$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: jy/plz7wqQ3rJ8b/1IxT14nuWlSHwXDyU2PjU22vLM0= Subject key identifier: C4:A6:EC:12:0C:DE:83:CA:28:FF:FB:16:8E:80:9A:23:C7:B6:81:C2 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 0216 Signing time: Fri 25 Apr 2025 01:45:34 +0000 Manifest this update: Fri 25 Apr 2025 01:45:34 +0000 Manifest next update: Fri 02 May 2025 01:45:34 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: D+62WTz+nWNbnTmSYh1dxmdEam8YytQ6YgU7jawWH/o=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: XW5eQLHT9pjam4DydX+MPOf7MxBb8MiFoha5U/4pDCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Apr 25 01:45:34 2025 GMT Not After : May 2 01:45:34 2025 GMT Subject: CN=680ae93e-f15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:cc:b0:88:b3:83:ec:28:b7:be:61:a9:11: 77:4a:8b:e4:60:59:05:35:c7:08:e7:c2:22:b8:e3: b5:9d:82:14:c8:28:23:3a:d2:99:eb:39:03:f7:16: eb:09:ba:70:18:d4:ee:3f:41:04:c4:8c:ad:88:76: a9:31:e1:84:8d:d2:86:0f:51:9a:bc:1d:26:41:42: 79:02:40:30:35:be:95:23:2e:80:e4:03:31:08:09: e3:2c:67:86:36:b4:05:c5:a0:31:2f:13:da:f8:70: a2:66:e2:b4:17:3f:c6:95:15:c9:9d:ca:9d:1b:b6: 51:e3:ca:81:de:12:2b:b9:30:ab:bd:c5:71:07:51: 0c:be:41:8f:fc:71:59:3b:d0:8d:ae:b9:f1:ff:bd: 37:eb:b6:71:fc:7f:a4:77:d5:ea:68:85:fc:de:ad: 28:e0:06:04:41:38:56:31:50:8a:78:b6:c7:72:c2: 97:35:6c:0c:63:ff:9c:11:65:f7:d9:40:c6:2b:8e: b3:95:7e:07:c9:de:d3:73:1f:fc:8b:af:f1:4c:b2: 0d:d1:5d:16:bc:17:0a:a1:f4:b8:a8:9d:31:ca:23: 45:c7:a1:95:76:c3:78:ed:4e:45:2d:b5:61:95:bc: f2:2f:e1:af:24:58:98:92:17:01:6e:ff:72:8f:c6: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:EC:12:0C:DE:83:CA:28:FF:FB:16:8E:80:9A:23:C7:B6:81:C2 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d0:ae:03:41:bc:e1:8f:eb:50:1b:ed:f7:43:f5:94:59:8a: 19:fa:d5:f3:75:4c:6b:61:64:6e:8f:02:e9:ce:ea:67:ba:75: b3:7e:1e:15:84:72:41:ea:68:92:46:50:32:2e:42:bc:61:c0: db:de:6b:8a:13:c3:83:bb:db:41:e0:cc:92:d8:b1:99:89:ca: 78:1d:14:02:f2:ef:29:3f:c9:24:9f:25:5c:23:da:c5:d1:ef: e6:6b:41:13:12:48:15:cb:81:93:36:3c:c0:f2:be:a3:2e:b5: 30:3b:ba:3f:69:27:b3:8c:13:f6:0e:81:76:53:6d:e5:ef:f9: 10:61:4c:ae:8e:23:33:df:bb:7d:61:58:71:06:e3:72:90:af: 64:b3:19:3c:e1:69:8c:90:74:88:db:02:26:7e:91:58:2a:53: 09:a6:37:23:88:f2:50:5f:75:bc:7c:ea:24:96:fb:5f:7c:1a: 09:30:51:fe:d8:48:55:3a:b6:dc:07:55:2a:bd:20:e7:6b:62: 31:4b:e5:9e:88:c2:07:1b:4e:1b:57:0a:9a:17:aa:43:da:b4: a5:8e:57:ed:5d:12:55:c3:34:4e:12:07:e0:ed:b6:0b:31:99: e1:00:f3:4a:e6:b1:c2:1f:4a:d3:28:e4:8a:93:43:4b:a3:3e: ae:2b:bf:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUwNDI1MDE0NTM0WhcNMjUwNTAyMDE0NTM0WjAYMRYwFAYD VQQDEw02ODBhZTkzZS1mMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPjMsIizg+wot75hqRF3SovkYFkFNccI58IiuOO1nYIUyCgjOtKZ6zkD9xbr CbpwGNTuP0EExIytiHapMeGEjdKGD1GavB0mQUJ5AkAwNb6VIy6A5AMxCAnjLGeG NrQFxaAxLxPa+HCiZuK0Fz/GlRXJncqdG7ZR48qB3hIruTCrvcVxB1EMvkGP/HFZ O9CNrrnx/70367Zx/H+kd9XqaIX83q0o4AYEQThWMVCKeLbHcsKXNWwMY/+cEWX3 2UDGK46zlX4Hyd7Tcx/8i6/xTLIN0V0WvBcKofS4qJ0xyiNFx6GVdsN47U5FLbVh lbzyL+GvJFiYkhcBbv9yj8b7DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSm7BIM 3oPKKP/7Fo6AmiPHtoHCMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF0K4DQbzhj+tQG+33Q/WUWYoZ+tXzdUxrYWRujwLpzupnunWzfh4V hHJB6miSRlAyLkK8YcDb3muKE8ODu9tB4MyS2LGZicp4HRQC8u8pP8kknyVcI9rF 0e/ma0ETEkgVy4GTNjzA8r6jLrUwO7o/aSezjBP2DoF2U23l7/kQYUyujiMz37t9 YVhxBuNykK9ksxk84WmMkHSI2wImfpFYKlMJpjcjiPJQX3W8fOoklvtffBoJMFH+ 2EhVOrbcB1UqvSDna2IxS+WeiMIHG04bVwqaF6pD2rSljlftXRJVwzROEgfg7bYL MZnhAPNK5rHCH0rTKOSKk0NLoz6uK792 -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:26 2025 by rpki-client