$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: 2vijWaou2H39XnTFbkW27e/6jkMY2LMYnOWENRavjPw= Subject key identifier: 61:28:D0:FD:A7:8F:A6:00:D8:EA:C1:C4:3B:BA:98:A8:77:10:EF:F5 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1759 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1735 Signing time: Sat 10 May 2025 16:31:52 +0000 Manifest this update: Sat 10 May 2025 16:31:51 +0000 Manifest next update: Sat 17 May 2025 16:31:51 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: LxgaUPjymOpMmeR4A+D3/R1p/Fphlmp6JSsh+/LqQos=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5977 (0x1759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: May 10 16:31:51 2025 GMT Not After : May 17 16:31:51 2025 GMT Subject: CN=681f7f77-1e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:4d:b1:c0:8d:21:8c:07:37:a3:e6:a0:ce: 96:d8:6e:8d:df:c2:2b:21:06:44:10:19:46:43:f4: 6c:48:4b:6c:58:fe:b5:cf:d6:24:40:67:ff:f4:ed: dc:36:7d:54:5c:84:ff:10:ee:0c:4e:cb:43:19:39: 88:d2:69:f5:58:84:09:f5:11:48:3e:19:91:e9:7a: 94:30:a1:90:d0:4f:10:c3:cc:6b:4a:93:0b:ce:99: 20:1f:4d:61:2b:b4:e2:6d:cd:db:47:de:ae:b2:21: 45:83:0f:6e:bd:b1:74:d2:88:42:3d:0f:ce:37:5a: 77:39:74:f7:f9:80:95:69:92:6b:72:f4:13:e0:81: 1e:22:2b:d2:79:44:de:48:e9:ad:24:b0:d0:84:b3: b4:51:27:9d:0f:be:15:91:a5:0b:63:76:12:0d:50: 1b:4a:15:34:9d:be:36:f9:f9:2a:21:f7:02:e3:14: 56:56:49:08:b0:74:35:30:b0:6f:78:62:db:43:2e: 32:65:c1:13:cb:19:f5:78:01:97:61:68:a1:2e:4f: 9b:e7:7e:90:82:8d:f1:b5:4c:b1:b3:80:86:1f:2e: 2b:be:cf:a0:31:96:7f:c3:80:3d:43:1b:6f:55:51: 04:2f:1f:7a:b4:44:19:00:75:0c:90:cf:ff:50:b7: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:28:D0:FD:A7:8F:A6:00:D8:EA:C1:C4:3B:BA:98:A8:77:10:EF:F5 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4c:ae:da:33:98:b0:a8:74:ba:a9:87:e7:36:35:f6:07:45: a4:d1:ce:cc:76:a0:f8:1e:04:8b:15:de:87:85:72:06:1c:b5: d7:7c:32:c0:3d:a7:49:bd:64:e8:91:32:9a:07:91:39:20:21: f5:21:ea:e8:f4:e8:94:45:5c:3f:0d:8d:0d:a9:67:bf:22:fb: e1:8c:40:cc:49:a5:f1:1e:37:8f:96:8c:6f:73:62:55:56:07: 6a:9f:a4:46:f1:d1:32:30:ce:96:a0:a0:80:8f:dc:78:37:fd: f3:b0:5d:f4:f4:67:13:dd:15:60:8d:15:cf:fb:2b:fa:a2:a2: b0:6f:f7:fd:b9:01:6f:14:13:53:2f:d7:7d:22:ec:e1:82:16: 64:cb:82:a4:18:36:11:21:18:b8:df:51:d6:67:5e:1a:86:fa: 9e:26:72:92:83:28:a8:2d:55:e4:cf:f6:0d:ab:b2:a5:db:6d: 91:3f:3a:ca:7b:0a:2a:61:6c:22:59:e8:ae:db:20:d7:8d:10: 55:bf:21:ab:3b:1d:a8:4a:52:f8:1c:d1:f9:c0:ee:0e:28:36: 68:25:d7:c6:d3:c1:fa:19:64:b9:2f:c4:4e:ba:fc:87:ac:c2: 67:01:09:7b:c7:6a:c0:37:80:9b:cc:4a:1d:a1:63:f8:a2:99: 9b:ba:22:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwNTEwMTYzMTUxWhcNMjUwNTE3MTYzMTUxWjAYMRYwFAYD VQQDEw02ODFmN2Y3Ny0xZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy1NscCNIYwHN6PmoM6W2G6N38IrIQZEEBlGQ/RsSEtsWP61z9YkQGf/9O3c Nn1UXIT/EO4MTstDGTmI0mn1WIQJ9RFIPhmR6XqUMKGQ0E8Qw8xrSpMLzpkgH01h K7Tibc3bR96usiFFgw9uvbF00ohCPQ/ON1p3OXT3+YCVaZJrcvQT4IEeIivSeUTe SOmtJLDQhLO0USedD74VkaULY3YSDVAbShU0nb42+fkqIfcC4xRWVkkIsHQ1MLBv eGLbQy4yZcETyxn1eAGXYWihLk+b536Qgo3xtUyxs4CGHy4rvs+gMZZ/w4A9Qxtv VVEELx96tEQZAHUMkM//ULfv+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEo0P2n j6YA2OrBxDu6mKh3EO/1MB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOTK7aM5iwqHS6qYfnNjX2B0Wk0c7MdqD4HgSLFd6HhXIGHLXXfDLA PadJvWTokTKaB5E5ICH1Iero9OiURVw/DY0NqWe/IvvhjEDMSaXxHjePloxvc2JV Vgdqn6RG8dEyMM6WoKCAj9x4N/3zsF309GcT3RVgjRXP+yv6oqKwb/f9uQFvFBNT L9d9IuzhghZky4KkGDYRIRi431HWZ14ahvqeJnKSgyioLVXkz/YNq7Kl222RPzrK ewoqYWwiWeiu2yDXjRBVvyGrOx2oSlL4HNH5wO4OKDZoJdfG08H6GWS5L8ROuvyH rMJnAQl7x2rAN4CbzEodoWP4opmbuiLK -----END CERTIFICATE-----Generated at Sun May 11 16:50:47 2025 by rpki-client