$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: qpPoBa3dKELaV9bwENsnL7HkjpF83jn05lvwmpKlAB0= Subject key identifier: 68:90:0F:46:5C:71:C5:9F:3F:D4:3B:8D:18:3B:E9:5F:9D:1C:CD:4A Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 0151 Signing time: Tue 17 Jun 2025 03:11:56 +0000 Manifest this update: Tue 17 Jun 2025 03:11:55 +0000 Manifest next update: Tue 24 Jun 2025 03:11:55 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: i14BTEn3k2QRHDackDHw4WDRzOfBqdljRhd4xoysyok=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: MTq717nmucrc35Yd/8a9v/UNjUpnghaYXRqZ7x8/L7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Jun 17 03:11:55 2025 GMT Not After : Jun 24 03:11:55 2025 GMT Subject: CN=6850dcfb-0df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:28:fc:af:49:93:ce:9a:b8:cd:ab:74:bc: 31:8f:fc:f6:7a:41:d5:f2:7b:f1:37:3d:23:d8:1a: af:a2:7a:b4:13:ba:2b:de:2f:f6:01:ad:13:d9:fb: 2d:43:f5:c0:9a:31:57:3e:59:76:e9:0e:59:ae:c4: 4b:05:45:28:11:f0:8e:2a:66:2e:a8:de:b0:6f:a2: 1a:87:c3:74:25:e6:12:9b:c0:d4:c6:b5:2a:0e:1a: 4f:6e:86:cf:16:10:22:ac:66:e1:84:f2:b1:24:15: 88:f5:79:76:d3:5d:08:48:9d:99:d7:a7:db:3d:38: b4:91:a9:77:ee:99:46:23:f7:16:c7:a5:b6:6c:d6: 9a:91:79:77:2a:f3:13:e3:73:cc:4a:ac:1b:20:fe: dd:13:a0:cf:fd:a5:35:f3:fd:02:ec:db:a9:c0:ba: 13:71:9d:ba:55:6b:0a:b0:f6:fe:ec:28:81:b9:a4: 9f:67:63:21:7d:48:dd:ac:2b:e2:46:96:f7:78:1e: 8d:20:ff:b5:0e:8d:9e:c8:a7:b1:4d:5b:47:a9:03: f3:2a:cb:91:3b:41:a0:cf:ba:7e:5a:00:34:bf:f6: f2:cc:ee:9f:3e:d1:ca:4a:2b:75:40:4b:44:07:ce: ca:c6:92:47:32:56:02:b4:38:9f:bd:d8:06:54:a2: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:90:0F:46:5C:71:C5:9F:3F:D4:3B:8D:18:3B:E9:5F:9D:1C:CD:4A X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:12:20:93:b8:f6:74:93:3a:a0:87:b8:e1:bc:f7:cf:8e:19: 0b:35:17:b3:f9:63:46:3c:54:67:58:ca:8e:45:7c:d0:e0:82: 74:10:8c:f2:f2:ce:35:4c:e4:01:64:b4:c5:61:54:bd:da:23: 40:29:69:a0:6f:93:92:69:57:40:af:63:92:92:49:0c:7e:13: 3b:32:db:9c:7f:4a:cb:3e:18:44:8f:20:2c:b9:c5:d8:56:c5: 00:08:ef:c9:36:5c:7d:24:e3:da:c3:ea:2d:1d:e5:b9:27:44: 9b:79:d3:ce:a4:71:60:42:94:c1:60:2e:25:0c:e2:47:65:29: ce:b0:38:9c:d8:fc:d4:99:15:39:a7:de:4d:65:38:06:ee:d9: 0b:27:61:4c:03:e4:60:b9:b6:35:91:4e:bb:cd:52:46:18:32: f4:b9:e5:d0:2a:9a:48:b7:7a:0f:87:e4:b2:ad:bc:0a:41:b5: ec:23:d5:7a:f9:c5:a1:9a:0a:70:09:30:a7:14:be:03:08:25: 26:bf:a4:ad:86:86:a1:e8:8a:cb:1d:5c:76:1b:2d:90:49:76: af:db:01:9c:4c:29:1e:99:eb:9f:48:f2:2c:35:93:8f:4c:ba: d4:36:a4:3d:ac:64:99:37:97:2a:42:bc:30:e9:c7:21:b1:15: 24:68:e6:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUwNjE3MDMxMTU1WhcNMjUwNjI0MDMxMTU1WjAYMRYwFAYD VQQDEw02ODUwZGNmYi0wZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyMo/K9Jk86auM2rdLwxj/z2ekHV8nvxNz0j2Bqvonq0E7or3i/2Aa0T2fst Q/XAmjFXPll26Q5ZrsRLBUUoEfCOKmYuqN6wb6Iah8N0JeYSm8DUxrUqDhpPbobP FhAirGbhhPKxJBWI9Xl2010ISJ2Z16fbPTi0kal37plGI/cWx6W2bNaakXl3KvMT 43PMSqwbIP7dE6DP/aU18/0C7NupwLoTcZ26VWsKsPb+7CiBuaSfZ2MhfUjdrCvi Rpb3eB6NIP+1Do2eyKexTVtHqQPzKsuRO0Ggz7p+WgA0v/byzO6fPtHKSit1QEtE B87KxpJHMlYCtDifvdgGVKIMyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiQD0Zc ccWfP9Q7jRg76V+dHM1KMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdEiCTuPZ0kzqgh7jhvPfPjhkLNRez+WNGPFRnWMqORXzQ4IJ0EIzy 8s41TOQBZLTFYVS92iNAKWmgb5OSaVdAr2OSkkkMfhM7Mtucf0rLPhhEjyAsucXY VsUACO/JNlx9JOPaw+otHeW5J0SbedPOpHFgQpTBYC4lDOJHZSnOsDic2PzUmRU5 p95NZTgG7tkLJ2FMA+RgubY1kU67zVJGGDL0ueXQKppIt3oPh+SyrbwKQbXsI9V6 +cWhmgpwCTCnFL4DCCUmv6Sthoah6IrLHVx2Gy2QSXav2wGcTCkemeufSPIsNZOP TLrUNqQ9rGSZN5cqQrww6cchsRUkaOY1 -----END CERTIFICATE-----Generated at Wed Jun 18 08:11:17 2025 by rpki-client