$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json) Hash identifier: SWGCWl4aKbb3m2gc+N1y6UNXnejzq1UeQ/sy9+Abk9I= Subject key identifier: 6D:A5:6D:72:FF:8C:FE:20:D4:2C:16:31:7E:69:DB:5F:4C:4B:42:36 Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft Manifest number: 0148 Signing time: Fri 25 Apr 2025 03:24:37 +0000 Manifest this update: Fri 25 Apr 2025 03:24:36 +0000 Manifest next update: Fri 02 May 2025 03:24:36 +0000 Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: N4DFcn8CzcYMQMWh99Pc4dQMz8Vt2bcbh2PHjILVAhA=) 2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: FoAylNmdesRHU3oexctbCd7CtqneWbl6QUSlHnFcNTI=) 3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=) 4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Validity Not Before: Apr 25 03:24:36 2025 GMT Not After : May 2 03:24:36 2025 GMT Subject: CN=680b0074-4e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:fc:62:f6:6a:76:6c:08:ea:b7:00:f4:1a: 92:99:22:cc:27:ac:33:ec:1c:14:71:29:94:5e:06: 2d:e0:5b:ac:e7:a2:57:54:48:32:68:2c:45:33:98: f4:15:91:78:25:71:ee:39:84:e0:28:8d:4d:a5:07: 4a:a9:78:0b:51:f7:26:0f:5c:b1:b0:30:47:11:a1: 6f:c0:80:a0:15:31:71:c5:d0:d2:32:8f:39:b3:fc: 61:f7:ae:a6:ef:d9:12:e2:01:3d:73:3a:60:d7:bd: f7:e5:98:de:89:ed:db:d3:8a:7c:2e:36:84:a7:46: 72:94:62:15:40:0e:6a:40:02:6f:3d:28:bf:9d:df: 6c:20:5c:61:1f:16:3e:98:6d:0c:94:d0:e8:a7:50: e6:3f:70:fa:2f:aa:e5:d8:bc:69:a5:88:66:fe:5e: 7c:41:57:18:f4:69:ef:bb:53:f5:68:30:ac:f4:91: 57:8f:cb:c9:27:e6:82:54:08:c5:45:00:bf:76:6d: 7a:2b:c8:7a:9a:e5:92:57:dc:72:b3:21:81:e4:44: cf:05:24:95:5c:80:c6:39:2e:a0:c8:e6:39:f2:67: a9:87:2b:9d:6a:fb:bf:ab:cb:f8:f6:50:a9:6e:38: 5c:e5:92:64:d7:bd:db:e6:27:c8:48:ca:f6:92:35: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:6D:72:FF:8C:FE:20:D4:2C:16:31:7E:69:DB:5F:4C:4B:42:36 X509v3 Authority Key Identifier: keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e2:9a:91:48:d7:31:db:33:01:55:65:eb:dd:8a:09:59:f9: c2:29:ba:7c:5f:44:3a:2a:36:e1:95:1b:f6:be:c9:73:55:cc: be:52:98:02:09:5b:23:15:96:77:b1:94:3c:b6:42:df:d7:a9: 75:10:08:4e:77:41:6c:c4:fa:ef:27:78:d6:5f:a0:84:76:ae: 9d:18:ab:cf:21:88:27:3f:96:e3:fd:b6:38:27:2e:b7:73:61: 68:43:bc:c2:d6:96:d3:b3:82:29:c4:5e:d3:4b:b2:96:66:19: ca:f6:0a:2c:df:b4:63:4c:34:4d:b0:f8:6e:26:98:16:3a:e3: c5:94:02:3a:52:56:1b:bc:54:96:94:4f:0d:fb:55:09:61:41: 06:2d:4c:d8:99:b2:74:d9:2c:37:2c:f4:24:54:2c:00:0e:6d: 77:3e:2d:01:da:da:ab:dc:97:8d:ab:ee:58:3c:2b:85:20:52: 07:57:36:33:20:2d:c2:14:31:af:be:fe:83:af:8e:2b:84:44: a1:dc:69:74:bc:b8:e9:78:c8:8c:5f:c2:dd:d9:a8:2c:3b:be: 9d:26:5d:0d:3b:73:c7:ed:f2:73:e9:e5:3d:a4:54:95:59:d3: dd:30:98:6c:37:8a:de:7d:6e:a8:8b:66:b6:23:cc:91:1a:2f: 4e:88:36:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy QTFGMDA5MkQwHhcNMjUwNDI1MDMyNDM2WhcNMjUwNTAyMDMyNDM2WjAYMRYwFAYD VQQDEw02ODBiMDA3NC00ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB/8YvZqdmwI6rcA9BqSmSLMJ6wz7BwUcSmUXgYt4Fus56JXVEgyaCxFM5j0 FZF4JXHuOYTgKI1NpQdKqXgLUfcmD1yxsDBHEaFvwICgFTFxxdDSMo85s/xh966m 79kS4gE9czpg17335Zjeie3b04p8LjaEp0ZylGIVQA5qQAJvPSi/nd9sIFxhHxY+ mG0MlNDop1DmP3D6L6rl2LxppYhm/l58QVcY9Gnvu1P1aDCs9JFXj8vJJ+aCVAjF RQC/dm16K8h6muWSV9xysyGB5ETPBSSVXIDGOS6gyOY58mephyudavu/q8v49lCp bjhc5ZJk173b5ifISMr2kjXwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2lbXL/ jP4g1CwWMX5p219MS0I2MB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv dG9CU1dzUWZwODRxSHdDUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN4pqRSNcx2zMBVWXr3YoJWfnCKbp8X0Q6KjbhlRv2vslzVcy+UpgC CVsjFZZ3sZQ8tkLf16l1EAhOd0FsxPrvJ3jWX6CEdq6dGKvPIYgnP5bj/bY4Jy63 c2FoQ7zC1pbTs4IpxF7TS7KWZhnK9gos37RjTDRNsPhuJpgWOuPFlAI6UlYbvFSW lE8N+1UJYUEGLUzYmbJ02Sw3LPQkVCwADm13Pi0B2tqr3JeNq+5YPCuFIFIHVzYz IC3CFDGvvv6Dr44rhESh3Gl0vLjpeMiMX8Ld2agsO76dJl0NO3PH7fJz6eU9pFSV WdPdMJhsN4refW6oi2a2I8yRGi9OiDb5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:53 2025 by rpki-client