$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: CzaTOdcwyvqSJBfMUrFEx8OJMKm/HrFSOl2rrbeoKLE= Subject key identifier: E3:AC:25:01:FE:51:49:41:15:77:B9:08:E0:C7:0D:FF:A5:F7:20:8D Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 0139 Signing time: Tue 29 Apr 2025 04:28:18 +0000 Manifest this update: Tue 29 Apr 2025 04:28:17 +0000 Manifest next update: Tue 06 May 2025 04:28:17 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: 13cRUvRtNytKezPJ4QZummHkCOKuaIZmPULofsEU5Uw=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: MTq717nmucrc35Yd/8a9v/UNjUpnghaYXRqZ7x8/L7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 04:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Apr 29 04:28:17 2025 GMT Not After : May 6 04:28:17 2025 GMT Subject: CN=68105562-f8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:57:7f:35:5d:29:79:5d:3b:c9:cb:2f:dc: b7:63:e7:04:25:c1:8d:e9:d6:43:ed:c5:2d:d8:a6: f2:59:95:a9:31:eb:9e:47:32:2a:1c:0d:40:6a:e7: cf:7c:e4:2d:b9:78:0f:2e:54:32:31:26:3c:b3:42: b1:37:26:7d:ac:10:06:64:dc:05:bc:7a:35:8f:8a: f2:53:b7:07:18:a1:f6:4a:40:ae:bf:4a:d4:cb:83: 4a:05:bc:57:ff:97:9f:41:8d:70:41:11:27:85:e2: cc:3f:05:dd:2f:97:1a:5f:29:98:2d:cb:f0:df:bf: 60:eb:7b:cf:b8:0f:0b:21:b8:6f:f0:0c:83:63:f8: fd:8f:d5:ce:d9:53:85:bc:f7:d7:54:79:19:ee:da: ed:21:c4:b6:77:5d:89:54:92:c1:9c:29:3e:1f:9a: f4:e5:3c:24:21:13:6d:35:ef:db:26:f0:d1:75:2d: 6e:bb:6b:fe:a4:9b:27:cf:e8:8a:0a:0f:36:6e:61: d0:7b:73:29:66:99:e8:1b:17:64:5b:6f:7a:54:ae: b8:95:72:17:fd:6c:f4:be:dc:9a:54:7d:3b:af:c7: 60:34:52:e5:c4:5e:7c:63:bd:97:a3:c3:1e:e6:64: be:2d:9d:ca:8b:7e:b8:ed:34:67:6c:bd:c4:6f:61: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:25:01:FE:51:49:41:15:77:B9:08:E0:C7:0D:FF:A5:F7:20:8D X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:90:5a:7c:bd:7a:50:0c:4a:11:78:72:f6:20:c9:4e:f8:46: 1b:52:8d:a8:b9:1c:90:98:57:3e:3b:84:54:a4:1c:40:45:f2: 35:2b:34:d0:d7:64:4d:47:88:c7:cd:3e:a7:15:64:2d:1f:3d: 82:9a:34:38:e5:d4:2c:a4:37:31:2f:f7:ac:ef:4e:35:57:a7: be:57:b7:2c:de:0d:51:66:af:92:5e:b9:10:21:ad:db:a9:29: c8:1f:e3:c6:e0:87:08:0c:24:00:bd:fd:66:70:f2:db:d8:b8: 12:8b:40:3e:31:47:52:d4:58:94:e1:c0:b1:61:e7:df:b6:aa: 00:d3:a4:f8:ef:4d:31:c4:26:58:43:0e:f8:31:54:ec:ee:ad: 24:e4:8b:59:d3:d7:a0:e8:99:e3:8d:59:11:2e:24:de:d2:57: 5c:96:b7:15:29:6b:42:a6:0e:7a:dd:50:2b:06:cd:cf:b6:99: 4a:c5:a7:4a:6c:b3:fd:05:52:38:d0:73:0d:d9:7e:25:04:4e: 23:ef:09:44:d0:cb:96:a1:27:62:5c:ba:85:0c:f6:d2:31:11: b1:49:b4:68:ef:6d:25:f3:36:ec:38:90:4d:c3:12:fd:2b:d1: e8:83:80:a7:dc:21:72:94:2d:ac:08:54:23:0d:e1:5e:18:e0: b0:aa:e9:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUwNDI5MDQyODE3WhcNMjUwNTA2MDQyODE3WjAYMRYwFAYD VQQDEw02ODEwNTU2Mi1mOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A1XfzVdKXldO8nLL9y3Y+cEJcGN6dZD7cUt2KbyWZWpMeueRzIqHA1AaufP fOQtuXgPLlQyMSY8s0KxNyZ9rBAGZNwFvHo1j4ryU7cHGKH2SkCuv0rUy4NKBbxX /5efQY1wQREnheLMPwXdL5caXymYLcvw379g63vPuA8LIbhv8AyDY/j9j9XO2VOF vPfXVHkZ7trtIcS2d12JVJLBnCk+H5r05TwkIRNtNe/bJvDRdS1uu2v+pJsnz+iK Cg82bmHQe3MpZpnoGxdkW296VK64lXIX/Wz0vtyaVH07r8dgNFLlxF58Y72Xo8Me 5mS+LZ3Ki3647TRnbL3Eb2GmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOsJQH+ UUlBFXe5CODHDf+l9yCNMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+kFp8vXpQDEoReHL2IMlO+EYbUo2ouRyQmFc+O4RUpBxARfI1KzTQ 12RNR4jHzT6nFWQtHz2CmjQ45dQspDcxL/es7041V6e+V7cs3g1RZq+SXrkQIa3b qSnIH+PG4IcIDCQAvf1mcPLb2LgSi0A+MUdS1FiU4cCxYefftqoA06T4700xxCZY Qw74MVTs7q0k5ItZ09eg6JnjjVkRLiTe0ldclrcVKWtCpg563VArBs3PtplKxadK bLP9BVI40HMN2X4lBE4j7wlE0MuWoSdiXLqFDPbSMRGxSbRo720l8zbsOJBNwxL9 K9Hog4Cn3CFylC2sCFQjDeFeGOCwqumI -----END CERTIFICATE-----Generated at Wed Apr 30 11:20:03 2025 by rpki-client