$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: lgV4pHDeXckp1vbnLRJYrLhhbNWPoLUveXjZc8QgJxk= Subject key identifier: 71:21:4F:65:D2:66:35:37:A3:2F:66:3B:43:22:F4:71:A4:9D:6B:51 Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 1042 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 102D Signing time: Wed 14 May 2025 17:33:15 +0000 Manifest this update: Wed 14 May 2025 17:33:15 +0000 Manifest next update: Wed 21 May 2025 17:33:15 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: Xyf1j0EtRtBYGGW0UMD78dXHU/M3uVET7rWAq/IOYgA=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4162 (0x1042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: May 14 17:33:15 2025 GMT Not After : May 21 17:33:15 2025 GMT Subject: CN=6824d3db-c462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:01:98:cc:60:7b:89:02:12:08:90:82:da: 0e:c3:55:22:44:b7:5e:08:eb:70:58:2a:fe:66:0d: 62:58:b5:87:52:f2:00:e0:ad:82:da:29:42:f5:b5: ac:b5:ca:59:75:a2:de:4e:b9:49:ee:d9:b1:5a:d3: 0b:23:54:97:dd:c5:b0:7b:54:08:66:cb:a3:2d:b5: 77:e9:b9:39:27:c5:46:cc:69:11:c8:e1:f9:46:6a: 21:fa:51:ba:db:be:51:7c:33:69:41:c1:24:03:c7: 30:f9:8a:6f:87:e5:91:1e:7c:d5:5e:26:43:bd:a6: 8b:65:70:1b:f7:3e:1c:bf:95:b2:49:90:48:16:25: cc:31:94:45:13:53:62:fe:2d:3b:9b:27:7c:49:f1: 0d:55:dc:a1:ce:5e:32:c7:29:02:5c:ac:06:5a:69: da:1e:07:a1:9d:78:bd:d4:21:d7:be:b3:31:66:f6: 44:85:fb:7b:e2:9b:be:ff:87:7f:50:96:92:bd:1e: d9:df:24:db:30:6f:0d:6d:71:8b:d4:52:c5:17:d0: 4f:61:d0:68:8d:77:65:d1:48:03:7a:e1:5b:ab:b2: 4d:44:b5:e4:e9:33:31:cf:3b:70:3c:4a:62:ff:6f: ed:5a:77:8b:16:07:be:57:be:00:c3:8a:51:f1:9f: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:21:4F:65:D2:66:35:37:A3:2F:66:3B:43:22:F4:71:A4:9D:6B:51 X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5b:93:87:99:b3:5c:07:47:71:f7:6c:09:4b:97:09:1a:77: 0c:45:f6:5e:2a:c4:04:23:58:cc:0c:52:51:8c:b4:2d:e8:7e: e2:00:4f:78:5c:5b:c2:2d:67:90:dc:36:37:f7:e7:c7:c9:a2: 6e:1f:31:1b:3c:12:74:53:6e:c1:12:b4:a5:51:f3:60:02:76: 6f:d6:29:ec:6d:2e:03:87:6e:fe:b5:4c:a5:4b:c1:30:5a:55: 6b:2c:f2:cf:00:92:92:cd:5f:68:8f:5c:81:7f:98:08:fb:fe: df:db:c4:c8:ae:1e:51:c9:b8:46:1d:4e:3d:96:8d:23:6c:62: cd:c0:b7:d3:d0:f7:2c:71:f6:f5:8d:02:c2:99:f0:8a:29:6f: 2d:8d:b1:7d:30:c4:7d:78:c9:30:04:89:22:6c:ab:4d:89:80: f7:c2:ee:eb:a8:29:bc:bf:46:fc:c8:a0:23:06:93:b5:ae:c6: 91:b1:ed:d4:4f:6e:d6:77:4e:3b:34:bc:06:72:c4:32:3d:3f: c3:7c:fe:63:5c:a1:55:70:82:7b:6c:12:24:ee:08:63:25:06: 85:4a:19:18:d6:3b:a5:7d:cd:8f:75:f5:c4:ee:85:17:c8:c1: b8:6d:d2:79:6a:09:5c:f9:3b:11:a4:60:dc:9b:93:bd:4c:14: b7:dc:72:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUwNTE0MTczMzE1WhcNMjUwNTIxMTczMzE1WjAYMRYwFAYD VQQDEw02ODI0ZDNkYi1jNDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PgBmMxge4kCEgiQgtoOw1UiRLdeCOtwWCr+Zg1iWLWHUvIA4K2C2ilC9bWs tcpZdaLeTrlJ7tmxWtMLI1SX3cWwe1QIZsujLbV36bk5J8VGzGkRyOH5Rmoh+lG6 275RfDNpQcEkA8cw+Ypvh+WRHnzVXiZDvaaLZXAb9z4cv5WySZBIFiXMMZRFE1Ni /i07myd8SfENVdyhzl4yxykCXKwGWmnaHgehnXi91CHXvrMxZvZEhft74pu+/4d/ UJaSvR7Z3yTbMG8NbXGL1FLFF9BPYdBojXdl0UgDeuFbq7JNRLXk6TMxzztwPEpi /2/tWneLFge+V74Aw4pR8Z/VkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEhT2XS ZjU3oy9mO0Mi9HGknWtRMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMW5OHmbNcB0dx92wJS5cJGncMRfZeKsQEI1jMDFJRjLQt6H7iAE94 XFvCLWeQ3DY39+fHyaJuHzEbPBJ0U27BErSlUfNgAnZv1insbS4Dh27+tUylS8Ew WlVrLPLPAJKSzV9oj1yBf5gI+/7f28TIrh5RybhGHU49lo0jbGLNwLfT0Pcscfb1 jQLCmfCKKW8tjbF9MMR9eMkwBIkibKtNiYD3wu7rqCm8v0b8yKAjBpO1rsaRse3U T27Wd047NLwGcsQyPT/DfP5jXKFVcIJ7bBIk7ghjJQaFShkY1julfc2PdfXE7oUX yMG4bdJ5aglc+TsRpGDcm5O9TBS33HKU -----END CERTIFICATE-----Generated at Thu May 15 00:14:44 2025 by rpki-client