$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: u1OQuBkOu2mVI5MRt57fPPzlZvZLXffd2xFluvsyC2U= Subject key identifier: B8:FD:3D:48:B7:8C:DC:A0:2D:70:FD:2E:EE:05:28:61:94:F2:4F:73 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: F7 Signing time: Tue 17 Jun 2025 04:12:18 +0000 Manifest this update: Tue 17 Jun 2025 04:12:17 +0000 Manifest next update: Tue 24 Jun 2025 04:12:17 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: BXT0LOXvYuroTjyk8Nx0R8lbjzu1bzHpEZNsuss/yyA=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Jun 17 04:12:17 2025 GMT Not After : Jun 24 04:12:17 2025 GMT Subject: CN=6850eb21-708a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:97:14:13:ab:8a:a0:b3:6a:63:20:6c:b1: 07:99:ac:da:f3:6c:13:66:4d:28:e5:fb:a7:c4:d2: 30:11:4d:b0:c8:34:da:20:99:00:ee:34:23:5b:57: 99:e2:11:7e:3a:51:5d:4b:15:9a:b9:54:b2:e7:4d: ad:6d:df:82:af:c8:3c:10:48:23:d6:17:74:6a:f2: 15:85:7e:b0:5d:b6:8e:33:80:e3:ba:46:1b:5b:ec: ce:65:dc:e7:8a:5c:66:03:18:4d:8f:ed:d9:42:ce: ea:92:ad:f6:41:b7:8f:7b:73:b9:6e:4e:a1:5b:1b: 48:69:28:7e:04:3a:c4:c2:d1:54:a4:a7:bd:60:b8: 4e:2f:cb:d4:8d:22:e0:78:10:c7:5d:94:04:57:05: cb:02:76:d1:e3:85:50:8a:ae:79:ed:4e:4e:22:3e: 21:b5:57:fd:51:47:1c:2f:1d:08:2c:7e:70:6b:eb: c7:cb:9f:74:dc:94:91:19:37:a0:2c:78:c5:06:2b: 7e:08:63:4f:c5:7f:60:31:8e:1b:f2:26:68:ad:08: 48:8f:4e:02:c3:e4:f2:05:a3:cf:e9:9c:ca:80:41: 63:70:9d:99:58:88:47:fd:d8:14:14:2f:95:f0:63: 3b:6f:29:40:77:c3:26:cb:46:7b:dc:cb:62:b0:72: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:3D:48:B7:8C:DC:A0:2D:70:FD:2E:EE:05:28:61:94:F2:4F:73 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:87:ca:99:2c:6a:7c:09:f0:4a:1f:d9:f0:9f:17:8b:b8: d0:f8:9e:76:ac:4d:55:27:09:a2:5d:c1:fd:81:d2:10:51:d1: b8:6b:ea:f7:17:f5:28:4d:b4:31:d8:61:99:05:67:5a:e2:48: 97:b8:91:bb:ad:19:a3:79:7d:dc:2f:b0:10:b6:ee:65:31:c3: 8f:10:09:60:64:ae:bb:08:33:82:f0:e1:e5:25:ae:08:f3:04: 34:35:a7:30:96:3d:91:d0:05:70:ad:f5:00:f4:a8:6b:03:d4: c3:57:8b:67:89:40:6e:a3:6c:a9:b7:4d:f9:83:67:b5:01:07: 1f:9a:ad:f6:47:03:54:52:ea:57:a9:b1:97:8b:21:8e:76:a1: db:6c:51:ca:ff:91:4e:c7:1a:7b:15:ad:20:22:27:bf:87:ad: e4:23:72:d3:76:3f:2d:0b:71:ac:92:f3:9c:ca:c2:99:b5:ec: 25:98:ad:8f:b9:57:41:d8:55:c1:e7:6b:ee:9e:2c:a2:1e:03: 82:51:82:a8:10:d3:67:c8:d4:8f:c1:e3:ae:b0:6e:a7:37:c2: c5:45:76:57:c0:4e:00:73:78:46:1f:ae:01:48:40:b1:90:72: a9:37:19:36:e8:88:a9:fb:e9:f2:aa:ef:1e:26:ac:5a:de:c1: 21:ed:2a:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNjE3MDQxMjE3WhcNMjUwNjI0MDQxMjE3WjAYMRYwFAYD VQQDEw02ODUwZWIyMS03MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIGXFBOriqCzamMgbLEHmaza82wTZk0o5funxNIwEU2wyDTaIJkA7jQjW1eZ 4hF+OlFdSxWauVSy502tbd+Cr8g8EEgj1hd0avIVhX6wXbaOM4DjukYbW+zOZdzn ilxmAxhNj+3ZQs7qkq32QbePe3O5bk6hWxtIaSh+BDrEwtFUpKe9YLhOL8vUjSLg eBDHXZQEVwXLAnbR44VQiq557U5OIj4htVf9UUccLx0ILH5wa+vHy5903JSRGTeg LHjFBit+CGNPxX9gMY4b8iZorQhIj04Cw+TyBaPP6ZzKgEFjcJ2ZWIhH/dgUFC+V 8GM7bylAd8Mmy0Z73MtisHL9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj9PUi3 jNygLXD9Lu4FKGGU8k9zMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGjofKmSxqfAnwSh/Z8J8Xi7jQ+J52rE1VJwmiXcH9gdIQUdG4a+r3 F/UoTbQx2GGZBWda4kiXuJG7rRmjeX3cL7AQtu5lMcOPEAlgZK67CDOC8OHlJa4I 8wQ0Nacwlj2R0AVwrfUA9KhrA9TDV4tniUBuo2ypt035g2e1AQcfmq32RwNUUupX qbGXiyGOdqHbbFHK/5FOxxp7Fa0gIie/h63kI3LTdj8tC3GskvOcysKZtewlmK2P uVdB2FXB52vuniyiHgOCUYKoENNnyNSPweOusG6nN8LFRXZXwE4Ac3hGH64BSECx kHKpNxk26Iip++nyqu8eJqxa3sEh7SqR -----END CERTIFICATE-----Generated at Wed Jun 18 10:24:26 2025 by rpki-client