:92:ac:44:7d:50:a6:4b:a1: 28:8d:ea:ce:f1:dd:3a:c4:45:ef:3a:7f:fb:f0:74: 39:29:26:64:45:7e:ff:49:08:52:e9:77:e8:1b:33: cb:b8:2e:80:80:cf:fa:6c:f7:63:3c:1d:ef:aa:6a: 38:06:f3:ed:6a:25:2a:1d:c1:8d:aa:7a:63:87:2d: b5:e6:48:b0:58:23:75:e6:2f:3a:74:a0:36:5a:bf: bf:89:ae:68:56:ad:a2:d6:68:51:d0:1e:77:3e:21: 7c:91:ff:12:fb:81:f1:75:03:b9:36:b5:ae:3e:54: 2e:1d:28:94:0a:04:5f:aa:c0:15:cb:0b:31:45:96: 12:58:be:db:f9:df:21:da:e9:5f:67:8a:06:af:04: b3:5a:db:7c:5a:18:84:23:7a:af:b6:70:4d:d0:d0: 51:d5:16:2e:88:d0:2a:a7:9f:b9:ed:e9:9b:05:7c: 91:e3:e8:33:52:47:cd:93:d7:ca:48:8f:35:b2:7b: da:c5:d7:e8:20:d8:0f:a7:44:3f:6e:33:fd:2b:44: ef:fb:de:89:30:8e:8d:29:3d:13:8f:e8:ed:35:f9: 9f:85:c8:e8:a5:cf:d7:ed:ec:02:72:23:48:17:42: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A2:DB:01:AB:19:33:91:90:DE:19:DB:95:BB:21:97:7C:0D:10:6E X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:ec:d6:7e:b7:2a:c6:d6:2d:49:07:bb:01:f3:1f:8b:58: d8:39:78:2a:2f:ec:53:96:3c:37:cb:f0:cd:c6:72:bf:2d:7f: 8e:09:2b:b9:c7:81:b2:15:50:18:3e:10:e0:b8:72:d1:24:e9: 62:d7:14:f1:d3:0b:b2:96:87:fe:80:7f:18:70:44:f4:2d:66: ab:00:08:d3:df:2a:e6:03:4e:20:b3:23:19:59:8a:7f:2c:d7: 09:a6:90:b3:c6:6e:58:60:73:65:5c:b7:78:cf:63:10:40:ef: 4a:da:7e:48:d3:ee:a6:a0:a4:92:45:e5:e6:7a:20:b7:05:27: a1:9d:c1:11:63:a9:aa:74:46:e1:e9:92:b3:09:2e:28:65:a5: 42:c0:bf:d4:f4:35:1a:0c:b0:4f:60:db:4a:5c:2a:02:86:f0: 40:99:cb:a6:cb:e5:75:87:4f:a3:60:06:9f:42:dc:c6:25:a7: 09:8e:8a:2b:e8:f9:40:15:ff:bf:61:67:47:78:b6:20:8c:6b: 01:8a:4f:aa:4a:5c:15:e2:39:8a:fa:9c:13:b2:6a:ca:26:1a: 3a:9e:c0:e0:a6:f1:81:58:a6:6d:c4:c0:9e:12:73:20:26:a6: c9:08:1a:7f:1b:1e:63:d3:b4:6e:50:a9:be:36:d2:70:b7:90: 4b:f9:dd:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUwNTE1MDE1NzI1WhcNMjUwNTIyMDE1NzI1WjAYMRYwFAYD VQQDEw02ODI1NGEwNS0yYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iucCjHuEbTO8t9LVZ4x+2gNtuXpkqxEfVCmS6EojerO8d06xEXvOn/78HQ5 KSZkRX7/SQhS6XfoGzPLuC6AgM/6bPdjPB3vqmo4BvPtaiUqHcGNqnpjhy215kiw WCN15i86dKA2Wr+/ia5oVq2i1mhR0B53PiF8kf8S+4HxdQO5NrWuPlQuHSiUCgRf qsAVywsxRZYSWL7b+d8h2ulfZ4oGrwSzWtt8WhiEI3qvtnBN0NBR1RYuiNAqp5+5 7embBXyR4+gzUkfNk9fKSI81snvaxdfoINgPp0Q/bjP9K0Tv+96JMI6NKT0Tj+jt Nfmfhcjopc/X7ewCciNIF0LJJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyi2wGr GTORkN4Z25W7IZd8DRBuMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHkuzWfrcqxtYtSQe7AfMfi1jYOXgqL+xTljw3y/DNxnK/LX+OCSu5 x4GyFVAYPhDguHLRJOli1xTx0wuylof+gH8YcET0LWarAAjT3yrmA04gsyMZWYp/ LNcJppCzxm5YYHNlXLd4z2MQQO9K2n5I0+6moKSSReXmeiC3BSehncERY6mqdEbh 6ZKzCS4oZaVCwL/U9DUaDLBPYNtKXCoChvBAmcumy+V1h0+jYAafQtzGJacJjoor 6PlAFf+/YWdHeLYgjGsBik+qSlwV4jmK+pwTsmrKJho6nsDgpvGBWKZtxMCeEnMg JqbJCBp/Gx5j07RuUKm+NtJwt5BL+d1S -----END CERTIFICATE-----Generated at Thu May 15 06:54:45 2025 by rpki-client