$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: SV0a1gf72XqyjsEc5szE4d0VMBHJvUCQNqqJB8TYg5Q= Subject key identifier: 27:8D:54:50:00:68:60:09:2E:43:F1:7D:98:DF:E0:7A:93:7A:D8:E6 Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 0143 Signing time: Fri 25 Apr 2025 03:24:23 +0000 Manifest this update: Fri 25 Apr 2025 03:24:22 +0000 Manifest next update: Fri 02 May 2025 03:24:22 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: UPsgl83kenvdT3BgaI2H2PwPnE5jlbI+decuHWsdnxw=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: YH1Nm5sXHdp6f2aOSmPXsxfDGLzWgDg+3RJO69rwbXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: Apr 25 03:24:22 2025 GMT Not After : May 2 03:24:22 2025 GMT Subject: CN=680b0066-6f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:11:7f:f8:28:ba:f9:51:75:30:af:76:d2: 77:43:8e:71:47:33:0c:30:8a:8d:53:e1:c5:40:c3: 3b:de:4e:51:c4:83:fe:99:6b:76:ff:e7:d2:8b:c8: 35:3a:18:25:aa:4e:74:4a:29:32:5a:97:a1:41:9a: 17:23:e8:3c:14:53:a1:98:a6:bc:ed:86:c6:51:b3: 92:a6:20:71:70:ef:6a:1f:d7:56:3d:29:0a:3c:7e: 1e:65:95:b9:86:89:4a:31:fa:b9:b4:ae:f3:61:5a: 91:98:ab:4f:e9:b8:de:e3:31:6b:13:fd:7d:7d:3c: dc:2d:44:42:0e:92:93:a6:7d:f7:2a:1f:0d:4e:2a: 2e:e0:45:7d:35:d9:df:c3:b0:c9:50:d1:ba:42:19: bd:ba:04:f5:d8:0b:6f:2d:5a:b4:e5:50:72:31:35: 17:82:d5:02:27:51:5c:f3:e5:77:9e:e8:55:67:18: e2:b0:56:75:a6:7d:3a:05:43:da:20:0a:75:a4:e5: ef:dd:dc:b5:73:fe:c8:8e:fc:a5:95:6c:2b:b9:8d: 99:00:72:2b:1d:0f:8e:f6:f4:49:2b:ba:71:00:7f: e1:46:eb:00:c4:e8:d5:e2:6d:59:99:4e:1e:3c:2e: 7a:09:77:2e:47:e5:c7:ae:6b:d4:9d:c1:e8:0c:fe: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:54:50:00:68:60:09:2E:43:F1:7D:98:DF:E0:7A:93:7A:D8:E6 X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ec:20:55:1b:ae:6b:8f:c3:d3:69:9b:5d:33:93:d6:e8:69: 71:4e:38:5b:94:94:a9:ac:bd:4a:a6:3f:ba:98:87:e0:6f:b1: 56:f3:d9:49:97:9e:0e:99:78:d1:63:c3:7d:cf:4d:81:fb:4e: 5d:a8:f7:dd:e6:12:14:41:6a:9a:65:7d:75:a5:95:b8:94:8c: 18:da:b4:b7:e1:8f:5a:ef:1b:f8:a7:c1:5a:5d:64:7d:38:2d: 0b:06:54:76:4c:91:9d:3b:76:d3:49:7f:63:a9:7c:06:41:15: b3:68:65:42:06:a3:8a:60:aa:f7:7d:16:ba:a2:4c:17:e3:0d: 64:03:a5:22:3b:3e:ad:7a:48:fc:5d:8b:b9:6b:de:db:e6:d4: 58:11:cc:e2:9b:09:2f:33:7f:1b:6f:84:62:77:da:02:c2:b3: 71:fe:3d:56:af:ec:21:f5:b6:85:5c:d6:70:85:6f:6d:a6:6e: c0:fe:e7:e8:3d:e4:4c:ea:52:82:e2:3a:b4:fa:38:3b:9c:b6: 61:6a:a8:6c:4a:12:be:23:07:45:4e:68:7b:35:a5:a5:59:91: f4:40:ab:e0:3e:9f:9c:7f:0f:e5:99:d1:f9:98:3b:9b:7c:b7: 5e:ad:dc:b3:3f:b5:db:c7:c6:72:ef:98:3d:94:a4:ba:dd:a4: 40:25:0c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjUwNDI1MDMyNDIyWhcNMjUwNTAyMDMyNDIyWjAYMRYwFAYD VQQDEw02ODBiMDA2Ni02ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx84Rf/gouvlRdTCvdtJ3Q45xRzMMMIqNU+HFQMM73k5RxIP+mWt2/+fSi8g1 Ohglqk50SikyWpehQZoXI+g8FFOhmKa87YbGUbOSpiBxcO9qH9dWPSkKPH4eZZW5 holKMfq5tK7zYVqRmKtP6bje4zFrE/19fTzcLURCDpKTpn33Kh8NTiou4EV9Ndnf w7DJUNG6Qhm9ugT12AtvLVq05VByMTUXgtUCJ1Fc8+V3nuhVZxjisFZ1pn06BUPa IAp1pOXv3dy1c/7IjvyllWwruY2ZAHIrHQ+O9vRJK7pxAH/hRusAxOjV4m1ZmU4e PC56CXcuR+XHrmvUncHoDP746QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeNVFAA aGAJLkPxfZjf4HqTetjmMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb7CBVG65rj8PTaZtdM5PW6GlxTjhblJSprL1Kpj+6mIfgb7FW89lJ l54OmXjRY8N9z02B+05dqPfd5hIUQWqaZX11pZW4lIwY2rS34Y9a7xv4p8FaXWR9 OC0LBlR2TJGdO3bTSX9jqXwGQRWzaGVCBqOKYKr3fRa6okwX4w1kA6UiOz6tekj8 XYu5a97b5tRYEczimwkvM38bb4Rid9oCwrNx/j1Wr+wh9baFXNZwhW9tpm7A/ufo PeRM6lKC4jq0+jg7nLZhaqhsShK+IwdFTmh7NaWlWZH0QKvgPp+cfw/lmdH5mDub fLderdyzP7Xbx8Zy75g9lKS63aRAJQyZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:13 2025 by rpki-client