$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: YJx+fY+/tR4N3TdItApH3yCMTBy2cmrJA9A+QQV5LfM= Subject key identifier: C5:20:10:7E:5E:63:B9:FE:CE:D1:29:DD:A5:CD:0A:47:B6:D0:BA:89 Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 044F Signing time: Thu 24 Apr 2025 23:59:18 +0000 Manifest this update: Thu 24 Apr 2025 23:59:18 +0000 Manifest next update: Thu 01 May 2025 23:59:18 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: jTaVxKAhwXb3ynx3www0u+piFrQPI+1m/GpXpkrlfjc=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Apr 24 23:59:18 2025 GMT Not After : May 1 23:59:18 2025 GMT Subject: CN=680ad056-ae16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:c4:3f:21:c7:07:8a:35:b3:3b:b3:b5:0e: ed:ef:34:4f:c1:e1:42:e5:2c:ec:90:4d:de:f8:ee: 3e:44:de:35:a5:d5:f5:ed:56:1d:7e:de:81:aa:72: 92:6a:a5:85:da:09:81:6d:bd:64:c4:38:a5:e5:37: 5b:bc:c6:c4:91:a4:22:e8:42:0b:e2:b6:8f:9d:96: bb:6a:9e:58:b8:ef:45:7a:d7:bf:c7:94:58:87:b1: db:f5:ee:32:59:dc:52:90:5b:a4:49:7f:3e:a2:25: 41:80:bc:6b:65:3e:42:90:40:1e:04:e8:bf:17:a5: fb:76:9d:91:81:35:cb:49:20:f9:57:db:79:ce:89: a4:77:00:d1:c8:a8:7f:e0:d2:fc:5a:b6:68:6a:15: 70:06:85:39:75:9f:a0:d7:12:bc:e4:1d:ea:ed:da: 23:5c:8d:25:0e:3c:6f:33:ad:3f:d5:1d:f0:bc:96: 54:d4:3e:f3:e6:37:a6:da:9e:23:05:94:fa:39:ac: 29:60:bd:2a:c9:e0:0b:94:82:e3:f1:8a:b6:c8:de: 1b:88:49:a5:39:c2:e0:4f:17:aa:93:14:75:5a:ab: e4:5e:56:65:0d:d5:af:c7:35:19:0e:89:e5:e2:09: d6:a2:04:1f:0b:1a:5d:b9:c6:ea:46:80:f8:33:ab: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:10:7E:5E:63:B9:FE:CE:D1:29:DD:A5:CD:0A:47:B6:D0:BA:89 X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7f:9c:b2:4a:2e:49:30:c0:8f:cb:f8:c8:4b:e9:de:df:d9: 31:6a:f0:74:d6:d1:5e:b5:28:23:ad:57:1a:c9:37:45:ce:39: f0:11:6c:7b:6c:ed:a8:34:cb:42:cb:38:21:59:3a:6a:71:bf: ae:84:12:9a:45:26:53:91:2d:84:f5:da:37:9b:bd:54:7d:77: ad:eb:b4:7f:c1:0e:5a:65:a0:4a:88:59:a7:90:1c:ac:73:5a: 65:ad:0f:a9:d0:1d:ec:f7:f2:ef:7d:1f:a3:17:bc:2c:0a:b1: 3c:5f:d8:1e:20:b0:5c:b5:19:31:35:9d:09:84:4b:46:08:fd: 79:e7:e5:5a:6a:76:c1:6a:c5:c3:5a:55:4a:d4:e0:39:42:0d: 87:f3:dc:f6:04:55:e8:ae:6a:42:88:90:24:e8:1b:3d:46:1d: e3:8a:0b:d8:4c:10:05:4a:30:bb:fe:a0:c6:11:72:f8:f8:a2: 0b:60:ef:a4:09:1d:9f:22:9f:ed:e6:dc:27:52:39:32:7c:bb: 25:d8:42:f1:a7:7f:ae:e2:33:6d:f1:47:05:62:8a:a2:63:19: cb:d2:34:00:29:2b:8a:b5:ac:3e:7a:f2:9c:8e:95:07:b6:1a: ce:8c:a6:42:13:cf:5c:e9:ef:b0:83:bd:ac:8f:fb:e4:7c:b9: 2b:97:33:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwNDI0MjM1OTE4WhcNMjUwNTAxMjM1OTE4WjAYMRYwFAYD VQQDEw02ODBhZDA1Ni1hZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFnEPyHHB4o1szuztQ7t7zRPweFC5SzskE3e+O4+RN41pdX17VYdft6BqnKS aqWF2gmBbb1kxDil5TdbvMbEkaQi6EIL4raPnZa7ap5YuO9Fete/x5RYh7Hb9e4y WdxSkFukSX8+oiVBgLxrZT5CkEAeBOi/F6X7dp2RgTXLSSD5V9t5zomkdwDRyKh/ 4NL8WrZoahVwBoU5dZ+g1xK85B3q7dojXI0lDjxvM60/1R3wvJZU1D7z5jem2p4j BZT6OawpYL0qyeALlILj8Yq2yN4biEmlOcLgTxeqkxR1WqvkXlZlDdWvxzUZDonl 4gnWogQfCxpducbqRoD4M6sVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUgEH5e Y7n+ztEp3aXNCke20LqJMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXf5yySi5JMMCPy/jIS+ne39kxavB01tFetSgjrVcayTdFzjnwEWx7 bO2oNMtCyzghWTpqcb+uhBKaRSZTkS2E9do3m71UfXet67R/wQ5aZaBKiFmnkBys c1plrQ+p0B3s9/LvfR+jF7wsCrE8X9geILBctRkxNZ0JhEtGCP155+VaanbBasXD WlVK1OA5Qg2H89z2BFXormpCiJAk6Bs9Rh3jigvYTBAFSjC7/qDGEXL4+KILYO+k CR2fIp/t5twnUjkyfLsl2ELxp3+u4jNt8UcFYoqiYxnL0jQAKSuKtaw+evKcjpUH thrOjKZCE89c6e+wg72sj/vkfLkrlzPu -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:46 2025 by rpki-client