$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: yDrqREov/bSgdzKKLM9faleSNpfejVa/jBGshbPmQP0= Subject key identifier: 5F:ED:63:F4:AF:AC:EC:CD:79:6C:A5:75:67:35:93:D0:44:B4:E0:A4 Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: 63 Signing time: Fri 25 Apr 2025 04:36:43 +0000 Manifest this update: Fri 25 Apr 2025 04:36:43 +0000 Manifest next update: Fri 02 May 2025 04:36:43 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: +zOvUlTNm5RFzcDp8wpKbhEkhYehB3Kz5hSTUrD01+U=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Apr 25 04:36:43 2025 GMT Not After : May 2 04:36:43 2025 GMT Subject: CN=680b115b-d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:19:e3:2c:27:6b:e9:b8:41:b9:65:8d:d2: c7:c4:76:d0:ab:40:f9:f6:db:ed:3c:d7:9a:25:f4: ca:cb:7b:a5:71:95:23:39:b9:0f:55:ca:78:20:b6: 71:93:11:dc:2e:4c:b7:37:07:cd:43:fc:70:db:e9: 0e:af:6f:a8:39:6b:02:1d:bc:38:77:a9:da:ab:f5: 6c:1c:bc:94:7c:27:3f:1c:94:f9:9a:c1:f0:f4:2c: 2c:3c:d4:32:a5:cb:88:79:e6:df:cd:a6:46:84:9f: 99:2d:f4:e6:03:df:be:03:31:c2:27:87:cd:5c:22: 7e:e7:45:02:a0:81:a8:7f:45:7f:7e:40:8f:81:14: be:2f:94:14:a6:a7:ae:4e:36:d2:02:ad:c3:5c:f4: 3f:55:3c:08:e0:94:79:b0:ae:80:3a:bc:f8:15:83: 0f:9c:8e:26:8d:50:6a:a9:c6:69:95:13:3f:b3:3f: e1:3c:61:d9:e1:56:bf:92:c1:8e:47:8f:0c:e6:94: 0f:73:10:01:59:9d:c8:f8:48:99:07:bd:37:fc:18: f7:d5:fa:62:0d:fb:a6:da:38:fb:f1:66:5e:aa:e1: 41:25:db:d9:98:55:b1:ff:1e:0b:5c:f6:2b:14:84: a2:6e:78:ed:33:d7:5b:9a:7f:af:dd:cb:18:e6:f5: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:63:F4:AF:AC:EC:CD:79:6C:A5:75:67:35:93:D0:44:B4:E0:A4 X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ee:7b:2a:c4:6c:38:8e:96:60:e4:8c:f7:94:e4:13:9e:30: 14:fd:29:86:6e:b6:00:70:b3:19:cf:45:72:ac:1a:a3:6e:45: ba:25:53:fd:c4:1f:73:d6:0c:1b:20:dd:d0:03:b8:be:b1:71: f3:de:64:37:56:39:b8:f2:b6:f3:1a:d6:68:05:5c:1b:fd:49: 50:dd:41:cf:67:a7:b4:2d:1f:6f:3b:db:7c:64:a3:c7:8d:03: 5d:b5:09:55:2b:9a:79:c1:03:41:06:11:fc:ec:e6:8a:14:6b: dc:18:30:c4:7b:72:15:87:6f:90:13:ef:80:28:59:55:cb:1a: 98:7e:e3:ef:11:ec:04:13:f2:f6:fe:16:c6:4c:fd:09:c9:2f: 4d:b5:40:62:61:aa:27:59:70:0d:07:0c:fe:0f:05:98:b7:77: d0:08:a6:82:1f:17:fb:56:85:b3:e6:8a:4f:3d:0d:48:2a:1a: 0a:49:61:40:6a:99:a2:71:34:8d:d2:d6:a3:5d:a8:b8:4a:22: 1c:41:fe:70:39:b9:60:4e:61:65:34:ff:0a:7a:5c:7d:e1:80: b2:4c:b3:41:5e:7c:75:6f:5c:0d:84:db:92:a0:59:f7:e4:b8: 2c:8a:ef:a0:8c:81:40:a5:b7:c8:2e:84:e8:17:9d:88:57:66: f5:2d:89:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTUzQzExMC8GA1UEBRMoNzQ0NTkzMzYzN0NDQTMwOUE0QzE2MUFCRkVERjg3NzlD QjJBQjEzRjAeFw0yNTA0MjUwNDM2NDNaFw0yNTA1MDIwNDM2NDNaMBgxFjAUBgNV BAMTDTY4MGIxMTViLWQwOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiYhnjLCdr6bhBuWWN0sfEdtCrQPn22+0815ol9MrLe6VxlSM5uQ9VynggtnGT EdwuTLc3B81D/HDb6Q6vb6g5awIdvDh3qdqr9WwcvJR8Jz8clPmawfD0LCw81DKl y4h55t/NpkaEn5kt9OYD374DMcInh81cIn7nRQKggah/RX9+QI+BFL4vlBSmp65O NtICrcNc9D9VPAjglHmwroA6vPgVgw+cjiaNUGqpxmmVEz+zP+E8YdnhVr+SwY5H jwzmlA9zEAFZncj4SJkHvTf8GPfV+mIN+6baOPvxZl6q4UEl29mYVbH/Hgtc9isU hKJueO0z11uaf6/dyxjm9YhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX+1j9K+s 7M15bKV1ZzWT0ES04KQwHwYDVR0jBBgwFoAUdEWTNjfMowmkwWGr/t+HecsqsT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFNTNDLzI5Qjg2OTk0OTAz QTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEVXVE5qZk1vd21rd1dHcl90LUhlY3Nxc1Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF NTNDLzI5Qjg2OTk0OTAzQTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dt a3dXR3JfdC1IZWNzcXNUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArueyrEbDiOlmDkjPeU5BOeMBT9KYZutgBwsxnPRXKsGqNuRbolU/3E H3PWDBsg3dADuL6xcfPeZDdWObjytvMa1mgFXBv9SVDdQc9np7QtH28723xko8eN A121CVUrmnnBA0EGEfzs5ooUa9wYMMR7chWHb5AT74AoWVXLGph+4+8R7AQT8vb+ FsZM/QnJL021QGJhqidZcA0HDP4PBZi3d9AIpoIfF/tWhbPmik89DUgqGgpJYUBq maJxNI3S1qNdqLhKIhxB/nA5uWBOYWU0/wp6XH3hgLJMs0FefHVvXA2E25KgWffk uCyK76CMgUClt8guhOgXnYhXZvUtiZ8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:05 2025 by rpki-client