$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: +9OKZurlUrjxLojpJ6hQjIsidFarnk33q7EXWt1Ezdg= Subject key identifier: F7:18:05:F4:77:1E:55:C6:8F:70:08:8D:89:10:B0:FC:A2:0B:54:09 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 04D4 Signing time: Thu 24 Apr 2025 23:34:44 +0000 Manifest this update: Thu 24 Apr 2025 23:34:43 +0000 Manifest next update: Thu 01 May 2025 23:34:43 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: fapRopOki49rlRxJ9DeGalKV7kwkZTnQcWfkp8SBDGs=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Apr 24 23:34:43 2025 GMT Not After : May 1 23:34:43 2025 GMT Subject: CN=680aca93-4cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:0a:2e:48:fd:ed:46:bb:7e:d4:0b:35:5d: 69:a2:24:c3:84:ce:bd:05:4e:65:56:7e:e0:a9:a3: 51:de:bd:17:64:5e:29:88:21:ac:79:8f:42:63:44: 58:87:19:ec:22:d1:54:5d:94:57:11:cf:24:86:b5: b1:a1:35:b2:88:3e:67:b1:d3:f7:7f:6c:ab:b8:1e: 63:6e:4e:19:59:77:3c:19:28:e6:ff:f3:ef:2e:c7: c5:e4:fc:15:11:e5:e8:65:c4:1c:51:80:55:c5:24: 78:2d:04:95:3b:fc:0c:b6:99:12:40:a5:b2:69:b1: 23:8b:e9:f2:a8:87:f6:a1:a3:4b:65:f6:62:b7:9d: 52:a6:89:c2:11:6d:96:ba:20:cd:d6:75:35:28:3e: 3f:b9:ba:3d:d1:4e:59:96:12:7a:9a:1b:34:d1:dc: 88:08:bb:e3:a9:89:ec:4c:9b:df:30:7e:d2:3d:60: fa:d1:7b:15:fb:f8:64:ab:de:63:fd:79:60:fa:51: 55:ad:04:bd:d8:98:23:a5:2a:36:82:87:6d:80:2d: 5f:42:4d:5f:fd:a4:c3:a8:94:f6:ab:c5:4a:cb:62: 34:ff:45:3c:25:2d:11:5b:61:11:5c:ca:bc:38:92: 17:a4:e7:0b:55:d8:2e:23:7d:f8:83:27:b6:ee:27: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:18:05:F4:77:1E:55:C6:8F:70:08:8D:89:10:B0:FC:A2:0B:54:09 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:35:18:c5:41:d9:62:55:f8:40:14:58:e4:bc:1a:12:71:31: 5f:93:07:12:e2:2f:a6:52:30:11:ec:ac:8c:8a:ba:f7:0d:92: 13:65:cc:ee:19:c9:48:36:5b:4d:b2:07:31:48:0c:9a:4d:ef: 45:6d:0a:74:6c:02:62:9b:6f:1d:93:9d:50:dc:9a:9d:41:fb: 45:64:1e:42:2c:32:2a:a6:01:97:76:7b:b6:37:8d:b5:5f:18: e2:f9:ee:91:ed:2a:76:a3:dc:8e:9c:24:3c:6c:97:06:aa:b1: ff:44:31:72:64:e3:bf:9d:78:eb:9e:a8:a7:b1:d9:4c:1c:7a: 03:73:ec:6d:93:f3:83:09:01:39:12:44:50:0b:f5:b4:f7:3d: 76:52:4d:8a:00:92:a4:4f:fb:f4:4b:d0:ad:52:50:e4:e4:09: 60:25:c4:09:53:ba:bd:9c:be:12:f3:56:3c:03:6a:c5:79:ee: c4:d9:57:91:df:27:15:34:2a:80:74:b5:11:03:20:fe:7f:ac: 21:f4:5f:a1:3f:28:7d:2c:76:a5:fe:25:9c:09:fb:64:af:b2: 3f:27:d0:82:1e:19:12:de:0a:64:88:5f:e9:2f:1b:7e:6c:0b: a3:77:7d:28:73:7a:74:52:00:e7:d9:e4:dd:2a:b7:4d:84:0d: e0:fb:e7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwNDI0MjMzNDQzWhcNMjUwNTAxMjMzNDQzWjAYMRYwFAYD VQQDEw02ODBhY2E5My00Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD0KLkj97Ua7ftQLNV1poiTDhM69BU5lVn7gqaNR3r0XZF4piCGseY9CY0RY hxnsItFUXZRXEc8khrWxoTWyiD5nsdP3f2yruB5jbk4ZWXc8GSjm//PvLsfF5PwV EeXoZcQcUYBVxSR4LQSVO/wMtpkSQKWyabEji+nyqIf2oaNLZfZit51SponCEW2W uiDN1nU1KD4/ubo90U5ZlhJ6mhs00dyICLvjqYnsTJvfMH7SPWD60XsV+/hkq95j /Xlg+lFVrQS92JgjpSo2godtgC1fQk1f/aTDqJT2q8VKy2I0/0U8JS0RW2ERXMq8 OJIXpOcLVdguI334gye27ic3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcYBfR3 HlXGj3AIjYkQsPyiC1QJMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMNRjFQdliVfhAFFjkvBoScTFfkwcS4i+mUjAR7KyMirr3DZITZczu GclINltNsgcxSAyaTe9FbQp0bAJim28dk51Q3JqdQftFZB5CLDIqpgGXdnu2N421 Xxji+e6R7Sp2o9yOnCQ8bJcGqrH/RDFyZOO/nXjrnqinsdlMHHoDc+xtk/ODCQE5 EkRQC/W09z12Uk2KAJKkT/v0S9CtUlDk5AlgJcQJU7q9nL4S81Y8A2rFee7E2VeR 3ycVNCqAdLURAyD+f6wh9F+hPyh9LHal/iWcCftkr7I/J9CCHhkS3gpkiF/pLxt+ bAujd30oc3p0UgDn2eTdKrdNhA3g++e5 -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:29 2025 by rpki-client