$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: VDEEHvoRyJjDvzyzN2ZAfhkdos2YJG5EIuMO8ee/lms= Subject key identifier: 23:15:00:85:34:90:E4:90:15:B1:C5:CE:AD:43:B7:CE:16:D0:0D:98 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 3495 Signing time: Wed 18 Jun 2025 14:45:25 +0000 Manifest this update: Wed 18 Jun 2025 14:45:24 +0000 Manifest next update: Wed 25 Jun 2025 14:45:24 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: U8XHg9zRKQBZ5PdP8DL3Q0GmXfHlu9Y3axJoSFuy6lg=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Jun 18 14:45:24 2025 GMT Not After : Jun 25 14:45:24 2025 GMT Subject: CN=6852d105-d0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:5d:53:78:54:7c:de:4e:fd:ef:e4:5c:38: af:a2:70:fe:e3:32:91:6c:29:d1:23:29:69:34:fd: 3d:6a:16:4b:7a:0e:af:a8:62:05:35:ea:a1:f1:c9: 0c:4d:76:3f:62:c6:cd:6c:a5:95:cd:f8:b1:6f:f8: f4:34:2d:75:1f:68:8f:42:c7:e3:45:61:7e:1b:0f: 41:90:cd:fa:db:8f:99:68:0f:f0:88:ca:98:34:77: 34:28:3a:6f:80:e9:b2:ad:b7:91:7e:1e:b1:56:a2: ce:22:c5:b0:96:a0:34:54:93:bc:55:40:eb:e6:24: ce:55:70:64:87:78:83:c1:9b:2a:a4:4c:c2:b7:5e: be:d5:a1:9b:4a:12:b2:56:eb:c5:a5:ec:13:56:4c: 6f:ed:b8:69:17:23:75:e4:e0:34:ca:e4:b0:6c:83: 6d:a1:2b:3a:3e:bd:e8:d6:c6:c1:c9:9b:8f:f1:8d: 7d:e2:99:38:79:6d:12:85:fd:9d:27:86:e6:59:c7: 7c:ad:9d:96:78:ff:a3:f3:89:df:d3:f1:b3:a0:b0: 78:6b:8e:f6:99:04:f2:9f:27:ac:2e:e6:7d:99:35: c6:dd:21:89:8b:2e:b2:e2:69:dd:cf:04:4d:bb:63: a7:22:c5:55:35:7f:e7:1a:0e:f0:82:58:84:ac:fd: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:00:85:34:90:E4:90:15:B1:C5:CE:AD:43:B7:CE:16:D0:0D:98 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:ce:2a:99:8f:52:c8:93:9a:93:05:d8:9d:24:4c:22:9a: 49:c0:0f:ce:2a:1b:12:c1:37:a8:bb:ba:5f:63:b2:47:d8:0a: 9f:da:3f:e7:60:8a:68:ed:d2:a1:16:1e:7a:a6:bb:1b:23:6f: 00:24:08:6e:77:96:ea:71:81:10:80:86:07:10:4c:6f:a0:57: 66:71:86:d6:2e:db:0c:c5:30:03:e8:af:29:dd:e4:ce:4f:b7: 8f:2c:96:d2:b5:1b:dc:a4:3d:c8:cd:24:b6:65:ba:a3:9f:79: b8:5f:40:8b:2b:15:16:29:72:ad:40:cc:a8:3f:15:71:19:f0: 10:26:1d:71:d6:f2:84:f9:34:c4:85:f6:76:e0:6a:ce:46:9a: 38:53:d8:9e:22:08:c5:4b:3f:57:26:29:24:ea:95:92:fa:fe: 0d:6d:7c:fb:7e:32:59:e5:eb:4c:ca:35:96:21:9c:a1:bf:ad: 0d:24:99:68:ed:35:5f:eb:a2:d4:2d:65:47:9d:a8:80:63:2d: 2a:bb:bf:53:ee:26:97:68:c4:1e:fb:c7:b4:d3:2c:a0:82:d0: 11:e2:b0:e6:03:14:05:85:c6:80:11:90:c6:0b:9a:cc:cf:89: c0:a1:00:0d:88:f6:19:61:fa:2b:e5:44:9a:6f:45:d0:3f:cc: 79:89:ce:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUwNjE4MTQ0NTI0WhcNMjUwNjI1MTQ0NTI0WjAYMRYwFAYD VQQDEw02ODUyZDEwNS1kMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFRdU3hUfN5O/e/kXDivonD+4zKRbCnRIylpNP09ahZLeg6vqGIFNeqh8ckM TXY/YsbNbKWVzfixb/j0NC11H2iPQsfjRWF+Gw9BkM3624+ZaA/wiMqYNHc0KDpv gOmyrbeRfh6xVqLOIsWwlqA0VJO8VUDr5iTOVXBkh3iDwZsqpEzCt16+1aGbShKy VuvFpewTVkxv7bhpFyN15OA0yuSwbINtoSs6Pr3o1sbByZuP8Y194pk4eW0Shf2d J4bmWcd8rZ2WeP+j84nf0/GzoLB4a472mQTynyesLuZ9mTXG3SGJiy6y4mndzwRN u2OnIsVVNX/nGg7wgliErP1UDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMVAIU0 kOSQFbHFzq1Dt84W0A2YMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI784qmY9SyJOakwXYnSRMIppJwA/OKhsSwTeou7pfY7JH2Aqf2j/n YIpo7dKhFh56prsbI28AJAhud5bqcYEQgIYHEExvoFdmcYbWLtsMxTAD6K8p3eTO T7ePLJbStRvcpD3IzSS2Zbqjn3m4X0CLKxUWKXKtQMyoPxVxGfAQJh1x1vKE+TTE hfZ24GrORpo4U9ieIgjFSz9XJikk6pWS+v4NbXz7fjJZ5etMyjWWIZyhv60NJJlo 7TVf66LULWVHnaiAYy0qu79T7iaXaMQe+8e00yyggtAR4rDmAxQFhcaAEZDGC5rM z4nAoQANiPYZYfor5USab0XQP8x5ic72 -----END CERTIFICATE-----Generated at Thu Jun 19 05:17:45 2025 by rpki-client