$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: EyibtGXFmNoU+Q5KwT6eXk9Qh49cFNJ9Mn38Z4UvJIQ= Subject key identifier: E9:AA:E3:6A:19:9E:B1:F6:34:FF:CF:99:D9:43:E2:6D:24:6A:DA:C5 Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 0347 Signing time: Thu 03 Jul 2025 01:22:29 +0000 Manifest this update: Thu 03 Jul 2025 01:22:29 +0000 Manifest next update: Thu 10 Jul 2025 01:22:29 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: YVKS8ptEQJ43hSPrtQTWdtLaUlVuI/vM1lgAE3IdUZ4=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Jul 3 01:22:29 2025 GMT Not After : Jul 10 01:22:29 2025 GMT Subject: CN=6865db55-8a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:63:81:da:4e:4a:fd:a2:a1:47:ab:ad:76: f4:ff:fc:20:82:1d:c0:53:39:9c:47:fb:97:f9:68: e2:0e:c4:d4:6b:e2:14:e4:40:6d:57:1f:eb:ec:07: db:dc:a4:40:eb:51:83:93:22:73:32:e8:b6:e5:de: 74:b3:bb:ef:21:c5:2a:ee:c0:11:76:dc:eb:75:fd: ff:78:0d:af:8a:89:8e:d9:f7:48:36:28:c6:77:40: 19:0f:70:72:8b:9f:81:d4:72:2d:21:47:98:38:2d: 17:02:fe:96:c9:23:2c:e9:3d:8a:1a:e6:0e:bd:0f: f8:55:e8:d4:ec:0f:4f:fb:78:53:0a:c1:bc:db:14: 82:0e:18:b4:44:14:fb:13:54:8d:95:e9:d9:30:44: ea:82:31:18:4f:58:ac:7a:89:23:7c:cb:89:a8:72: 76:9e:2c:84:88:8e:9d:55:02:a9:06:63:df:ed:17: f2:e9:0c:64:ab:ec:36:da:03:1e:7d:89:55:86:df: f6:6c:7f:6a:55:b5:6a:e3:1c:c0:03:e1:8f:9f:cb: 48:e5:b7:e1:4d:e9:a0:dd:14:be:ce:00:df:4f:87: 73:38:bf:00:47:e5:65:24:ed:61:d6:ac:32:b2:14: 06:40:ec:cc:95:a2:73:93:3b:66:00:a1:b5:d7:d3: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:E3:6A:19:9E:B1:F6:34:FF:CF:99:D9:43:E2:6D:24:6A:DA:C5 X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:25:46:13:03:4f:49:12:7b:90:09:60:5f:22:25:1f:ec:d8: c9:98:3f:eb:fe:5a:e4:b5:9a:90:c2:6f:0a:fe:71:ee:0e:68: 14:ab:0e:59:d0:18:73:19:be:e4:60:20:0c:c2:a1:2b:09:91: 26:42:10:95:7b:c7:da:77:ce:35:22:d9:22:a2:82:e3:8f:83: 74:18:6c:14:e1:f6:0d:69:cf:35:92:bd:ae:f7:ad:be:73:b0: 80:c9:20:d4:6d:34:a7:9c:ce:4b:1a:5e:ea:58:0e:bf:03:e7: 0f:96:54:ff:30:f6:50:f6:db:29:5e:05:2b:d7:90:bb:96:a2: 32:22:1d:28:9e:40:66:ff:7b:29:6f:a6:75:48:78:6d:c8:b3: 5d:96:fb:90:db:5c:6f:24:46:6d:23:cf:a7:e2:ca:3e:fe:4f: b5:e8:8a:98:00:b0:a3:a1:97:0f:55:94:4e:e8:23:7f:23:c0: 63:6e:51:62:6a:c2:43:30:dc:eb:ca:a4:9e:7b:bd:84:4b:da: 05:48:3b:54:f1:94:6e:e0:46:d7:a0:a4:f4:39:1e:09:c2:6a: de:f1:40:a0:6f:57:30:22:7f:65:da:12:88:39:31:63:57:61: 0f:16:af:0e:79:a1:f4:9e:70:1f:d0:07:d7:4a:0d:32:23:d5: 97:9f:f8:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUwNzAzMDEyMjI5WhcNMjUwNzEwMDEyMjI5WjAYMRYwFAYD VQQDEw02ODY1ZGI1NS04YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vVjgdpOSv2ioUerrXb0//wggh3AUzmcR/uX+WjiDsTUa+IU5EBtVx/r7Afb 3KRA61GDkyJzMui25d50s7vvIcUq7sARdtzrdf3/eA2viomO2fdINijGd0AZD3By i5+B1HItIUeYOC0XAv6WySMs6T2KGuYOvQ/4VejU7A9P+3hTCsG82xSCDhi0RBT7 E1SNlenZMETqgjEYT1iseokjfMuJqHJ2niyEiI6dVQKpBmPf7Rfy6Qxkq+w22gMe fYlVht/2bH9qVbVq4xzAA+GPn8tI5bfhTemg3RS+zgDfT4dzOL8AR+VlJO1h1qwy shQGQOzMlaJzkztmAKG119Ob/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmq42oZ nrH2NP/PmdlD4m0katrFMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVJUYTA09JEnuQCWBfIiUf7NjJmD/r/lrktZqQwm8K/nHuDmgUqw5Z 0BhzGb7kYCAMwqErCZEmQhCVe8fad841ItkiooLjj4N0GGwU4fYNac81kr2u962+ c7CAySDUbTSnnM5LGl7qWA6/A+cPllT/MPZQ9tspXgUr15C7lqIyIh0onkBm/3sp b6Z1SHhtyLNdlvuQ21xvJEZtI8+n4so+/k+16IqYALCjoZcPVZRO6CN/I8BjblFi asJDMNzryqSee72ES9oFSDtU8ZRu4EbXoKT0OR4Jwmre8UCgb1cwIn9l2hKIOTFj V2EPFq8OeaH0nnAf0AfXSg0yI9WXn/i5 -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:38 2025 by rpki-client