$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: 13VR13NsAQPYL9zoC0kM6z6ytJvFS3hT8HsFe9yKcjo= Subject key identifier: B2:5F:95:31:48:A2:48:6D:C6:A1:5A:D4:18:8B:A7:D1:36:9C:42:E3 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 053B Signing time: Sat 10 May 2025 23:04:48 +0000 Manifest this update: Sat 10 May 2025 23:04:48 +0000 Manifest next update: Sat 17 May 2025 23:04:48 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: bXgs206uk6ZwJLPCFLf8Il5ixEhbacoYvLTZDT41wZM=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: N3l8NbXI6PWZv8XLkMHP80swkTXCmSPPyHudla60h0Y=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: +s3RfgfZleOkFSX6tECNHJYojBeQ3ve3IeKnyvn0+N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: May 10 23:04:48 2025 GMT Not After : May 17 23:04:48 2025 GMT Subject: CN=681fdb90-4036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:d0:4e:c8:09:7b:c6:f3:81:57:2b:0d:a1: c3:54:63:df:57:0e:7a:bf:7e:42:5d:25:a8:b5:eb: 49:ad:a9:34:a7:76:86:73:3f:c2:72:68:07:5c:7e: 8d:19:fe:49:43:76:b7:15:9f:91:51:1e:af:a8:22: 40:b5:da:29:c1:79:96:e0:3e:4f:56:2b:cb:50:5a: 6f:63:9e:67:88:32:f4:da:73:4e:6a:42:01:4f:17: 09:24:7a:82:9f:56:a5:ed:22:86:db:c9:a7:a2:b0: 4f:ab:22:8d:29:0b:90:28:b1:ef:51:d8:2d:fe:c5: 4e:96:d4:d2:d8:c2:f3:e8:81:63:c2:3d:64:9a:08: 10:66:60:65:80:34:ea:a7:53:96:9f:6a:9c:34:b4: ca:36:b8:68:99:10:af:e8:ec:35:0c:40:6e:7e:bc: 1e:6b:f3:68:5b:5c:6e:0c:48:ff:af:6f:ed:af:59: 11:16:b7:f8:1b:91:69:2f:80:a7:c1:b2:cf:13:e2: e9:97:1b:4b:48:b7:74:8a:d4:71:8f:d2:c6:06:de: 9a:ec:0a:b1:f7:c0:7a:2c:19:cf:2c:a9:0d:33:39: 7c:9a:06:0e:c7:8f:e5:5b:97:41:1a:ae:b3:01:b4: 33:0a:a3:56:c7:3a:27:6b:b7:b5:0e:24:6c:b2:62: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5F:95:31:48:A2:48:6D:C6:A1:5A:D4:18:8B:A7:D1:36:9C:42:E3 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:23:75:67:54:fc:8f:0c:2b:75:51:41:23:73:ce:a5:c7:52: 6c:22:8d:2c:6a:32:e2:f5:b8:85:ef:4a:4a:f9:68:ea:f4:48: be:a9:b1:71:d8:d2:a2:81:8e:63:78:45:3c:09:d6:13:7a:d1: 76:f6:1d:3b:42:32:ce:8c:9d:14:84:cc:d9:bd:ee:8d:14:da: 62:31:7f:e0:03:46:04:a5:08:00:c1:2b:e1:16:fa:62:2d:64: f5:99:2c:60:6d:10:75:32:d8:f2:18:b0:ba:2a:fe:9b:0d:de: d8:95:79:6e:7c:5b:78:71:fa:f1:2c:41:cf:b1:a0:47:78:52: 6c:bc:44:12:a9:ae:b6:48:3d:25:7e:94:ed:fc:c1:b1:a0:0b: 4e:f3:42:57:b4:aa:c1:a9:6b:09:3a:12:a8:0e:df:cb:bd:9d: 05:cb:37:8f:68:16:63:27:20:7e:fc:04:2c:5d:d4:dd:5f:d3: 72:7b:3c:8a:b5:50:9a:a6:40:fd:fa:9b:5d:e1:bb:4a:79:18: 8e:69:76:c6:8b:ce:a9:40:93:51:5c:79:21:80:09:32:15:ab: 34:bc:f9:c2:8c:27:ae:df:82:8a:98:04:7a:25:e8:9b:73:b3: 9b:4b:eb:76:f3:e4:b5:d4:df:1d:f0:a1:05:d0:4d:9f:65:00: bc:59:12:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUwNTEwMjMwNDQ4WhcNMjUwNTE3MjMwNDQ4WjAYMRYwFAYD VQQDEw02ODFmZGI5MC00MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub7QTsgJe8bzgVcrDaHDVGPfVw56v35CXSWotetJrak0p3aGcz/CcmgHXH6N Gf5JQ3a3FZ+RUR6vqCJAtdopwXmW4D5PVivLUFpvY55niDL02nNOakIBTxcJJHqC n1al7SKG28mnorBPqyKNKQuQKLHvUdgt/sVOltTS2MLz6IFjwj1kmggQZmBlgDTq p1OWn2qcNLTKNrhomRCv6Ow1DEBufrwea/NoW1xuDEj/r2/tr1kRFrf4G5FpL4Cn wbLPE+LplxtLSLd0itRxj9LGBt6a7Aqx98B6LBnPLKkNMzl8mgYOx4/lW5dBGq6z AbQzCqNWxzona7e1DiRssmIAvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJflTFI okhtxqFa1BiLp9E2nELjMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApI3VnVPyPDCt1UUEjc86lx1JsIo0sajLi9biF70pK+Wjq9Ei+qbFx 2NKigY5jeEU8CdYTetF29h07QjLOjJ0UhMzZve6NFNpiMX/gA0YEpQgAwSvhFvpi LWT1mSxgbRB1MtjyGLC6Kv6bDd7YlXlufFt4cfrxLEHPsaBHeFJsvEQSqa62SD0l fpTt/MGxoAtO80JXtKrBqWsJOhKoDt/LvZ0FyzePaBZjJyB+/AQsXdTdX9NyezyK tVCapkD9+ptd4btKeRiOaXbGi86pQJNRXHkhgAkyFas0vPnCjCeu34KKmAR6Jeib c7ObS+t28+S11N8d8KEF0E2fZQC8WRKZ -----END CERTIFICATE-----Generated at Sun May 11 22:27:15 2025 by rpki-client