$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: 7f1TeOUjzmQ/sB8wy2KZSARtFcLK78nyU3LTAgg228o= Subject key identifier: 5D:4B:19:A8:09:18:B1:31:BC:25:61:BB:18:D6:8F:A0:5F:D9:A5:F5 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 347E Signing time: Thu 24 Apr 2025 14:17:08 +0000 Manifest this update: Thu 24 Apr 2025 14:17:07 +0000 Manifest next update: Thu 01 May 2025 14:17:07 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: 9ELebl6eCitzvfa+ZX4NoL6yav3nEEBBcrhkoE5oo+Y=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Apr 24 14:17:07 2025 GMT Not After : May 1 14:17:07 2025 GMT Subject: CN=680a47e4-932d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:7d:4a:f9:b3:8e:d8:79:f9:7d:19:5d:a4: 72:15:57:05:7c:24:de:53:92:c9:c7:63:19:3a:ca: d9:19:ab:3b:b1:6d:b1:b1:4a:e9:3a:93:d0:ee:ce: 71:5d:87:11:f8:dc:0e:86:5f:37:a0:e2:52:02:2b: 8f:db:b2:9f:a0:5a:c8:e3:28:67:65:dc:8b:ab:e1: 2f:f3:01:c1:e3:98:24:3e:89:b2:e1:71:06:e8:c8: 10:35:d9:29:4e:5c:9d:de:1a:59:55:4c:88:66:75: 99:36:66:9d:55:75:b3:8e:55:fe:3c:72:01:0b:be: 32:42:10:32:a0:57:f1:e8:ef:f8:b7:f4:87:d7:74: a3:53:53:af:5e:a3:68:26:2a:cf:45:cf:29:0e:9e: 21:cb:3c:dc:bc:1f:47:ff:b6:d7:8b:fa:4c:05:dd: 4b:5f:31:e2:fc:4f:ec:b0:c1:30:58:b1:47:27:54: 12:8e:30:e9:b2:61:51:7d:75:29:ca:2a:27:30:f6: f2:14:c7:59:25:ad:bb:7b:9e:5d:14:19:2e:10:a5: b1:19:1f:93:94:0c:fa:f8:d4:3c:6c:eb:84:76:35: b7:6a:c8:f6:ec:86:fe:02:89:27:90:09:ef:6a:b0: be:e7:5a:ec:10:9a:4b:b0:f3:13:4b:48:4e:55:fb: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4B:19:A8:09:18:B1:31:BC:25:61:BB:18:D6:8F:A0:5F:D9:A5:F5 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:43:00:28:5a:3b:e9:6c:12:c5:4f:c9:78:b6:b5:06:c1:66: 90:8a:7c:c7:f0:51:6f:2e:43:21:30:70:14:fa:32:76:2f:c9: 54:5b:04:24:73:a6:f0:32:ab:3c:b1:c1:e0:12:17:b5:65:96: 8f:09:67:7c:8d:07:45:4c:0b:49:14:09:30:34:ad:b9:45:7f: 48:7a:56:64:cb:51:cc:f3:fe:03:d3:88:ed:e4:75:a8:af:aa: 0a:2b:40:7f:32:a5:e1:4f:f3:fe:8e:71:22:19:b8:46:e9:b3: de:36:c1:6d:f2:04:39:11:8a:62:a3:06:ef:d3:58:b4:cc:f1: 39:bb:62:94:5c:49:ac:3d:c3:ef:21:7c:f3:4e:37:cc:96:e4: 84:90:5d:6d:fd:87:fd:20:ec:1c:07:11:48:1f:9f:af:54:6f: e6:1d:e9:42:31:2d:b6:a3:0e:68:80:10:80:56:60:a8:8f:05: 7c:22:fc:fd:93:9e:84:b5:12:3b:e9:f5:00:22:45:9f:0d:5b: 06:81:bf:36:5e:8b:20:e8:23:92:70:0a:aa:2e:b6:4f:68:af: 5b:6f:e6:ad:bf:ce:c6:f1:4b:db:36:9b:d8:95:30:72:23:55: 95:4c:52:69:2f:21:a4:55:71:b9:93:39:3f:17:ec:75:c7:a1: 44:5a:28:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUwNDI0MTQxNzA3WhcNMjUwNTAxMTQxNzA3WjAYMRYwFAYD VQQDEw02ODBhNDdlNC05MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyih9Svmzjth5+X0ZXaRyFVcFfCTeU5LJx2MZOsrZGas7sW2xsUrpOpPQ7s5x XYcR+NwOhl83oOJSAiuP27KfoFrI4yhnZdyLq+Ev8wHB45gkPomy4XEG6MgQNdkp Tlyd3hpZVUyIZnWZNmadVXWzjlX+PHIBC74yQhAyoFfx6O/4t/SH13SjU1OvXqNo JirPRc8pDp4hyzzcvB9H/7bXi/pMBd1LXzHi/E/ssMEwWLFHJ1QSjjDpsmFRfXUp yionMPbyFMdZJa27e55dFBkuEKWxGR+TlAz6+NQ8bOuEdjW3asj27Ib+AoknkAnv arC+51rsEJpLsPMTS0hOVfsGdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1LGagJ GLExvCVhuxjWj6Bf2aX1MB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7QwAoWjvpbBLFT8l4trUGwWaQinzH8FFvLkMhMHAU+jJ2L8lUWwQk c6bwMqs8scHgEhe1ZZaPCWd8jQdFTAtJFAkwNK25RX9IelZky1HM8/4D04jt5HWo r6oKK0B/MqXhT/P+jnEiGbhG6bPeNsFt8gQ5EYpiowbv01i0zPE5u2KUXEmsPcPv IXzzTjfMluSEkF1t/Yf9IOwcBxFIH5+vVG/mHelCMS22ow5ogBCAVmCojwV8Ivz9 k56EtRI76fUAIkWfDVsGgb82Xosg6COScAqqLrZPaK9bb+atv87G8UvbNpvYlTBy I1WVTFJpLyGkVXG5kzk/F+x1x6FEWigu -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:29 2025 by rpki-client