$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: ZgEmT+R2VhJ+srIg4sT1V9mkakKzHzh0BjbOuzCttUI= Subject key identifier: 11:05:CE:C0:08:A6:35:7C:1E:C4:CE:83:13:67:07:EA:18:EF:FF:F5 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1411 Signing time: Fri 02 May 2025 17:07:22 +0000 Manifest this update: Fri 02 May 2025 17:07:22 +0000 Manifest next update: Fri 09 May 2025 17:07:22 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: gN5V+lfKGlNvj4/jWmTfcnNISbkg/jNShweWMxHcE1U=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5168 (0x1430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: May 2 17:07:22 2025 GMT Not After : May 9 17:07:22 2025 GMT Subject: CN=6814fbca-74d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:47:4f:c1:c9:c6:39:45:98:3b:5e:f9:e4: 4f:e7:15:c4:38:2f:78:05:08:6d:c0:62:7c:ce:a4: 81:34:f3:36:55:e9:ab:75:51:26:38:50:0a:6b:2b: 08:f6:34:cf:0d:71:72:55:8a:e3:98:a9:7c:5a:c3: a6:7a:22:36:37:a9:f8:b1:ef:13:dc:ab:28:ab:52: 77:a6:bd:e2:ba:fd:8e:ea:88:bb:48:0f:69:48:10: 20:33:09:f8:71:45:da:ac:23:4c:28:85:e8:41:2a: e4:d2:5f:07:16:1f:02:95:dd:09:45:10:85:46:99: 4a:47:5b:37:66:a2:3d:11:f7:ee:db:c3:34:af:db: c2:a4:83:11:a6:00:d6:03:c4:3b:3c:4a:a4:83:46: c2:9d:d7:26:bd:55:3a:e0:b7:e8:f5:77:f5:3c:a2: bf:ac:a5:2c:2a:e0:e2:95:26:f0:68:07:6c:a0:35: 82:b3:ee:4d:48:e8:cd:8a:aa:b0:2e:6e:a9:fc:55: 6e:60:ac:b1:d2:9c:62:dc:79:6b:e0:13:8b:5c:38: f5:56:dd:c7:12:72:6b:77:3e:24:03:08:58:65:96: 36:21:b8:c6:f2:99:8f:ba:b1:9c:12:63:db:37:19: 0c:82:f8:aa:9e:97:44:5f:b8:0e:d1:68:07:6a:88: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:05:CE:C0:08:A6:35:7C:1E:C4:CE:83:13:67:07:EA:18:EF:FF:F5 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b1:d9:de:19:8b:73:ac:19:a0:f8:6a:8f:02:fe:6c:6a:89: 9f:b8:88:5b:29:51:0d:29:a9:5b:14:6d:09:b7:e7:5d:16:60: 87:1f:87:39:a3:12:6b:0b:1c:79:eb:a5:5f:22:90:fe:98:2a: 92:b5:37:2c:24:d3:14:a1:b8:8f:69:e5:2e:cd:5f:46:93:30: 71:17:8c:d0:b7:51:57:7c:53:ad:cb:02:d9:74:c5:2e:41:68: 09:2d:ba:64:39:95:55:ad:60:2c:c1:09:b3:3f:f3:8b:43:12: b4:2d:41:0e:e0:a9:71:51:29:31:3b:d1:51:50:3a:0f:aa:04: 65:36:a8:94:a5:d5:e6:41:ff:d8:a4:37:f3:71:29:1e:25:86: 24:50:28:91:41:08:82:32:8d:3d:45:f8:44:58:ba:17:24:65: 19:cd:d2:73:2d:d7:6c:4b:11:35:7b:f8:e4:48:1d:47:72:b3: c5:1d:6b:82:c4:9d:46:e3:68:c9:31:55:ac:fb:78:1c:9b:41: 34:77:54:3b:29:57:d6:b2:c6:1a:19:35:07:22:75:e7:c9:c9: 74:cd:ff:c3:1a:6f:39:25:bc:3b:bf:08:e0:d4:db:c8:62:83: 88:6d:70:b4:bf:50:d3:56:9b:a8:d7:99:29:ff:7b:26:c3:47: 9d:ce:fe:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwNTAyMTcwNzIyWhcNMjUwNTA5MTcwNzIyWjAYMRYwFAYD VQQDEw02ODE0ZmJjYS03NGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2JHT8HJxjlFmDte+eRP5xXEOC94BQhtwGJ8zqSBNPM2VemrdVEmOFAKaysI 9jTPDXFyVYrjmKl8WsOmeiI2N6n4se8T3Ksoq1J3pr3iuv2O6oi7SA9pSBAgMwn4 cUXarCNMKIXoQSrk0l8HFh8Cld0JRRCFRplKR1s3ZqI9Effu28M0r9vCpIMRpgDW A8Q7PEqkg0bCndcmvVU64Lfo9Xf1PKK/rKUsKuDilSbwaAdsoDWCs+5NSOjNiqqw Lm6p/FVuYKyx0pxi3Hlr4BOLXDj1Vt3HEnJrdz4kAwhYZZY2IbjG8pmPurGcEmPb NxkMgviqnpdEX7gO0WgHaojQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEFzsAI pjV8HsTOgxNnB+oY7//1MB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwsdneGYtzrBmg+GqPAv5saomfuIhbKVENKalbFG0Jt+ddFmCHH4c5 oxJrCxx566VfIpD+mCqStTcsJNMUobiPaeUuzV9GkzBxF4zQt1FXfFOtywLZdMUu QWgJLbpkOZVVrWAswQmzP/OLQxK0LUEO4KlxUSkxO9FRUDoPqgRlNqiUpdXmQf/Y pDfzcSkeJYYkUCiRQQiCMo09RfhEWLoXJGUZzdJzLddsSxE1e/jkSB1HcrPFHWuC xJ1G42jJMVWs+3gcm0E0d1Q7KVfWssYaGTUHInXnycl0zf/DGm85Jbw7vwjg1NvI YoOIbXC0v1DTVpuo15kp/3smw0edzv65 -----END CERTIFICATE-----Generated at Sun May 4 13:20:41 2025 by rpki-client