$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json) Hash identifier: uodnjH0gT8api+caNwuOZqCcmRLRS8rw+VSPhNNM2Dw= Subject key identifier: F2:FC:34:71:C2:AB:D2:0C:10:43:C2:B9:A3:18:DA:B0:70:7D:5F:AA Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Certificate serial: 0F41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft Manifest number: 1939 Signing time: Sat 14 Jun 2025 17:31:51 +0000 Manifest this update: Sat 14 Jun 2025 17:31:50 +0000 Manifest next update: Sat 21 Jun 2025 17:31:50 +0000 Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: 9a3dudht9wPAayXUQelNzGDTMwiGQpiBHj75dKNApqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3905 (0xf41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Validity Not Before: Jun 14 17:31:50 2025 GMT Not After : Jun 21 17:31:50 2025 GMT Subject: CN=684db206-c457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:12:e4:0f:65:f2:2f:72:39:49:a4:b9:6c: 71:39:08:23:0e:63:7f:03:31:8b:e9:f4:c0:85:f5: 83:81:fb:c3:d6:b9:8f:0c:f8:9d:61:13:7f:4a:ba: 55:e3:5f:cf:b7:ba:8f:3e:f8:94:a4:e6:dd:11:34: 09:b9:e0:d5:0c:85:ee:05:23:84:79:41:7e:f7:c7: 95:c8:12:d3:6b:ff:cf:52:fe:a7:83:60:7c:2f:a5: da:dd:29:f2:46:2d:ce:bb:ec:98:c1:2e:6e:e7:89: 29:d1:f0:3d:bb:85:8c:33:10:af:3f:9e:0d:fd:3a: 43:f7:3f:20:0e:f9:a5:0e:26:8a:63:ad:49:96:30: 5f:a3:bc:2b:bd:57:3e:e7:98:49:4f:05:cd:5e:54: 12:a6:e1:74:bd:6f:9b:6d:5d:f6:b7:bf:f9:4a:3e: a4:7b:99:b1:6b:dc:c6:85:8e:97:9b:8a:0d:51:7f: e4:0a:fb:c1:f0:d2:84:6d:a2:7d:cc:7f:69:5b:0d: d8:30:66:fe:83:1d:50:6e:d5:31:76:08:59:e4:70: d5:78:df:e7:1b:fd:ef:a6:40:cc:73:f8:a9:1d:06: 81:eb:e1:f5:ef:0d:8a:6d:cb:80:75:cc:e5:44:67: a6:ec:a1:e8:07:e0:78:53:34:d9:b6:57:73:2f:6d: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:34:71:C2:AB:D2:0C:10:43:C2:B9:A3:18:DA:B0:70:7D:5F:AA X509v3 Authority Key Identifier: keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:cc:b1:5a:17:da:2d:df:d1:a7:eb:b0:40:85:d2:84:de:2f: 39:29:66:87:a3:49:b0:d6:16:b5:39:e0:54:66:36:72:7a:46: ad:3d:f3:8f:b6:29:a1:15:8c:e3:fc:26:64:7d:2d:b0:88:38: 7b:92:d9:b4:35:85:21:ad:b5:97:ca:44:19:1e:50:fc:b0:b5: a9:73:1c:ba:ce:10:00:5c:44:4f:9a:33:84:5a:b5:28:2f:1a: ae:9c:de:fe:6f:18:d7:d5:f3:6f:67:f7:c6:9a:6f:d5:4c:08: 59:9f:86:68:63:0b:c3:bc:91:dc:c5:05:31:fb:93:a5:3b:aa: 3c:32:15:b4:ff:09:4a:4e:ad:a7:b4:98:64:fc:34:a9:db:5d: 20:e5:b3:88:90:f2:f4:98:6a:61:e9:10:47:2f:49:32:63:a7: d3:6c:c2:ce:5a:c7:6d:2e:d0:f5:8c:24:bf:ba:dc:2b:5c:67: 38:ad:75:50:27:be:62:38:2f:c1:b6:86:b4:78:e1:93:2f:05: eb:3c:ac:ce:db:e4:15:f8:d9:4c:42:23:1d:30:f7:7e:b4:72: 03:55:3c:01:34:58:58:30:8c:c5:e8:4b:d0:ee:b5:b6:87:72: ef:57:c8:bc:b6:8d:1a:10:58:02:18:f3:e8:2d:12:6b:a4:27: b6:26:41:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0 RjgyMDE3QzkwHhcNMjUwNjE0MTczMTUwWhcNMjUwNjIxMTczMTUwWjAYMRYwFAYD VQQDEw02ODRkYjIwNi1jNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1kS5A9l8i9yOUmkuWxxOQgjDmN/AzGL6fTAhfWDgfvD1rmPDPidYRN/SrpV 41/Pt7qPPviUpObdETQJueDVDIXuBSOEeUF+98eVyBLTa//PUv6ng2B8L6Xa3Sny Ri3Ou+yYwS5u54kp0fA9u4WMMxCvP54N/TpD9z8gDvmlDiaKY61JljBfo7wrvVc+ 55hJTwXNXlQSpuF0vW+bbV32t7/5Sj6ke5mxa9zGhY6Xm4oNUX/kCvvB8NKEbaJ9 zH9pWw3YMGb+gx1QbtUxdghZ5HDVeN/nG/3vpkDMc/ipHQaB6+H17w2KbcuAdczl RGem7KHoB+B4UzTZtldzL21hMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL8NHHC q9IMEEPCuaMY2rBwfV+qMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUzLFaF9ot39Gn67BAhdKE3i85KWaHo0mw1ha1OeBUZjZyekatPfOP timhFYzj/CZkfS2wiDh7ktm0NYUhrbWXykQZHlD8sLWpcxy6zhAAXERPmjOEWrUo LxqunN7+bxjX1fNvZ/fGmm/VTAhZn4ZoYwvDvJHcxQUx+5OlO6o8MhW0/wlKTq2n tJhk/DSp210g5bOIkPL0mGph6RBHL0kyY6fTbMLOWsdtLtD1jCS/utwrXGc4rXVQ J75iOC/Btoa0eOGTLwXrPKzO2+QV+NlMQiMdMPd+tHIDVTwBNFhYMIzF6EvQ7rW2 h3LvV8i8to0aEFgCGPPoLRJrpCe2JkES -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:24 2025 by rpki-client