$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json) Hash identifier: bTOyNjzv/eMB/DbSZhfpK7+XSQTgjdMaQBzbqpGGVTo= Subject key identifier: F1:1E:46:12:EA:4D:68:80:BB:59:5D:34:63:72:52:3F:DA:8D:10:08 Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft Manifest number: 056A Signing time: Thu 24 Apr 2025 23:10:24 +0000 Manifest this update: Thu 24 Apr 2025 23:10:23 +0000 Manifest next update: Thu 01 May 2025 23:10:23 +0000 Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: Jcw4G+NZQOoQdBrFHmxU7ncnylqeHlFo/X4x3ZDRVAs=) 2: 54E9D878F08311EB8268373EC4F9AE02.roa (hash: dW7hD1wN8L7C03AXUWPdCdxuG1sBV8M5A1CZNfBcHD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Validity Not Before: Apr 24 23:10:23 2025 GMT Not After : May 1 23:10:23 2025 GMT Subject: CN=680ac4df-e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:3a:b9:65:36:df:7d:35:04:6c:1c:f6:86: 26:8e:74:2a:e8:4b:26:c0:52:02:4a:a7:c7:03:e0: 1b:11:cb:bd:d2:26:4a:fe:ba:3a:9f:83:a7:a9:e0: b3:e2:f7:4d:ef:6a:0e:64:b5:d7:26:f1:da:23:87: ee:aa:c8:3b:60:4f:a0:66:4a:b7:d0:1d:20:72:c9: 1c:73:ba:a1:1d:6f:8e:86:f7:aa:79:e0:89:55:c8: fd:44:23:0f:12:9a:2c:cf:df:aa:9b:13:98:7d:5e: ef:8f:55:42:62:d6:f3:d7:b2:9e:7f:02:20:33:fe: f2:a3:eb:1d:19:7a:12:32:f6:67:62:7d:33:f5:c4: 9d:76:1f:1d:f5:42:17:45:c3:37:90:07:f5:a5:ec: 3d:24:51:54:13:26:3b:b2:d4:45:bf:10:02:fe:6e: e8:de:0b:37:65:f2:2f:28:b4:0c:6a:9e:31:e4:1e: 7c:ea:7b:32:0c:b5:f5:2d:14:e1:2f:9a:cf:73:3b: 1a:dd:ee:ef:52:17:ba:bd:45:e1:a1:a2:0b:62:fd: bb:7c:2c:75:1e:90:f6:ec:ec:4c:b7:12:05:cc:cf: fe:f2:08:1c:02:20:6f:35:0c:c5:ea:3a:4f:d2:9f: 0f:a7:55:f1:f4:d4:5c:84:ce:01:99:3f:e0:d5:3d: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1E:46:12:EA:4D:68:80:BB:59:5D:34:63:72:52:3F:DA:8D:10:08 X509v3 Authority Key Identifier: keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ba:45:84:a1:4a:83:3e:27:2e:ef:75:0a:b1:17:8a:78:db: 62:2e:e1:1b:4f:75:7d:3b:a2:f3:92:40:33:d2:c9:72:8b:e3: af:49:78:b0:6b:65:1c:63:c1:72:2a:c8:1b:ed:fb:52:6b:41: 94:d4:64:bc:36:e7:fd:3d:b9:6e:54:44:54:92:0a:8c:52:4e: 25:ca:cc:ad:3a:69:96:20:65:a4:46:2c:85:72:5b:59:88:59: d6:77:ad:09:c5:68:df:92:18:c1:92:22:4e:dc:95:87:78:88: b3:12:ad:2b:42:e4:cc:0a:c8:15:bb:87:c1:59:bb:c7:84:82: 4f:c9:d5:0d:66:ca:c4:f0:0f:6a:76:2a:86:99:5c:bf:df:ee: 26:16:c5:c1:e2:57:eb:f2:b6:da:cc:92:ad:80:29:6d:a3:2a: 9a:21:18:4c:59:a4:ae:ef:7e:6f:61:44:80:49:5b:d6:8e:ec: e4:9c:dd:12:f9:e4:ae:73:e6:e8:4c:58:69:db:39:57:00:34: dd:96:1e:7b:35:f6:9a:e9:fc:a3:9d:67:30:0a:59:2b:c9:6b: cf:1c:59:6b:b9:64:31:da:b5:9c:af:3c:95:85:1f:16:ea:9b: 5c:70:fd:f9:38:01:f7:05:d3:36:bd:d7:71:f1:d4:74:43:a8: 11:a5:02:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQxOEQxMTAvBgNVBAUTKDBFMDNEM0MyRThGMkM1MzU4MkJFRDFDMjE0QzFGRDNB QUVBNUFFNUEwHhcNMjUwNDI0MjMxMDIzWhcNMjUwNTAxMjMxMDIzWjAYMRYwFAYD VQQDEw02ODBhYzRkZi1lMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxc6uWU23301BGwc9oYmjnQq6EsmwFICSqfHA+AbEcu90iZK/ro6n4OnqeCz 4vdN72oOZLXXJvHaI4fuqsg7YE+gZkq30B0gcskcc7qhHW+OhveqeeCJVcj9RCMP Eposz9+qmxOYfV7vj1VCYtbz17KefwIgM/7yo+sdGXoSMvZnYn0z9cSddh8d9UIX RcM3kAf1pew9JFFUEyY7stRFvxAC/m7o3gs3ZfIvKLQMap4x5B586nsyDLX1LRTh L5rPczsa3e7vUhe6vUXhoaILYv27fCx1HpD27OxMtxIFzM/+8ggcAiBvNQzF6jpP 0p8Pp1Xx9NRchM4BmT/g1T0WcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEeRhLq TWiAu1ldNGNyUj/ajRAIMB8GA1UdIwQYMBaAFA4D08Lo8sU1gr7RwhTB/Tqupa5a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDE4RC9BM0Y2QUNBRUUw NzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhUV0N2dEhDRk1IOU9xNmxy bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RnUFR3dWp5eFRXQ3Z0SENGTUg5T3E2bHJsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDE4RC9BM0Y2QUNBRUUwNzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhU V0N2dEhDRk1IOU9xNmxybG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnukWEoUqDPicu73UKsReKeNtiLuEbT3V9O6LzkkAz0slyi+OvSXiw a2UcY8FyKsgb7ftSa0GU1GS8Nuf9PbluVERUkgqMUk4lysytOmmWIGWkRiyFcltZ iFnWd60JxWjfkhjBkiJO3JWHeIizEq0rQuTMCsgVu4fBWbvHhIJPydUNZsrE8A9q diqGmVy/3+4mFsXB4lfr8rbazJKtgCltoyqaIRhMWaSu735vYUSASVvWjuzknN0S +eSuc+boTFhp2zlXADTdlh57Nfaa6fyjnWcwClkryWvPHFlruWQx2rWcrzyVhR8W 6ptccP35OAH3BdM2vddx8dR0Q6gRpQKW -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:44 2025 by rpki-client