$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: kA3/GmN3fRoJv5I8LWKAtlw8993ktXXQECaxEEhLzcY= Subject key identifier: 5A:B5:06:20:BB:77:B0:79:D8:A8:D7:EC:DB:8C:9B:26:9D:58:84:B2 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D1A Signing time: Thu 12 Jun 2025 17:55:12 +0000 Manifest this update: Thu 12 Jun 2025 17:55:12 +0000 Manifest next update: Thu 19 Jun 2025 17:55:12 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: LFveCEvBNU6zJj3r8tcGfySx7m2hILMREFC8vnEmkIk=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Jun 12 17:55:12 2025 GMT Not After : Jun 19 17:55:12 2025 GMT Subject: CN=684b1480-0273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:8e:32:88:33:ae:c3:e5:72:83:33:70:46: f2:4a:d6:6f:a0:ab:8c:1f:2b:2d:b4:c1:93:0f:0e: 99:c2:e7:1d:6b:01:5b:12:7a:6c:8e:32:64:37:25: e5:6b:07:a4:40:2d:02:4d:fe:5b:56:28:84:a1:87: 31:61:a9:a0:b9:01:1c:bc:bc:75:34:2e:59:9c:a9: 49:64:d1:11:af:cb:02:2f:6a:d1:d8:d2:40:3f:47: fa:60:f9:6c:40:4b:11:7d:92:3f:1d:40:ac:24:09: c7:06:37:33:7a:bd:4a:76:3a:16:a5:c8:53:e3:f6: ee:70:7b:06:9e:05:88:b7:11:7c:1f:9a:d6:03:04: 4c:6c:32:63:b7:dc:3f:73:5c:77:6e:ab:1d:f1:6a: d5:98:9c:30:7a:5b:8b:46:8b:28:38:c3:fa:ec:7a: 10:bc:f4:d5:d0:18:22:08:50:6b:a9:5c:32:e7:43: 92:9b:f5:c0:18:11:78:60:1e:18:de:99:02:f5:6c: 52:4a:81:5c:53:c8:54:de:db:e5:43:8a:df:ca:fc: e2:11:f4:f6:3c:1e:5d:ef:e1:a1:85:fa:7c:e8:59: 88:eb:d2:b9:45:92:82:35:1f:9f:f3:54:67:07:97: cf:b8:7f:c5:30:53:ee:f4:b0:77:e2:15:cf:d3:94: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:06:20:BB:77:B0:79:D8:A8:D7:EC:DB:8C:9B:26:9D:58:84:B2 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:40:31:eb:e0:d1:a8:75:8b:1b:24:5b:1d:46:3b:51:e6:cf: 37:55:2f:e3:1d:db:b1:d6:46:a4:a7:b8:38:63:5e:31:0b:61: 6b:0d:6d:8c:36:2e:3e:14:ea:45:ab:bf:24:f0:35:4d:d6:ea: 1d:66:de:0e:1c:f2:ed:ea:70:ff:82:7d:91:e3:81:cd:26:d4: 1e:a0:d7:26:16:e8:22:c3:50:8e:c3:82:b5:b5:24:cb:ff:a6: 29:73:3e:ec:17:43:6d:68:4d:be:46:0a:55:04:ee:fa:e7:b1: 9f:b7:99:91:c6:c1:ad:96:0f:07:c3:db:d3:89:c5:00:cb:13: bd:04:9d:4e:77:77:90:f5:64:1f:67:38:9f:b3:91:ad:11:46: 72:e8:2d:e7:92:f0:d9:15:5d:5b:f5:8f:71:c0:a6:fd:7f:61: 98:af:93:36:36:c5:b7:0d:6f:b6:04:8d:56:81:d8:b9:9d:55: f4:e7:d3:b2:7d:5e:ab:f0:3e:f6:14:03:f7:0b:14:29:c3:5c: dd:a7:4d:fe:43:d3:6b:d6:88:3a:34:98:a0:c3:6d:a8:b8:74: 08:16:88:7d:72:6b:14:ff:a1:dc:c6:bf:27:47:57:5e:99:eb: 5b:b2:7a:6e:30:e3:3e:6e:a8:bb:5e:9c:c2:2e:b7:e9:96:36: 22:5f:da:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNjEyMTc1NTEyWhcNMjUwNjE5MTc1NTEyWjAYMRYwFAYD VQQDEw02ODRiMTQ4MC0wMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqveOMogzrsPlcoMzcEbyStZvoKuMHysttMGTDw6ZwucdawFbEnpsjjJkNyXl awekQC0CTf5bViiEoYcxYamguQEcvLx1NC5ZnKlJZNERr8sCL2rR2NJAP0f6YPls QEsRfZI/HUCsJAnHBjczer1KdjoWpchT4/bucHsGngWItxF8H5rWAwRMbDJjt9w/ c1x3bqsd8WrVmJwweluLRosoOMP67HoQvPTV0BgiCFBrqVwy50OSm/XAGBF4YB4Y 3pkC9WxSSoFcU8hU3tvlQ4rfyvziEfT2PB5d7+Ghhfp86FmI69K5RZKCNR+f81Rn B5fPuH/FMFPu9LB34hXP05SugQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq1BiC7 d7B52KjX7NuMmyadWISyMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMQDHr4NGodYsbJFsdRjtR5s83VS/jHdux1kakp7g4Y14xC2FrDW2M Ni4+FOpFq78k8DVN1uodZt4OHPLt6nD/gn2R44HNJtQeoNcmFugiw1COw4K1tSTL /6Ypcz7sF0NtaE2+RgpVBO7657Gft5mRxsGtlg8Hw9vTicUAyxO9BJ1Od3eQ9WQf Zzifs5GtEUZy6C3nkvDZFV1b9Y9xwKb9f2GYr5M2NsW3DW+2BI1Wgdi5nVX059Oy fV6r8D72FAP3CxQpw1zdp03+Q9Nr1og6NJigw22ouHQIFoh9cmsU/6Hcxr8nR1de metbsnpuMOM+bqi7XpzCLrfpljYiX9o9 -----END CERTIFICATE-----Generated at Sat Jun 14 19:06:07 2025 by rpki-client