$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft File: DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json) Hash identifier: FfIl7kQjdLDpezB/MudG2JqI/HAO6EaFMZYzJE4cDUs= Subject key identifier: FE:19:AE:F9:0F:43:38:C9:87:AA:BF:FD:EB:34:9B:03:E6:DE:95:8D Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA Certificate issuer: /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft Manifest number: F7 Signing time: Fri 13 Jun 2025 04:08:58 +0000 Manifest this update: Fri 13 Jun 2025 04:08:57 +0000 Manifest next update: Fri 20 Jun 2025 04:08:57 +0000 Files and hashes: 1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: SZs5Qyk701CNS9ouUzKbOekpFgVQAcSXDGGyw3EuaRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Validity Not Before: Jun 13 04:08:57 2025 GMT Not After : Jun 20 04:08:57 2025 GMT Subject: CN=684ba45a-dd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:fc:f2:15:c6:50:1c:97:4d:66:7a:f0:ef: 71:3e:8a:74:81:25:d8:d0:1e:e2:b9:7c:b4:b0:de: 42:c1:5b:cf:29:cd:cd:de:f7:7d:62:c1:e8:51:7d: aa:3f:dd:d6:f5:f5:0e:db:4a:b6:de:f2:30:45:e2: ec:7c:1e:3d:b9:52:66:0b:58:cd:53:81:89:e9:a4: ea:21:1a:9e:94:4f:a9:fb:24:d4:38:85:d4:35:16: 7e:b5:dc:4c:ed:2e:d2:4a:be:58:46:e3:78:e4:b3: d1:58:10:d1:d4:8e:5e:34:09:1f:7d:cf:5b:1f:17: 02:d8:90:0d:ed:70:a3:85:bd:1e:2d:da:ea:f2:8a: 7a:c3:ff:56:f8:c5:14:54:83:bd:c0:31:3d:de:99: 76:64:87:d1:7a:a2:8f:7e:66:c1:59:a8:4c:48:9d: e0:9d:e3:36:0c:ec:a5:ed:14:70:21:28:ce:a1:09: 4d:29:4c:c8:47:c4:34:9e:b2:99:8d:80:e4:3a:1f: c4:a7:97:79:e8:56:70:68:0b:a3:d1:cd:a8:e7:6e: 8f:e9:79:7d:2e:81:45:cc:a8:80:e8:f0:f0:11:a7: 56:96:56:e6:5d:c5:f3:6e:38:9d:85:b1:c5:02:18: 48:fd:9e:17:c7:82:dc:21:7a:6c:a7:30:9c:4c:1a: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:AE:F9:0F:43:38:C9:87:AA:BF:FD:EB:34:9B:03:E6:DE:95:8D X509v3 Authority Key Identifier: keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1d:2b:3a:da:83:f5:13:2c:6a:c8:e6:21:f6:a5:a0:48:c8: 7b:64:28:42:63:8c:d8:a3:91:f9:45:dc:0e:6d:64:be:2c:ec: 40:3a:a3:3e:0b:f7:f1:16:21:15:c1:2b:19:18:5c:62:08:46: bc:2e:73:bb:85:9d:ee:6a:3f:a4:2e:6b:a6:a7:85:cc:32:20: fb:69:1e:bc:10:c8:a2:c7:22:f9:5f:8e:52:16:20:94:2f:b6: 90:80:5c:14:8d:8e:83:5a:2f:2e:34:a8:52:fd:ae:1b:7f:25: d6:55:d2:b2:bf:1e:41:99:fc:59:b6:03:4f:9d:6a:80:40:cd: ef:ae:84:47:d2:11:65:79:18:48:7f:a2:f7:03:b1:05:f9:8f: a6:5c:e1:1a:e5:c0:08:64:e1:33:61:11:5e:6b:73:3f:84:eb: 6d:fc:8e:71:7b:8b:7d:c7:f4:64:4a:13:d6:2f:2c:2d:32:2d: 99:87:bf:96:67:8e:6f:43:49:89:18:c3:a7:f2:54:ad:fc:23: 78:ea:a4:fa:91:13:10:22:e0:05:98:92:9e:8a:0e:9d:60:16: 8d:5a:95:f2:77:b9:70:73:89:d5:21:a3:20:02:f7:fe:82:6b: ec:ed:07:84:e4:67:cc:82:82:28:75:fa:7c:99:36:df:b2:ac: 65:11:23:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDBFNjI2QkVCM0Q0MjA1OTMzMzNCRkI0Qzg1ODMwN0E4 OTlFQTdEQ0EwHhcNMjUwNjEzMDQwODU3WhcNMjUwNjIwMDQwODU3WjAYMRYwFAYD VQQDEw02ODRiYTQ1YS1kZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWb88hXGUByXTWZ68O9xPop0gSXY0B7iuXy0sN5CwVvPKc3N3vd9YsHoUX2q P93W9fUO20q23vIwReLsfB49uVJmC1jNU4GJ6aTqIRqelE+p+yTUOIXUNRZ+tdxM 7S7SSr5YRuN45LPRWBDR1I5eNAkffc9bHxcC2JAN7XCjhb0eLdrq8op6w/9W+MUU VIO9wDE93pl2ZIfReqKPfmbBWahMSJ3gneM2DOyl7RRwISjOoQlNKUzIR8Q0nrKZ jYDkOh/Ep5d56FZwaAuj0c2o526P6Xl9LoFFzKiA6PDwEadWllbmXcXzbjidhbHF AhhI/Z4Xx4LcIXpspzCcTBoZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4ZrvkP QzjJh6q//es0mwPm3pWNMB8GA1UdIwQYMBaAFA5ia+s9QgWTMzv7TIWDB6iZ6n3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9DNThDRjg0Q0NB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0JaTXpPX3RNaFlNSHFKbnFm Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtSnI2ejFDQlpNek9fdE1oWU1IcUpucWZjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTgxQi9DNThDRjg0Q0NBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0Ja TXpPX3RNaFlNSHFKbnFmY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiHSs62oP1EyxqyOYh9qWgSMh7ZChCY4zYo5H5RdwObWS+LOxAOqM+ C/fxFiEVwSsZGFxiCEa8LnO7hZ3uaj+kLmump4XMMiD7aR68EMiixyL5X45SFiCU L7aQgFwUjY6DWi8uNKhS/a4bfyXWVdKyvx5BmfxZtgNPnWqAQM3vroRH0hFleRhI f6L3A7EF+Y+mXOEa5cAIZOEzYRFea3M/hOtt/I5xe4t9x/RkShPWLywtMi2Zh7+W Z45vQ0mJGMOn8lSt/CN46qT6kRMQIuAFmJKeig6dYBaNWpXyd7lwc4nVIaMgAvf+ gmvs7QeE5GfMgoIodfp8mTbfsqxlESMb -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:05 2025 by rpki-client