$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft File: DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json) Hash identifier: +wiPdPJZyWo+k0rycas80FOkmdvn0hRbVw1s+kLS9Vw= Subject key identifier: 67:C0:F5:CB:3B:D3:6A:D9:1E:C3:D0:2B:7D:DD:0D:00:7A:24:73:1C Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft Manifest number: 53 Signing time: Fri 13 Jun 2025 06:09:08 +0000 Manifest this update: Fri 13 Jun 2025 06:09:08 +0000 Manifest next update: Fri 20 Jun 2025 06:09:08 +0000 Files and hashes: 1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: +84TzZwXdE53rgZUWQOSaiGlscRYxl3ha19Na4yp6GM=) 2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Validity Not Before: Jun 13 06:09:08 2025 GMT Not After : Jun 20 06:09:08 2025 GMT Subject: CN=684bc084-a4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:82:46:9a:83:02:69:05:89:60:9c:fc:eb: c0:4e:a5:83:2a:5b:c0:09:12:7a:24:75:3f:c8:12: 78:44:6d:5a:ec:2c:6b:8f:40:b7:0f:8e:a0:47:2d: a8:1f:49:8c:7b:3c:2c:fe:d5:84:b0:2d:65:d2:a0: 3c:72:a9:d9:69:6a:92:42:d2:fe:ef:13:9f:d1:d9: 30:86:04:bf:79:b9:a6:d3:c9:bf:1b:cb:58:4f:de: da:97:15:35:c8:da:c7:61:5d:32:df:fd:bf:6a:c5: 21:ab:15:e0:71:16:39:70:07:9c:57:c6:39:d3:c6: 7c:eb:47:3a:1e:30:54:7f:fc:fc:b9:a9:69:b0:f6: 22:2a:90:cd:ea:e8:e9:16:11:4e:4a:72:10:ae:30: e3:18:c8:2e:25:cf:f2:9d:f6:0f:33:f4:e5:7a:f0: d7:0a:38:28:63:a8:81:f5:26:0f:df:50:79:ec:7f: ae:67:04:84:92:37:37:e2:69:c9:f4:7e:90:fc:81: 19:ea:8a:2d:7c:c4:97:61:5e:53:1f:f0:d8:1c:de: 07:4f:83:99:ca:98:58:2f:0f:33:e0:47:13:8f:b1: 9b:4e:8c:e4:39:44:f6:f7:3a:9f:f6:fd:5b:b6:fd: 48:ae:5f:f1:3c:0e:4b:50:f2:40:6a:7c:db:5c:4e: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:F5:CB:3B:D3:6A:D9:1E:C3:D0:2B:7D:DD:0D:00:7A:24:73:1C X509v3 Authority Key Identifier: keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b7:56:ae:5e:0c:ad:11:cb:55:12:1c:e4:c0:44:eb:f9:cd: 17:ca:14:94:f4:a5:e7:bc:1e:31:50:d1:9b:32:66:90:fd:dd: cd:84:3a:a4:0c:e9:60:0e:80:c0:50:96:26:d2:94:11:87:5b: d6:ea:9b:26:57:65:8d:13:e8:94:9a:0c:f2:20:11:f8:97:21: 56:25:e9:e7:37:a2:25:43:02:57:6a:b8:ed:cf:b0:4c:c2:90: 72:cf:4d:10:1c:bd:0d:b5:d8:f4:c2:08:19:33:03:9a:51:77: fb:b0:82:a0:c8:6d:88:de:fb:09:39:1f:1f:71:da:68:7f:9b: d9:6c:90:65:16:db:15:f6:f1:63:53:d8:34:d1:7b:28:6a:f5: 0f:5b:6e:1e:7b:e1:59:ac:85:a0:c4:eb:c5:42:a5:0d:74:6c: ca:a0:14:d4:db:09:bb:1f:25:d4:e9:dc:8c:89:9c:d4:0e:e6: e3:aa:75:cb:1f:bb:3a:a3:83:b6:03:52:47:86:81:72:b7:64: 57:0a:41:ec:1e:14:a0:99:78:53:5b:41:86:f6:5a:fd:0a:c8: 2e:e5:dd:6b:4e:37:d0:85:18:e0:a9:68:ab:99:2d:c9:e5:52: 7f:7c:28:c3:c9:56:d0:3b:c3:ad:fe:81:d4:83:56:ad:9b:42: b6:ba:3e:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODk1OTExMC8GA1UEBRMoMEU5MzY2MUFDMTYxNTRGNjVEMkEyRjc4MUEwMzFGMzVD OTMxMDEwMzAeFw0yNTA2MTMwNjA5MDhaFw0yNTA2MjAwNjA5MDhaMBgxFjAUBgNV BAMTDTY4NGJjMDg0LWE0ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwHoJGmoMCaQWJYJz868BOpYMqW8AJEnokdT/IEnhEbVrsLGuPQLcPjqBHLagf SYx7PCz+1YSwLWXSoDxyqdlpapJC0v7vE5/R2TCGBL95uabTyb8by1hP3tqXFTXI 2sdhXTLf/b9qxSGrFeBxFjlwB5xXxjnTxnzrRzoeMFR//Py5qWmw9iIqkM3q6OkW EU5KchCuMOMYyC4lz/Kd9g8z9OV68NcKOChjqIH1Jg/fUHnsf65nBISSNzfiacn0 fpD8gRnqii18xJdhXlMf8Ngc3gdPg5nKmFgvDzPgRxOPsZtOjOQ5RPb3Op/2/Vu2 /UiuX/E8DktQ8kBqfNtcTjqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ8D1yzvT atkew9Arfd0NAHokcxwwHwYDVR0jBBgwFoAUDpNmGsFhVPZdKi94GgMfNckxAQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OTU5L0JCRDE0MDhDQ0RF QjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBaZEtpOTRHZ01mTmNreEFR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHBObUdzRmhWUFpkS2k5NEdnTWZOY2t4QVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OTU5L0JCRDE0MDhDQ0RFQjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBa ZEtpOTRHZ01mTmNreEFRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIC3Vq5eDK0Ry1USHOTAROv5zRfKFJT0pee8HjFQ0ZsyZpD93c2EOqQM 6WAOgMBQlibSlBGHW9bqmyZXZY0T6JSaDPIgEfiXIVYl6ec3oiVDAldquO3PsEzC kHLPTRAcvQ212PTCCBkzA5pRd/uwgqDIbYje+wk5Hx9x2mh/m9lskGUW2xX28WNT 2DTReyhq9Q9bbh574VmshaDE68VCpQ10bMqgFNTbCbsfJdTp3IyJnNQO5uOqdcsf uzqjg7YDUkeGgXK3ZFcKQeweFKCZeFNbQYb2Wv0KyC7l3WtON9CFGOCpaKuZLcnl Un98KMPJVtA7w63+gdSDVq2bQra6PrA= -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:19 2025 by rpki-client