$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: 0SiG/+cJF+Cclxt0aKSqKwv+ett3WAyGFenqQZoLjQg= Subject key identifier: A4:DD:87:03:0F:0E:00:6A:D3:11:F7:97:42:4D:85:A5:6B:FD:2A:49 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 01B6 Signing time: Fri 25 Apr 2025 02:38:39 +0000 Manifest this update: Fri 25 Apr 2025 02:38:38 +0000 Manifest next update: Fri 02 May 2025 02:38:38 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: 3fRiTSMKLxIRysAUXJ7iJrBFKbOlmC/XbAhEaKcon9I=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=) 4: 5D406F9E7A1611EFB8683714C4F9AE02.roa (hash: 3otYCGSHc1MvuLQDMy6P+45MHMBXoHXPg9K4+MC++BU=) 5: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Apr 25 02:38:38 2025 GMT Not After : May 2 02:38:38 2025 GMT Subject: CN=680af5ae-64ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:18:41:93:b0:47:e2:78:6c:68:17:bc:59: 07:35:68:25:a0:35:f0:49:26:10:e2:df:d7:dd:70: fa:1e:74:d1:31:ea:5c:cf:90:6b:3a:66:c7:d6:cc: d3:4b:29:db:8d:9e:40:68:da:4e:d5:41:fb:a1:3f: 12:6b:eb:ff:95:73:c0:8a:33:c4:0f:93:cf:5c:92: 55:e1:e7:08:c2:9e:c9:4e:de:a4:69:0e:29:bc:a9: be:3d:92:c5:c3:e6:08:4a:0e:ca:1d:91:53:40:a9: 57:72:ee:3f:a7:57:b9:aa:a9:53:38:0b:12:5a:1b: 94:5b:16:48:94:ff:5f:a8:b0:05:0e:53:37:b4:0c: f8:42:c1:4d:f3:50:11:61:5e:9e:0f:93:f0:01:34: 0d:ee:cd:53:63:4b:23:9b:67:65:6e:03:90:d7:f2: 56:8b:3e:c5:d8:77:d2:70:85:71:f1:f3:52:03:b7: da:ea:0e:73:05:0e:5a:d6:c0:de:b3:94:ff:e8:dd: a5:54:17:d9:b8:1f:85:1c:60:68:d6:64:e5:32:45: 4a:08:07:9d:66:2f:a0:6a:33:c7:0f:7a:a1:3f:7f: d9:8e:ca:34:84:9e:59:3a:9c:7d:c4:5e:84:9e:1b: 53:88:41:ec:91:e1:6d:c0:c2:83:81:49:b9:78:77: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:87:03:0F:0E:00:6A:D3:11:F7:97:42:4D:85:A5:6B:FD:2A:49 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:79:90:4f:81:aa:69:09:44:71:50:51:54:81:07:49:06:b2: e4:2f:f5:b7:e7:1c:fe:13:a9:d9:7f:22:52:64:36:9a:e2:8b: 8e:9c:aa:01:a0:2f:09:1a:ed:94:59:27:1d:47:86:1a:e9:43: 64:4e:ed:3a:b7:30:61:fd:64:be:b5:d3:51:51:18:84:29:a9: 59:b5:72:c3:b9:f2:6e:f8:f5:3d:bb:7a:fc:ac:77:5b:36:1e: bb:4e:78:67:3f:49:ad:6f:cf:df:aa:11:55:50:ab:10:59:e1: be:35:6a:a2:84:85:84:61:d5:0d:72:6a:f4:76:58:47:f5:37: 5f:82:18:7b:bf:dd:db:38:98:dc:e4:2f:1e:bb:55:7c:25:6c: 7f:4a:51:df:a1:38:29:ff:ad:ab:57:dc:13:d7:06:e2:11:a5: d0:ba:fd:d7:90:82:fe:75:90:db:47:d7:40:35:22:33:32:dc: 88:1d:96:cd:e3:e1:3c:9b:6a:2c:15:7c:3d:15:b2:07:5b:76: 1f:13:44:93:ca:ef:90:e5:ae:51:d4:94:6a:1a:64:da:8d:21: 45:d1:12:f4:05:4f:91:70:c3:a0:55:32:3c:6b:7a:8d:dc:98: 4b:93:e4:af:4c:1d:70:c4:c9:67:2d:e5:75:7e:41:22:d2:ba: 95:b0:47:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwNDI1MDIzODM4WhcNMjUwNTAyMDIzODM4WjAYMRYwFAYD VQQDEw02ODBhZjVhZS02NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cgYQZOwR+J4bGgXvFkHNWgloDXwSSYQ4t/X3XD6HnTRMepcz5BrOmbH1szT SynbjZ5AaNpO1UH7oT8Sa+v/lXPAijPED5PPXJJV4ecIwp7JTt6kaQ4pvKm+PZLF w+YISg7KHZFTQKlXcu4/p1e5qqlTOAsSWhuUWxZIlP9fqLAFDlM3tAz4QsFN81AR YV6eD5PwATQN7s1TY0sjm2dlbgOQ1/JWiz7F2HfScIVx8fNSA7fa6g5zBQ5a1sDe s5T/6N2lVBfZuB+FHGBo1mTlMkVKCAedZi+gajPHD3qhP3/Zjso0hJ5ZOpx9xF6E nhtTiEHskeFtwMKDgUm5eHdy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTdhwMP DgBq0xH3l0JNhaVr/SpJMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIeZBPgappCURxUFFUgQdJBrLkL/W35xz+E6nZfyJSZDaa4ouOnKoB oC8JGu2UWScdR4Ya6UNkTu06tzBh/WS+tdNRURiEKalZtXLDufJu+PU9u3r8rHdb Nh67TnhnP0mtb8/fqhFVUKsQWeG+NWqihIWEYdUNcmr0dlhH9Tdfghh7v93bOJjc 5C8eu1V8JWx/SlHfoTgp/62rV9wT1wbiEaXQuv3XkIL+dZDbR9dANSIzMtyIHZbN 4+E8m2osFXw9FbIHW3YfE0STyu+Q5a5R1JRqGmTajSFF0RL0BU+RcMOgVTI8a3qN 3JhLk+SvTB1wxMlnLeV1fkEi0rqVsEej -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:59 2025 by rpki-client