$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: 49pO7rj16xYHTyaNB/IiY4SEyidIUbgG0Pr124Oygpk= Subject key identifier: 1A:89:64:8F:5D:B5:5F:28:F4:48:D1:9C:A8:E4:1F:FA:2B:E1:FD:D2 Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 015D Signing time: Fri 13 Jun 2025 03:00:14 +0000 Manifest this update: Fri 13 Jun 2025 03:00:14 +0000 Manifest next update: Fri 20 Jun 2025 03:00:14 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: 1cWGbVzWrCRVzEF5m7VvB9mGN91ZTgebyXvbmdf8m7w=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: Jun 13 03:00:14 2025 GMT Not After : Jun 20 03:00:14 2025 GMT Subject: CN=684b943e-3be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:22:ad:a3:a7:b8:91:da:cd:b2:f8:b9:8e: 58:af:32:39:53:a7:bd:ab:4c:80:c7:e8:d4:f1:30: 46:d1:08:35:cc:81:ce:6d:86:04:a2:5c:c0:a8:81: d2:c9:6f:43:69:9b:47:b7:a8:ae:98:cc:5f:7d:01: ed:7b:1e:a0:24:2d:b1:17:22:1e:f9:54:02:83:3d: 36:a1:be:63:d1:75:39:a0:69:5f:bf:dc:0b:4c:e4: 08:6a:40:68:c6:a2:58:99:80:20:21:bc:9c:13:ad: d0:71:43:8f:0b:34:2d:81:9b:05:c2:5e:48:0c:4b: 11:f3:91:58:09:aa:44:af:63:68:1f:89:3e:cf:d6: 1d:4e:df:2a:c4:7f:6b:17:bc:a7:c3:27:39:77:36: f3:4d:cc:1b:93:81:ad:49:22:b6:70:8f:dc:47:1a: e1:f1:90:f9:ed:66:8b:69:4e:ff:d1:34:19:ad:2a: 00:87:74:26:d2:a5:c8:13:48:c8:d7:a2:cc:76:4e: 34:8d:43:e3:3c:1e:66:37:04:88:bb:02:db:00:0c: 0e:48:6d:6f:d8:12:f6:62:58:3a:1a:4c:2d:f8:4c: df:88:97:3e:ba:c9:96:ad:40:3d:26:3b:6d:3d:0d: 66:2f:60:aa:ea:b3:de:76:34:4c:b2:d0:07:38:b7: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:64:8F:5D:B5:5F:28:F4:48:D1:9C:A8:E4:1F:FA:2B:E1:FD:D2 X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e9:09:59:bf:ef:c2:7b:f5:91:8b:48:34:48:e1:bf:85:2e: aa:1c:ef:cc:1a:89:31:72:cc:70:ac:6a:b9:c9:b0:28:0e:93: 78:b9:fd:0b:9f:45:bf:e6:c6:34:3a:74:26:92:91:d5:1d:b2: 0d:ef:c9:59:d6:34:96:d3:72:b2:52:59:65:67:b6:4d:fc:8b: 37:e1:9e:0c:e9:c3:bc:b4:61:bf:ec:51:7c:f4:11:f2:eb:88: 5e:7f:ed:e9:7d:88:ca:1a:97:92:8a:94:74:60:5f:66:d5:80: 98:20:f6:ef:da:48:a9:97:be:99:68:6b:a0:12:76:d7:7e:13: 06:d3:d5:e6:bd:d2:72:12:6e:cf:c8:75:d9:e3:03:06:65:11: 81:e0:5e:c4:05:95:6b:44:44:4c:85:fc:ef:88:d0:30:19:29: 69:ae:1e:79:18:b1:57:ed:a0:de:22:35:54:bb:e1:a5:58:22: e2:27:4e:77:0f:38:21:ae:ac:92:a5:93:a9:ed:ec:13:fb:aa: d2:f1:a5:48:9e:49:4f:1c:b9:c3:c1:3d:b4:9b:04:c7:52:5c: 1e:81:ef:51:a3:e0:85:db:e3:4a:d4:24:fd:19:61:ed:c3:bd: 06:34:a7:ac:8a:56:f4:78:58:49:79:2b:80:cd:e9:55:2a:08: f2:4c:76:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjUwNjEzMDMwMDE0WhcNMjUwNjIwMDMwMDE0WjAYMRYwFAYD VQQDEw02ODRiOTQzZS0zYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CkiraOnuJHazbL4uY5YrzI5U6e9q0yAx+jU8TBG0Qg1zIHObYYEolzAqIHS yW9DaZtHt6iumMxffQHtex6gJC2xFyIe+VQCgz02ob5j0XU5oGlfv9wLTOQIakBo xqJYmYAgIbycE63QcUOPCzQtgZsFwl5IDEsR85FYCapEr2NoH4k+z9YdTt8qxH9r F7ynwyc5dzbzTcwbk4GtSSK2cI/cRxrh8ZD57WaLaU7/0TQZrSoAh3Qm0qXIE0jI 16LMdk40jUPjPB5mNwSIuwLbAAwOSG1v2BL2Ylg6Gkwt+EzfiJc+usmWrUA9Jjtt PQ1mL2Cq6rPedjRMstAHOLcSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqJZI9d tV8o9EjRnKjkH/or4f3SMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA46QlZv+/Ce/WRi0g0SOG/hS6qHO/MGokxcsxwrGq5ybAoDpN4uf0L n0W/5sY0OnQmkpHVHbIN78lZ1jSW03KyUlllZ7ZN/Is34Z4M6cO8tGG/7FF89BHy 64hef+3pfYjKGpeSipR0YF9m1YCYIPbv2kipl76ZaGugEnbXfhMG09XmvdJyEm7P yHXZ4wMGZRGB4F7EBZVrRERMhfzviNAwGSlprh55GLFX7aDeIjVUu+GlWCLiJ053 DzghrqySpZOp7ewT+6rS8aVInklPHLnDwT20mwTHUlwege9Ro+CF2+NK1CT9GWHt w70GNKesilb0eFhJeSuAzelVKgjyTHb4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:57 2025 by rpki-client