$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: C1an8bPLt1zh7FwQsCLwgJQWe+7BHF/ZTAoGwEoOfFs= Subject key identifier: D3:2E:63:7C:06:1C:8D:45:D9:32:74:4A:4F:71:CB:5E:10:C2:63:D3 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 13 Signing time: Sun 15 Jun 2025 07:06:20 +0000 Manifest this update: Sun 15 Jun 2025 07:06:19 +0000 Manifest next update: Sun 22 Jun 2025 07:06:19 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: TpRvNxbdZTSlD+Xcs6W92ohlwLk8wkaRtxA5tP8j+fw=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 4: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 5: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 6: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jun 15 07:06:19 2025 GMT Not After : Jun 22 07:06:19 2025 GMT Subject: CN=684e70ec-f23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:97:40:32:d7:b0:86:ac:c7:a8:13:14:70: 15:b5:91:c8:c2:57:04:75:e7:4c:61:5e:b8:42:c9: a7:2b:19:bf:9b:ba:d4:04:92:22:02:4a:c4:96:40: 21:2b:b7:b5:9e:25:7f:f4:44:c1:fd:77:34:ef:12: 3a:3a:d7:92:cb:a7:80:eb:21:c2:74:70:0f:bf:6a: f7:53:d0:6c:22:b6:2b:36:e8:bb:44:c5:95:d3:e1: 2d:5e:10:77:23:0d:d3:b6:65:65:c7:95:42:3e:ce: 3f:4f:83:20:da:ad:c2:8d:23:2d:f1:04:a0:06:7f: 90:1c:72:c1:5c:40:c6:b0:0c:0a:13:ee:2f:90:a7: 87:47:39:3d:fe:11:c9:08:51:74:18:9e:95:14:6a: 15:95:be:cb:fa:a3:13:87:d5:b3:5e:6e:07:1a:62: 5d:e4:2c:7c:a8:38:a8:0d:0a:47:a1:be:40:7f:ef: c9:1e:ca:2a:03:cc:21:5a:51:1a:3d:4e:8d:f1:dd: af:59:f5:5d:10:bb:17:66:f3:83:f9:7b:62:5d:88: d2:99:2b:53:08:fe:66:d5:82:02:a9:34:01:11:58: 6f:08:cd:3b:5a:05:86:df:c0:ae:61:94:67:27:95: 8c:07:52:aa:67:54:6d:0c:45:1d:64:58:41:8c:5f: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:63:7C:06:1C:8D:45:D9:32:74:4A:4F:71:CB:5E:10:C2:63:D3 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8c:e6:5e:4b:60:76:40:86:df:93:7f:c4:e4:83:70:a4:c4: 5a:c6:c6:a4:62:20:e3:5b:8c:c0:46:f6:39:d0:4a:a6:8d:5a: 2b:30:f5:64:ee:aa:cf:52:a1:ea:86:aa:27:67:9f:09:67:9b: b0:8b:42:f4:83:3c:8f:0c:e1:db:6e:9c:66:93:b1:10:86:20: 5f:ed:f5:82:ea:e3:96:a9:ba:03:f1:8b:e4:72:66:f4:37:4e: 5c:ff:f5:db:25:7e:03:7f:76:27:4d:0d:b3:ee:2b:48:d0:65: 6f:c5:2c:22:77:55:64:4e:94:51:65:0d:93:f2:41:37:ce:d1: 56:2e:5f:68:7a:34:73:c5:ff:50:36:a2:ac:f8:a8:ee:34:cb: ed:99:7f:96:89:49:58:cc:e8:a3:71:25:18:86:30:0e:bb:b3: 66:e4:17:7c:e1:8d:45:a1:0e:44:8e:e4:db:70:01:4d:8f:cc: fd:91:4a:e3:09:f0:db:88:77:d0:0e:97:18:3b:8a:c5:12:da: 7f:ed:c7:0f:44:76:69:6e:52:00:82:9c:e0:93:00:a9:19:45: 79:3a:26:3e:bd:7d:15:3f:50:61:2f:f4:c2:78:ae:b0:3a:f9: 11:84:8a:7d:7a:32:59:f6:fc:d4:58:c1:ad:3e:d0:f2:14:b6: 24:00:af:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA2MTUwNzA2MTlaFw0yNTA2MjIwNzA2MTlaMBgxFjAUBgNV BAMTDTY4NGU3MGVjLWYyM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw7pdAMtewhqzHqBMUcBW1kcjCVwR150xhXrhCyacrGb+butQEkiICSsSWQCEr t7WeJX/0RMH9dzTvEjo615LLp4DrIcJ0cA+/avdT0Gwitis26LtExZXT4S1eEHcj DdO2ZWXHlUI+zj9PgyDarcKNIy3xBKAGf5AccsFcQMawDAoT7i+Qp4dHOT3+EckI UXQYnpUUahWVvsv6oxOH1bNebgcaYl3kLHyoOKgNCkehvkB/78keyioDzCFaURo9 To3x3a9Z9V0Quxdm84P5e2JdiNKZK1MI/mbVggKpNAERWG8IzTtaBYbfwK5hlGcn lYwHUqpnVG0MRR1kWEGMX6vjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0y5jfAYc jUXZMnRKT3HLXhDCY9MwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFeM5l5LYHZAht+Tf8Tkg3CkxFrGxqRiIONbjMBG9jnQSqaNWisw9WTu qs9SoeqGqidnnwlnm7CLQvSDPI8M4dtunGaTsRCGIF/t9YLq45apugPxi+RyZvQ3 Tlz/9dslfgN/didNDbPuK0jQZW/FLCJ3VWROlFFlDZPyQTfO0VYuX2h6NHPF/1A2 oqz4qO40y+2Zf5aJSVjM6KNxJRiGMA67s2bkF3zhjUWhDkSO5NtwAU2PzP2RSuMJ 8NuId9AOlxg7isUS2n/txw9EdmluUgCCnOCTAKkZRXk6Jj69fRU/UGEv9MJ4rrA6 +RGEin16Mln2/NRYwa0+0PIUtiQArw8= -----END CERTIFICATE-----Generated at Tue Jun 17 04:36:10 2025 by rpki-client