$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: rMbk5SoscW53wrxOqoVMR2mvDwnLa2aBINoGEu6wMQE= Subject key identifier: A0:4D:F5:1A:F7:27:E8:A6:AA:A3:F5:CC:0B:7E:AC:6A:C6:91:E4:31 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 105D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 1052 Signing time: Fri 02 May 2025 17:33:39 +0000 Manifest this update: Fri 02 May 2025 17:33:39 +0000 Manifest next update: Fri 09 May 2025 17:33:39 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: sw3YKpqNCBw1GIieehkGZErM+NFvSvqomZFHNWHwxoE=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4189 (0x105d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: May 2 17:33:39 2025 GMT Not After : May 9 17:33:39 2025 GMT Subject: CN=681501f3-f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:1e:6d:3a:5f:48:22:57:ce:7c:62:4e:a2: 2d:e4:b4:2c:d2:19:49:0b:e9:b8:2a:b9:1b:dd:00: 50:cb:29:7d:1b:64:81:de:a9:25:2c:ba:e8:02:19: 80:83:b5:16:21:11:af:99:4b:91:f2:33:e1:36:98: 94:58:10:0f:bc:1d:0c:dd:1d:b1:fd:61:47:30:a1: 8d:8a:1b:18:43:57:8f:12:de:a6:87:d2:4a:59:72: 1f:97:ce:e1:a1:9c:81:1e:d5:5a:02:6c:fb:92:74: ec:db:e7:79:42:58:cf:d6:6b:6a:97:93:6b:c4:d9: de:12:9e:fd:34:cf:0d:a1:b4:f7:67:9c:fd:39:f5: f3:1f:b9:6d:6d:f5:2c:32:1c:a4:b0:d9:de:bb:66: f9:c2:eb:cb:7e:54:4a:0d:47:6e:1f:a2:e6:fa:ad: 9f:65:6c:33:87:49:f4:70:e8:21:37:0f:9b:39:69: 52:06:a6:54:bf:9b:6a:ca:94:bf:b7:c4:1a:76:ca: a1:17:9e:fa:cc:77:19:1a:7f:8d:83:a4:c3:07:d6: c8:74:cd:cd:68:98:0c:25:e6:13:c2:28:5c:6f:ff: 0e:48:d4:8f:f2:d8:97:fa:8d:f6:e9:2d:4a:c3:11: f4:fa:6a:fe:d8:84:2d:00:fd:11:e1:7f:1d:f4:9d: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4D:F5:1A:F7:27:E8:A6:AA:A3:F5:CC:0B:7E:AC:6A:C6:91:E4:31 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c9:03:9a:62:47:76:4d:59:c7:fb:f4:c3:b2:af:56:06:26: b4:ef:a8:14:e6:ef:de:6a:a6:1d:89:ba:07:bc:be:90:6d:11: 1d:28:5f:4a:e3:9a:e3:14:76:3a:b8:81:62:e4:de:69:19:34: 36:de:c5:21:c9:15:fe:fc:98:76:7d:66:eb:37:6e:36:69:71: 5e:aa:6c:94:a5:84:2a:34:4c:c2:49:df:ec:c0:86:59:33:41: c7:88:74:51:01:54:33:78:dd:cf:9c:39:e9:7d:0c:c5:8f:25: 44:d2:a8:00:b6:b2:2d:75:07:90:cb:ce:8f:6e:91:0b:e1:18: ab:84:0c:7d:7a:29:8d:37:9a:b4:8f:0c:04:cc:ed:e0:d8:9f: e6:53:ad:80:d1:e2:ad:f3:38:f0:24:ae:60:fa:b4:ef:01:f7: 7c:05:6e:64:d0:c4:de:43:ad:f3:97:84:92:3b:66:ef:18:59: d3:1d:a6:f9:f2:b1:45:cc:6d:d5:a0:01:d9:ae:15:fb:83:8c: b0:78:9d:92:eb:ca:92:f7:bc:2a:7a:d3:4e:f9:10:6a:51:1e: 9f:d8:b4:c5:2b:c7:44:94:0f:ae:57:63:34:61:ec:ed:dd:c0: a2:97:38:bf:46:c5:a3:7c:3c:1f:9b:f0:1f:40:31:f7:0d:dc: c3:81:3f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwNTAyMTczMzM5WhcNMjUwNTA5MTczMzM5WjAYMRYwFAYD VQQDEw02ODE1MDFmMy1mNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrcebTpfSCJXznxiTqIt5LQs0hlJC+m4Krkb3QBQyyl9G2SB3qklLLroAhmA g7UWIRGvmUuR8jPhNpiUWBAPvB0M3R2x/WFHMKGNihsYQ1ePEt6mh9JKWXIfl87h oZyBHtVaAmz7knTs2+d5QljP1mtql5NrxNneEp79NM8NobT3Z5z9OfXzH7ltbfUs MhyksNneu2b5wuvLflRKDUduH6Lm+q2fZWwzh0n0cOghNw+bOWlSBqZUv5tqypS/ t8QadsqhF576zHcZGn+Ng6TDB9bIdM3NaJgMJeYTwihcb/8OSNSP8tiX+o326S1K wxH0+mr+2IQtAP0R4X8d9J3NCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBN9Rr3 J+imqqP1zAt+rGrGkeQxMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7yQOaYkd2TVnH+/TDsq9WBia076gU5u/eaqYdiboHvL6QbREdKF9K 45rjFHY6uIFi5N5pGTQ23sUhyRX+/Jh2fWbrN242aXFeqmyUpYQqNEzCSd/swIZZ M0HHiHRRAVQzeN3PnDnpfQzFjyVE0qgAtrItdQeQy86PbpEL4RirhAx9eimNN5q0 jwwEzO3g2J/mU62A0eKt8zjwJK5g+rTvAfd8BW5k0MTeQ63zl4SSO2bvGFnTHab5 8rFFzG3VoAHZrhX7g4yweJ2S68qS97wqetNO+RBqUR6f2LTFK8dElA+uV2M0Yezt 3cCilzi/RsWjfDwfm/AfQDH3DdzDgT8n -----END CERTIFICATE-----Generated at Sun May 4 12:08:20 2025 by rpki-client