$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json) Hash identifier: BrCHvlFQZAQOjIK9WPqudzU+ybWVP6GKq8kQG8NxAjQ= Subject key identifier: 29:FE:A0:9C:AD:85:B8:49:F1:92:75:A0:98:54:16:06:D4:0D:15:FF Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft Manifest number: 059B Signing time: Tue 06 May 2025 23:05:09 +0000 Manifest this update: Tue 06 May 2025 23:05:09 +0000 Manifest next update: Tue 13 May 2025 23:05:09 +0000 Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: VXKJaL2C6qtd2UH+gkCyM5VMfQLof4wNQQm6oBvjjNM=) 2: 6EEB53FA4BD411EFA40C1971C4F9AE02.roa (hash: ZKEtNs5pjkORrA3JYYM4cFPHK0adQ71zM6XEmyT1+sc=) 3: 997B94904BD411EFA1F89471C4F9AE02.roa (hash: GywqdR08x5XwZmIiACfbSJiW1pU4VigkHs0qwtT3UB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Validity Not Before: May 6 23:05:09 2025 GMT Not After : May 13 23:05:09 2025 GMT Subject: CN=681a95a5-c00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:05:b9:05:a9:24:6d:a3:87:96:33:74:ec: ab:89:25:75:17:0e:56:39:71:0e:34:36:e8:d2:d3: 50:1c:0c:f5:73:c8:56:a9:23:8c:77:ca:85:99:f2: c3:87:82:a3:c2:79:52:f6:7d:e5:dd:77:55:fd:ef: 1c:0d:03:12:3f:77:47:5e:e8:57:3c:6a:b3:4c:09: ea:eb:ff:bb:fa:99:58:8f:0d:cd:89:d7:cd:a9:8f: 77:e8:0c:fc:06:ce:2c:82:18:31:d6:0f:7e:77:dc: b6:80:63:cd:5f:e3:a5:ec:bc:17:2e:e7:90:cd:3f: d5:7e:43:0c:37:c9:51:b9:da:99:e7:5a:90:c6:b0: e5:b1:b5:fc:19:a9:4a:65:c9:81:87:06:b9:98:52: e2:75:54:74:b9:e2:d4:7a:4b:a5:8c:68:4f:3e:55: 52:fd:09:cf:ef:cd:3d:3b:7c:53:f8:86:23:a0:d9: a6:72:af:55:38:f3:41:ee:bf:99:5d:06:85:01:b9: fe:70:b8:46:e6:a1:c6:90:62:a5:5a:6e:16:cd:42: ac:85:17:f4:ac:21:5d:25:20:03:19:62:ef:e7:bb: 7a:cb:18:ef:15:e0:54:bf:b9:46:df:09:1f:60:7a: f8:0e:fc:00:d1:bf:8d:f8:1c:66:a2:8d:27:3f:04: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FE:A0:9C:AD:85:B8:49:F1:92:75:A0:98:54:16:06:D4:0D:15:FF X509v3 Authority Key Identifier: keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0f:33:d9:46:0b:a7:df:ab:49:fb:e4:51:a0:30:03:db:29: d5:24:96:b4:53:7d:f9:64:ba:9d:d1:15:cb:dc:e1:e7:f0:64: 80:61:14:5b:a7:27:0d:fa:56:42:34:ab:5e:c4:d5:b0:ee:75: 88:c4:fc:09:92:ab:1a:6b:95:aa:7e:9a:8c:2f:ff:60:0b:6c: c2:c0:73:5a:af:2c:f2:74:82:97:56:0c:de:c3:2b:b4:eb:c5: 0b:ee:7d:89:9e:96:8e:36:94:c7:02:62:a2:91:cf:d0:80:52: de:91:18:68:e9:75:4c:f3:1e:ee:f4:a8:b3:74:0c:98:f6:86: 40:9f:0b:02:63:13:34:9e:ab:03:fb:52:b8:d6:cb:10:34:12: 2e:37:fa:54:f7:cd:4e:54:46:3d:84:2a:14:f2:6a:3d:ca:90: a3:6c:bc:3d:65:22:90:3c:74:0c:08:fb:92:e6:ee:c4:f6:b9: 9d:c9:05:42:4a:18:4b:fb:04:77:68:1c:e7:ca:c4:9f:06:57: 07:23:30:d7:08:09:6e:6c:47:30:dc:06:e9:5b:cc:eb:78:16: 0f:60:6b:ae:f7:ee:b9:58:74:1d:ac:07:40:77:97:0f:a1:33: b2:f1:c0:85:b2:88:0f:25:db:75:61:ef:be:d0:a6:6b:9e:83: b6:89:e7:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE MTFERTE3ODcwHhcNMjUwNTA2MjMwNTA5WhcNMjUwNTEzMjMwNTA5WjAYMRYwFAYD VQQDEw02ODFhOTVhNS1jMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6D4FuQWpJG2jh5YzdOyriSV1Fw5WOXEONDbo0tNQHAz1c8hWqSOMd8qFmfLD h4KjwnlS9n3l3XdV/e8cDQMSP3dHXuhXPGqzTAnq6/+7+plYjw3NidfNqY936Az8 Bs4sghgx1g9+d9y2gGPNX+Ol7LwXLueQzT/VfkMMN8lRudqZ51qQxrDlsbX8GalK ZcmBhwa5mFLidVR0ueLUekuljGhPPlVS/QnP7809O3xT+IYjoNmmcq9VOPNB7r+Z XQaFAbn+cLhG5qHGkGKlWm4WzUKshRf0rCFdJSADGWLv57t6yxjvFeBUv7lG3wkf YHr4DvwA0b+N+Bxmoo0nPwQLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn+oJyt hbhJ8ZJ1oJhUFgbUDRX/MB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGOS80RUMyQ0Q3NENGNEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRY OGVLZHdSbFJXRjNSSGVGNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZDzPZRgun36tJ++RRoDAD2ynVJJa0U335ZLqd0RXL3OHn8GSAYRRb pycN+lZCNKtexNWw7nWIxPwJkqsaa5WqfpqML/9gC2zCwHNaryzydIKXVgzewyu0 68UL7n2JnpaONpTHAmKikc/QgFLekRho6XVM8x7u9KizdAyY9oZAnwsCYxM0nqsD +1K41ssQNBIuN/pU981OVEY9hCoU8mo9ypCjbLw9ZSKQPHQMCPuS5u7E9rmdyQVC ShhL+wR3aBznysSfBlcHIzDXCAlubEcw3AbpW8zreBYPYGuu9+65WHQdrAdAd5cP oTOy8cCFsogPJdt1Ye++0KZrnoO2ieei -----END CERTIFICATE-----Generated at Thu May 8 12:39:57 2025 by rpki-client