$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: BS6WNOboYFPP2XvK917tffi0z6+M3e+jVr/BAPHM4AY= Subject key identifier: C8:1A:21:F6:E4:0A:4F:40:D2:F4:A3:DB:35:BB:D7:2A:17:E9:6D:5C Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0468 Signing time: Sat 14 Jun 2025 23:51:48 +0000 Manifest this update: Sat 14 Jun 2025 23:51:48 +0000 Manifest next update: Sat 21 Jun 2025 23:51:48 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: mPHjSSON6r/UwjDiCu95q5WsIoY8ufAvEEFXWXk99ZM=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Jun 14 23:51:48 2025 GMT Not After : Jun 21 23:51:48 2025 GMT Subject: CN=684e0b14-6611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:31:1c:93:b0:a9:83:66:1e:80:f5:b4:69: 7b:f5:5e:6d:ab:52:59:da:2f:7b:98:b1:ad:2a:52: e1:8a:76:67:1f:28:81:bb:6c:0d:6a:fd:7e:f0:07: b0:58:00:48:6d:7a:31:11:af:b4:cd:04:a9:f2:b0: e7:df:e5:cb:cb:98:4a:14:19:6b:15:06:26:5a:35: a3:15:cc:88:2a:5c:70:d6:df:9f:58:36:e0:24:16: 61:07:93:7b:cf:6f:69:04:92:72:66:26:52:d5:d9: 69:e1:fa:a2:b8:09:96:67:6b:1e:ce:da:98:a8:b3: cc:34:b7:a9:5a:f0:29:01:77:76:a5:64:14:80:a3: b5:9d:59:12:ce:46:0e:3d:73:9a:ba:5e:9f:d5:93: 36:54:c7:a0:0b:57:f7:32:33:02:15:b2:6b:91:5f: 6e:50:45:31:ea:67:50:7d:98:59:69:05:f0:88:91: 62:ca:f4:51:0e:1c:d3:c1:02:88:c2:ae:7b:7a:6a: 1b:ea:62:38:aa:dd:76:f5:3e:4a:aa:a8:46:8d:9e: ed:33:f8:1c:b1:bc:8d:ec:af:d1:91:9b:da:b8:de: 89:eb:f4:98:17:8d:48:39:ad:2a:e3:96:74:83:1f: f6:4e:af:ee:64:06:46:1f:d5:fb:ac:99:0a:f0:e3: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1A:21:F6:E4:0A:4F:40:D2:F4:A3:DB:35:BB:D7:2A:17:E9:6D:5C X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e4:49:4e:c6:e2:af:07:8f:66:07:9e:63:53:2c:49:64:74: 1a:4c:cb:bd:83:f7:b2:55:57:0d:ea:2b:0c:1d:19:f8:72:6d: e9:5b:a0:25:67:48:6e:20:5e:db:e4:fd:7d:c9:38:bf:53:16: 29:1f:0b:a1:92:c6:0a:43:d5:7a:e7:f6:65:fd:4d:fa:db:a9: ff:b6:e5:0e:6b:28:e0:33:4d:29:c6:af:c8:91:ac:57:19:72: 12:32:56:4e:65:75:df:a8:6e:20:19:fd:8d:c9:87:aa:65:a8: 6b:cb:54:7c:dd:59:3a:9e:ff:ca:aa:e8:52:47:9d:51:6b:a9: 43:31:9d:70:33:ca:c2:90:87:79:98:a7:fd:e5:17:d8:bf:69: ba:48:b9:6f:6f:dd:99:c5:4f:5a:44:6b:88:28:17:c0:8f:9d: 0f:41:ea:c7:e5:3a:da:72:9b:41:ba:f7:90:4f:ab:98:42:40: a8:e6:0f:35:e4:18:91:9d:ae:ec:9d:76:be:5d:9e:57:31:50: 59:ff:28:8b:fc:6e:ba:fa:f8:86:e2:80:91:4a:b7:af:03:f6: 11:20:fc:13:43:f4:f3:c6:97:0f:f4:97:56:02:b7:b9:07:e6: 4e:a0:db:37:e3:83:84:fa:47:a5:f0:f9:4e:2f:dd:68:00:7f: bc:15:6d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwNjE0MjM1MTQ4WhcNMjUwNjIxMjM1MTQ4WjAYMRYwFAYD VQQDEw02ODRlMGIxNC02NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t8xHJOwqYNmHoD1tGl79V5tq1JZ2i97mLGtKlLhinZnHyiBu2wNav1+8Aew WABIbXoxEa+0zQSp8rDn3+XLy5hKFBlrFQYmWjWjFcyIKlxw1t+fWDbgJBZhB5N7 z29pBJJyZiZS1dlp4fqiuAmWZ2seztqYqLPMNLepWvApAXd2pWQUgKO1nVkSzkYO PXOaul6f1ZM2VMegC1f3MjMCFbJrkV9uUEUx6mdQfZhZaQXwiJFiyvRRDhzTwQKI wq57emob6mI4qt129T5KqqhGjZ7tM/gcsbyN7K/RkZvauN6J6/SYF41IOa0q45Z0 gx/2Tq/uZAZGH9X7rJkK8ONPUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgaIfbk Ck9A0vSj2zW71yoX6W1cMB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5ElOxuKvB49mB55jUyxJZHQaTMu9g/eyVVcN6isMHRn4cm3pW6Al Z0huIF7b5P19yTi/UxYpHwuhksYKQ9V65/Zl/U3626n/tuUOayjgM00pxq/IkaxX GXISMlZOZXXfqG4gGf2NyYeqZahry1R83Vk6nv/KquhSR51Ra6lDMZ1wM8rCkId5 mKf95RfYv2m6SLlvb92ZxU9aRGuIKBfAj50PQerH5TracptBuveQT6uYQkCo5g81 5BiRna7snXa+XZ5XMVBZ/yiL/G66+viG4oCRSrevA/YRIPwTQ/TzxpcP9JdWAre5 B+ZOoNs344OE+kel8PlOL91oAH+8FW2o -----END CERTIFICATE-----Generated at Sun Jun 15 08:21:17 2025 by rpki-client