$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json) Hash identifier: aTpD8tx48+p4/qTZ2aJkoFwLKTDB3DIEFBk7Q4BYlCI= Subject key identifier: 98:55:99:99:C3:9D:14:FC:5C:48:00:B1:FD:30:02:4E:28:B1:86:1A Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft Manifest number: 020F Signing time: Tue 17 Jun 2025 01:32:27 +0000 Manifest this update: Tue 17 Jun 2025 01:32:26 +0000 Manifest next update: Tue 24 Jun 2025 01:32:26 +0000 Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: SpuXIQIeSAYDQUkfr5kNqIOHbFpIALvF7rQZz5dCefY=) 2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: 7kPM/sKB4i8QHNZmGczzwn2v095e3qO6G9fcsHz4xRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Validity Not Before: Jun 17 01:32:26 2025 GMT Not After : Jun 24 01:32:26 2025 GMT Subject: CN=6850c5ab-ff55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:3c:76:6b:d2:87:63:c7:69:c6:73:88:71: 7b:ed:96:dd:a2:58:24:94:00:af:4a:a7:be:88:7c: f7:db:7e:3d:63:fc:08:40:c5:c7:d5:9d:0b:e1:45: 5b:b7:20:45:be:6e:18:5a:0e:76:41:82:6d:bf:ba: 88:ef:c6:fb:60:29:cc:f7:a6:7e:b2:85:60:da:22: 10:dd:92:f4:0b:23:96:1a:dd:2a:4e:af:49:21:20: 13:79:00:93:c1:13:9d:bb:8e:0b:f3:c5:21:5f:cb: cc:62:af:df:15:a3:d0:5a:44:4d:25:a8:2b:e1:62: 48:a2:18:0d:a5:3d:7f:6a:b8:73:0e:79:2f:9c:18: c8:be:49:fa:08:7a:bd:59:a6:ba:43:41:03:fe:0a: f6:e8:63:6d:01:9b:bc:a1:3f:7d:3f:21:66:c4:f4: 1c:99:47:93:f6:6a:12:31:eb:82:8b:bf:f1:f2:67: fa:1b:a7:72:70:ee:ea:42:c2:61:d3:d9:78:6b:19: 18:ee:75:69:28:33:81:d3:b4:57:7f:37:76:eb:a3: 9c:97:cf:85:b3:d3:14:59:94:38:3a:15:a8:04:12: 3d:b7:da:a9:e1:3e:d5:ff:12:69:a8:0c:65:a0:23: e5:74:7d:6c:c9:49:d8:70:b9:e7:4e:4a:2d:eb:12: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:99:99:C3:9D:14:FC:5C:48:00:B1:FD:30:02:4E:28:B1:86:1A X509v3 Authority Key Identifier: keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0e:f6:c4:c6:86:af:64:bb:58:ec:6e:00:33:55:0b:df:cf: fe:5b:d4:09:26:56:96:b7:d4:3f:0a:00:58:aa:8d:ea:45:0c: bb:f5:32:2f:b1:ee:76:a8:38:0a:1e:a9:36:f0:a8:45:15:ae: 98:d4:de:dd:b8:c5:8d:06:03:a9:2a:47:2a:d9:f2:c5:bd:ab: 46:70:c2:24:ec:71:b7:bb:0f:b9:20:aa:5a:23:65:ab:d0:1e: f7:c8:2c:4e:05:64:23:dc:3b:c2:10:ed:c8:15:b4:bb:4c:cb: 52:70:4e:4f:8d:05:94:4e:9e:94:cd:68:76:22:d5:1f:cc:72: b9:d2:c1:14:84:0b:05:fb:93:de:87:8d:81:ad:51:00:43:3c: 86:7d:1a:b8:ff:81:f7:b5:6f:c1:e2:38:eb:34:d7:05:af:f8: 64:ab:eb:13:7b:32:85:38:06:64:8c:75:cf:50:bf:75:e5:23: fb:30:14:09:89:97:63:41:6f:75:3f:55:b3:58:d2:84:c8:a0: 8a:39:5d:0f:ee:5e:dc:aa:db:a2:7a:eb:e3:6e:1e:46:f0:0f: 62:e3:b9:a9:bd:69:1c:a9:c7:d4:a5:f7:25:3b:53:31:bf:d0: 07:9a:c6:0e:29:12:89:10:9b:63:dd:ae:ea:30:ea:f4:09:56: 37:90:75:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFNTYxMTAvBgNVBAUTKDc0NjYwNzNDOEQyMEZGNUIwQ0E4OEU0QTNBM0ZDODFE M0M5RjY3OUIwHhcNMjUwNjE3MDEzMjI2WhcNMjUwNjI0MDEzMjI2WjAYMRYwFAYD VQQDEw02ODUwYzVhYi1mZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCM8dmvSh2PHacZziHF77ZbdolgklACvSqe+iHz32349Y/wIQMXH1Z0L4UVb tyBFvm4YWg52QYJtv7qI78b7YCnM96Z+soVg2iIQ3ZL0CyOWGt0qTq9JISATeQCT wROdu44L88UhX8vMYq/fFaPQWkRNJagr4WJIohgNpT1/arhzDnkvnBjIvkn6CHq9 Waa6Q0ED/gr26GNtAZu8oT99PyFmxPQcmUeT9moSMeuCi7/x8mf6G6dycO7qQsJh 09l4axkY7nVpKDOB07RXfzd266Ocl8+Fs9MUWZQ4OhWoBBI9t9qp4T7V/xJpqAxl oCPldH1syUnYcLnnTkot6xLltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhVmZnD nRT8XEgAsf0wAk4osYYaMB8GA1UdIwQYMBaAFHRmBzyNIP9bDKiOSjo/yB08n2eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0U1Ni8yNjI2NEFGMDM5 NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18xc01xSTVLT2pfSUhUeWZa NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHWUhQSTBnXzFzTXFJNUtPal9JSFR5Zlo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0U1Ni8yNjI2NEFGMDM5NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18x c01xSTVLT2pfSUhUeWZaNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoDvbExoavZLtY7G4AM1UL38/+W9QJJlaWt9Q/CgBYqo3qRQy79TIv se52qDgKHqk28KhFFa6Y1N7duMWNBgOpKkcq2fLFvatGcMIk7HG3uw+5IKpaI2Wr 0B73yCxOBWQj3DvCEO3IFbS7TMtScE5PjQWUTp6UzWh2ItUfzHK50sEUhAsF+5Pe h42BrVEAQzyGfRq4/4H3tW/B4jjrNNcFr/hkq+sTezKFOAZkjHXPUL915SP7MBQJ iZdjQW91P1WzWNKEyKCKOV0P7l7cqtuieuvjbh5G8A9i47mpvWkcqcfUpfclO1Mx v9AHmsYOKRKJEJtj3a7qMOr0CVY3kHWf -----END CERTIFICATE-----Generated at Tue Jun 17 15:05:04 2025 by rpki-client