$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: XtapTKtx6eFgcpdFyolxApWjedPvcrqaFwUVccLg/gk= Subject key identifier: 71:4D:81:6A:E2:80:DB:C7:87:8A:0F:EA:FC:9E:D2:60:53:31:04:5A Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 032F Signing time: Thu 15 May 2025 01:06:45 +0000 Manifest this update: Thu 15 May 2025 01:06:45 +0000 Manifest next update: Thu 22 May 2025 01:06:45 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: sLr1BO4viZUjeVv8GoY+zaExL6nGtHxgWotNPd3As9A=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: May 15 01:06:45 2025 GMT Not After : May 22 01:06:45 2025 GMT Subject: CN=68253e25-37bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:3c:80:2b:11:50:64:7f:69:72:00:64:7e: 0b:f9:91:17:72:df:ec:ef:9e:f6:23:f0:2e:ad:9c: 2a:59:2b:c2:ee:a2:95:b2:9a:1d:fc:dc:43:c9:1d: e3:4c:f4:ad:56:0c:2c:a1:47:ea:6b:ed:d7:90:8d: e2:0d:41:ff:5c:5a:a4:56:89:45:79:2a:31:d9:89: 8c:83:64:b2:f3:d6:c6:d8:9d:1b:33:5f:99:f5:48: 6f:11:85:6d:be:21:e0:39:a7:69:cc:d6:de:f4:c9: c6:e3:aa:80:6e:20:26:bd:47:55:54:aa:92:fd:0f: 1f:de:8d:c5:42:7c:9f:49:54:fe:fc:a3:79:b8:6d: 93:fd:94:36:1f:f1:dd:5f:9a:30:d7:02:67:95:31: 03:c3:62:65:d3:28:92:9b:92:5c:e1:cb:da:43:76: 03:d7:67:9f:e8:19:d7:aa:1b:4b:6a:82:5e:81:7c: 9c:1e:88:1a:c8:7e:30:48:a1:6f:f9:35:fe:11:2a: ef:59:49:44:63:35:07:be:45:2b:35:ff:02:1a:2b: d2:71:71:55:1a:a6:c4:c6:27:51:44:80:d3:bc:4b: 78:08:6a:dc:7c:7d:6c:a9:f1:ab:07:a2:b7:f6:a6: 95:71:e2:3e:67:bb:0f:de:fc:48:22:c9:7e:61:9a: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:81:6A:E2:80:DB:C7:87:8A:0F:EA:FC:9E:D2:60:53:31:04:5A X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:31:ed:38:b4:0c:33:16:26:32:4a:ae:27:ab:e3:e9:7b:3d: 77:12:cc:41:5c:e3:91:c2:b2:ad:ee:3f:0b:c8:96:c0:4f:c3: 6a:08:06:23:a9:27:0f:49:e0:f3:c7:1e:e2:86:52:09:c0:be: 09:7b:00:65:57:7f:12:04:86:1c:b9:b5:fc:84:1d:ad:a3:52: fd:0d:4b:33:f9:c1:1b:84:57:65:6d:55:2a:29:25:e0:b5:a3: e3:af:07:cb:4a:ec:a3:46:19:c3:df:ac:38:c6:2a:f1:d3:e3: 5a:2e:6a:e3:9e:40:20:89:04:a7:09:e7:6e:d5:6c:f5:34:2f: b7:9e:c3:fe:26:bd:e6:24:ba:d5:1f:76:13:8d:68:3e:3f:36: 71:16:d6:a7:0d:05:44:93:21:0d:14:11:bd:54:e6:89:65:42: fb:f8:33:e4:99:77:94:a1:58:5f:5f:86:12:78:93:73:ee:c3: 8e:0e:6e:73:8d:0b:60:9f:c4:52:65:5a:3a:31:8a:9d:8c:f8: 10:a8:d6:6e:42:57:bd:56:85:e4:80:2a:35:fc:7d:42:d4:f4: 18:ac:2d:29:dd:be:e6:ee:9e:b5:2a:f4:01:71:a7:e0:a1:b7: 6d:9e:05:ec:ee:89:5a:e0:51:98:76:9b:37:e4:8a:a9:cf:41: 09:5c:f4:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUwNTE1MDEwNjQ1WhcNMjUwNTIyMDEwNjQ1WjAYMRYwFAYD VQQDEw02ODI1M2UyNS0zN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MA8gCsRUGR/aXIAZH4L+ZEXct/s7572I/AurZwqWSvC7qKVspod/NxDyR3j TPStVgwsoUfqa+3XkI3iDUH/XFqkVolFeSox2YmMg2Sy89bG2J0bM1+Z9UhvEYVt viHgOadpzNbe9MnG46qAbiAmvUdVVKqS/Q8f3o3FQnyfSVT+/KN5uG2T/ZQ2H/Hd X5ow1wJnlTEDw2Jl0yiSm5Jc4cvaQ3YD12ef6BnXqhtLaoJegXycHogayH4wSKFv +TX+ESrvWUlEYzUHvkUrNf8CGivScXFVGqbExidRRIDTvEt4CGrcfH1sqfGrB6K3 9qaVceI+Z7sP3vxIIsl+YZq70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFNgWri gNvHh4oP6vye0mBTMQRaMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Me04tAwzFiYySq4nq+Ppez13EsxBXOORwrKt7j8LyJbAT8NqCAYj qScPSeDzxx7ihlIJwL4JewBlV38SBIYcubX8hB2to1L9DUsz+cEbhFdlbVUqKSXg taPjrwfLSuyjRhnD36w4xirx0+NaLmrjnkAgiQSnCedu1Wz1NC+3nsP+Jr3mJLrV H3YTjWg+PzZxFtanDQVEkyENFBG9VOaJZUL7+DPkmXeUoVhfX4YSeJNz7sOODm5z jQtgn8RSZVo6MYqdjPgQqNZuQle9VoXkgCo1/H1C1PQYrC0p3b7m7p61KvQBcafg obdtngXs7ola4FGYdps35Iqpz0EJXPRz -----END CERTIFICATE-----Generated at Fri May 16 09:38:46 2025 by rpki-client