$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: cV1lDku5BLbacBX6yf6QjrIqF65JO0z47TXJCZxVRok= Subject key identifier: 19:38:FF:91:79:62:9D:A9:3C:17:B9:6B:F7:FA:BB:73:D5:6D:CB:FF Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0457 Signing time: Sat 10 May 2025 23:46:16 +0000 Manifest this update: Sat 10 May 2025 23:46:16 +0000 Manifest next update: Sat 17 May 2025 23:46:16 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: NV6m38RY+ArZsPsYvVN//yAhehuQJw4PUQXo++5QfaE=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: May 10 23:46:16 2025 GMT Not After : May 17 23:46:16 2025 GMT Subject: CN=681fe548-36bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:02:62:05:53:7b:50:cb:9a:e7:d1:1d:cb: c4:cc:45:df:43:13:3c:a0:32:34:b4:00:45:b1:5b: 5a:c7:94:2c:04:f5:85:bc:17:40:df:b6:91:a9:51: a6:10:50:c7:d2:35:8a:09:73:13:43:7c:63:db:84: 0c:88:31:bb:d3:a5:6b:45:a0:06:ff:d4:27:26:51: f2:a9:ac:05:28:41:e8:e8:26:33:0c:8e:a4:69:6a: 17:00:e8:36:41:f1:f8:ae:61:9b:cc:c5:7c:31:e4: 30:31:c8:23:88:c8:a0:ab:df:88:52:08:65:b0:ea: 20:28:42:4f:67:7b:ab:2b:77:4d:34:33:3b:ac:d0: 5a:78:90:8d:77:7b:7e:eb:22:0a:1e:54:18:e7:ed: da:ff:8c:6b:8b:c4:ba:e9:fb:fe:e1:66:b7:26:e3: 43:43:b4:d0:fe:af:f5:ce:05:7c:02:a2:c6:84:56: ee:1a:89:f3:d8:23:82:e8:c0:29:72:0c:56:9c:0c: f5:f4:ce:2a:2e:6c:7f:ff:77:8a:96:39:9f:9d:1a: 95:35:6d:db:37:6f:cf:fc:1e:ea:cb:c3:e4:72:8d: 18:9f:fb:df:c5:62:d0:57:bb:98:39:61:37:99:ee: 16:00:a3:42:ed:b9:8f:24:c4:67:b4:11:5a:09:37: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:FF:91:79:62:9D:A9:3C:17:B9:6B:F7:FA:BB:73:D5:6D:CB:FF X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ac:fe:af:e0:04:aa:22:89:36:08:bd:bb:3a:a4:2e:6c:d7: 23:5e:62:9a:45:fa:50:0d:6a:f9:2c:6d:38:9c:8e:46:67:9b: e7:9d:0a:92:10:ed:78:fc:de:c0:12:75:4d:cc:98:62:53:1d: d2:8a:4d:b3:4d:73:f8:b1:7b:07:fe:f7:68:37:47:ae:c0:b4: 52:49:b3:ab:f7:a5:73:89:16:b8:7e:1d:45:8a:1d:81:05:da: fb:62:34:4a:61:60:a8:22:2c:ee:61:57:b6:39:a2:e3:42:22: c7:33:f3:8c:65:32:77:d9:02:6b:b0:7c:87:bd:01:b4:80:55: ce:9f:47:3a:9f:71:81:58:cf:6e:91:ae:c6:34:f6:40:7c:26: b6:f0:88:93:10:e1:12:f7:fa:b7:6b:bb:7a:6f:8b:28:0e:48: ca:20:eb:0d:80:50:5a:07:80:7b:31:0e:74:13:ff:77:3a:ab: 06:5b:81:43:53:5c:5f:47:45:22:34:52:67:29:9f:12:17:80: b7:16:0c:d2:6c:79:77:af:e6:25:22:43:b8:37:60:b1:a0:9d: 1a:b8:ab:de:ca:14:36:6d:b5:fe:61:e7:d6:bc:72:be:3d:63: 23:c3:8e:de:dd:29:f0:d9:05:3e:94:d9:73:13:c5:df:cb:bb: a0:78:9c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwNTEwMjM0NjE2WhcNMjUwNTE3MjM0NjE2WjAYMRYwFAYD VQQDEw02ODFmZTU0OC0zNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1sCYgVTe1DLmufRHcvEzEXfQxM8oDI0tABFsVtax5QsBPWFvBdA37aRqVGm EFDH0jWKCXMTQ3xj24QMiDG706VrRaAG/9QnJlHyqawFKEHo6CYzDI6kaWoXAOg2 QfH4rmGbzMV8MeQwMcgjiMigq9+IUghlsOogKEJPZ3urK3dNNDM7rNBaeJCNd3t+ 6yIKHlQY5+3a/4xri8S66fv+4Wa3JuNDQ7TQ/q/1zgV8AqLGhFbuGonz2COC6MAp cgxWnAz19M4qLmx//3eKljmfnRqVNW3bN2/P/B7qy8Pkco0Yn/vfxWLQV7uYOWE3 me4WAKNC7bmPJMRntBFaCTcRJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk4/5F5 Yp2pPBe5a/f6u3PVbcv/MB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqrP6v4ASqIok2CL27OqQubNcjXmKaRfpQDWr5LG04nI5GZ5vnnQqS EO14/N7AEnVNzJhiUx3Sik2zTXP4sXsH/vdoN0euwLRSSbOr96VziRa4fh1Fih2B Bdr7YjRKYWCoIizuYVe2OaLjQiLHM/OMZTJ32QJrsHyHvQG0gFXOn0c6n3GBWM9u ka7GNPZAfCa28IiTEOES9/q3a7t6b4soDkjKIOsNgFBaB4B7MQ50E/93OqsGW4FD U1xfR0UiNFJnKZ8SF4C3FgzSbHl3r+YlIkO4N2CxoJ0auKveyhQ2bbX+YefWvHK+ PWMjw47e3Snw2QU+lNlzE8Xfy7ugeJya -----END CERTIFICATE-----Generated at Mon May 12 19:57:00 2025 by rpki-client