$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: euBCukPWUpMY342DY+cYOjeAgofTAkjzB67h0IyuPNM= Subject key identifier: 85:49:F2:2A:BD:9B:0F:CC:CE:AC:D8:25:CA:8D:8F:D9:EF:D0:28:74 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D01 Signing time: Thu 24 Apr 2025 18:03:09 +0000 Manifest this update: Thu 24 Apr 2025 18:03:08 +0000 Manifest next update: Thu 01 May 2025 18:03:08 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: VaAjG1IueGweSRH5AwbTdua18rD+wIntJ6b6S81Ktlk=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Apr 24 18:03:08 2025 GMT Not After : May 1 18:03:08 2025 GMT Subject: CN=680a7cdc-af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:d6:fd:32:89:4a:b8:40:64:4f:44:d2:0a: fa:e9:e9:21:9c:37:41:e9:27:d3:36:12:1c:b6:9d: 70:12:a6:45:c6:05:05:20:b4:22:aa:34:c1:c1:b4: 33:cb:35:8b:f3:12:7c:40:5f:a6:8d:cf:db:74:83: ed:ee:a9:b5:61:bd:b6:84:67:6f:c9:a4:c8:53:64: 99:06:96:38:9f:df:49:68:22:8f:f6:1f:ab:ec:44: 25:49:92:ba:52:dd:62:f2:71:b8:0e:1a:b9:1c:ef: 40:a0:40:7f:fd:b3:83:65:26:d9:af:c9:00:4f:fa: 76:ef:bf:54:83:9b:55:37:ad:0e:55:bd:5e:d5:ab: 22:d4:13:65:e0:ea:7f:e2:99:bf:3a:b2:e6:fa:d5: fb:1d:c4:71:01:52:7c:73:53:9e:df:39:af:73:8d: b9:2f:1a:65:03:c2:d3:86:cc:af:80:46:9b:69:38: 16:07:eb:ba:a3:ec:8e:62:68:7e:98:be:df:53:d0: 3d:b3:e0:29:ef:ab:51:03:e5:2f:f2:c2:d1:b9:a6: d8:7d:90:46:53:72:91:0f:bc:58:ac:43:fe:26:30: b5:05:c2:bd:85:92:6b:da:b8:31:2f:d3:98:f1:54: 3d:28:d2:79:b0:3a:75:67:45:7b:ce:f1:e0:06:e0: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:49:F2:2A:BD:9B:0F:CC:CE:AC:D8:25:CA:8D:8F:D9:EF:D0:28:74 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:06:48:df:52:40:07:32:92:8d:13:49:e3:f1:15:93:77:65: f9:2a:2d:37:5e:fc:6c:1c:a5:c4:74:4a:41:1d:de:bd:b2:f2: 01:d9:8b:2a:6e:fc:91:cd:ed:81:ae:d8:0f:39:77:4b:72:a9: db:5c:e3:47:f3:49:91:67:ff:ee:07:a6:fe:da:92:46:6d:45: 92:58:a8:3c:8a:25:ce:9f:4f:94:bb:0c:25:4c:53:ed:de:aa: 40:0d:a0:9c:1c:df:2e:83:20:c8:a8:cc:d5:cb:06:78:2e:d0: 70:c3:30:ce:a5:c7:00:58:02:25:b9:4e:9a:41:09:f5:94:fc: 94:1c:0b:01:9d:6b:8a:fa:19:cf:32:2d:51:52:4c:7c:f6:92: 5e:84:a6:24:d3:b5:46:40:98:03:a4:1f:6e:f9:f5:ac:76:5f: dc:af:c4:af:12:76:5e:92:d2:80:53:8e:f2:c3:08:ae:0a:73: 52:fc:31:0e:93:55:b9:1d:99:08:aa:6c:da:fe:b5:c1:85:d8: b5:10:87:42:a6:05:7b:5e:49:82:b4:89:5a:8d:d6:ef:06:f5: 27:25:55:c7:c9:ef:ad:1c:82:4f:56:0a:15:05:4f:7c:31:f8: bd:4c:cd:b3:95:5d:e0:59:92:8e:9d:af:4c:65:12:9c:dc:30: bb:a4:06:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUwNDI0MTgwMzA4WhcNMjUwNTAxMTgwMzA4WjAYMRYwFAYD VQQDEw02ODBhN2NkYy1hZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiPW/TKJSrhAZE9E0gr66ekhnDdB6SfTNhIctp1wEqZFxgUFILQiqjTBwbQz yzWL8xJ8QF+mjc/bdIPt7qm1Yb22hGdvyaTIU2SZBpY4n99JaCKP9h+r7EQlSZK6 Ut1i8nG4Dhq5HO9AoEB//bODZSbZr8kAT/p2779Ug5tVN60OVb1e1asi1BNl4Op/ 4pm/OrLm+tX7HcRxAVJ8c1Oe3zmvc425LxplA8LThsyvgEabaTgWB+u6o+yOYmh+ mL7fU9A9s+Ap76tRA+Uv8sLRuabYfZBGU3KRD7xYrEP+JjC1BcK9hZJr2rgxL9OY 8VQ9KNJ5sDp1Z0V7zvHgBuArhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVJ8iq9 mw/MzqzYJcqNj9nv0Ch0MB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgBkjfUkAHMpKNE0nj8RWTd2X5Ki03XvxsHKXEdEpBHd69svIB2Ysq bvyRze2BrtgPOXdLcqnbXONH80mRZ//uB6b+2pJGbUWSWKg8iiXOn0+UuwwlTFPt 3qpADaCcHN8ugyDIqMzVywZ4LtBwwzDOpccAWAIluU6aQQn1lPyUHAsBnWuK+hnP Mi1RUkx89pJehKYk07VGQJgDpB9u+fWsdl/cr8SvEnZektKAU47ywwiuCnNS/DEO k1W5HZkIqmza/rXBhdi1EIdCpgV7XkmCtIlajdbvBvUnJVXHye+tHIJPVgoVBU98 Mfi9TM2zlV3gWZKOna9MZRKc3DC7pAZR -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:10 2025 by rpki-client