$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft File: dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json) Hash identifier: ng0pE4wRtBvXSWrf4sfuECbmNqFIo1f+A5uOsxAisY4= Subject key identifier: AE:D0:AD:50:AC:07:44:B1:7D:4D:5E:FD:A2:99:F1:B0:24:51:70:F1 Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E Certificate issuer: /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft Manifest number: 0C27 Signing time: Thu 24 Apr 2025 18:35:48 +0000 Manifest this update: Thu 24 Apr 2025 18:35:47 +0000 Manifest next update: Thu 01 May 2025 18:35:47 +0000 Files and hashes: 1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: G5ifBX2eQimsJKFMDb25KrAzb3rqVoFpbfEWOsVrSYk=) 2: 554FA970134B11F086B29E87C4F9AE02.roa (hash: lElr8UuU72HaGdKc4l83MtravhdES9u5a7CA+J7QNtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Validity Not Before: Apr 24 18:35:47 2025 GMT Not After : May 1 18:35:47 2025 GMT Subject: CN=680a8483-6761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:2f:41:0f:87:60:02:8d:84:39:8f:f6:26: cc:b3:25:82:9d:f5:42:ba:c5:fb:19:d7:2e:d8:fa: 2d:81:cb:42:cf:7f:0c:8d:99:fd:00:1b:01:e6:fa: d3:f7:70:05:dc:84:41:6a:60:5d:7c:37:b1:3e:c6: 95:20:72:fe:e5:8b:38:f7:66:94:6e:b5:ed:30:28: 0c:0b:09:be:69:c6:bf:38:ab:15:14:d7:4e:53:e2: 95:d7:9a:f3:63:60:12:27:91:dd:57:e1:6c:ca:c0: 27:b2:cd:ed:3f:c0:10:e6:bd:06:1e:11:6b:6d:9e: f6:58:60:83:e9:aa:e3:d3:0c:81:ff:5f:62:0a:8f: b3:34:93:4a:6a:2e:ea:ea:8f:eb:60:5f:1f:25:ad: 4b:77:7b:62:ad:67:e5:02:15:80:89:5b:66:26:fd: e8:c7:58:76:5c:a9:fa:2b:16:de:3d:c4:dc:66:d5: a5:4f:9c:81:54:8f:3d:54:52:8f:10:52:cd:e2:f6: 7f:8e:99:a5:ac:fd:58:23:dc:12:2f:e0:9f:c6:fd: 1b:39:4e:2a:ca:1b:24:23:6e:6a:62:79:f8:7d:e1: df:9f:05:d1:e1:76:fa:48:6b:14:74:dd:90:e0:3c: 80:37:eb:26:19:3e:27:4f:a3:3d:de:ef:6f:30:ce: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:AD:50:AC:07:44:B1:7D:4D:5E:FD:A2:99:F1:B0:24:51:70:F1 X509v3 Authority Key Identifier: keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:3d:ba:3b:aa:5c:75:e0:55:1e:30:cb:ef:36:fb:b6:1f: ce:b2:7c:ab:0e:f8:16:e2:39:79:9b:a2:c2:a9:48:19:a1:ae: 40:10:cd:ab:42:da:bb:cc:47:1e:52:66:ff:8d:cd:69:ed:fd: 6a:11:eb:e8:3a:18:39:82:6c:72:6a:d1:28:2d:d4:c1:34:5e: 93:13:76:d1:e0:93:f7:a6:01:28:71:17:08:d5:de:4f:cf:0f: d1:bc:0b:bf:58:12:d7:25:17:b9:51:dc:60:d7:99:cf:16:33: 36:f4:61:30:9d:a9:11:9f:7f:c0:ea:b9:7d:73:b2:13:5f:2e: 63:a3:ac:cd:85:61:c2:0c:45:a9:31:de:d5:c5:1b:ef:4f:c7: a5:9f:89:15:49:00:67:11:be:1a:28:e5:8c:43:2c:1e:75:17: 53:ae:66:a7:ff:38:b9:c0:a3:ce:bc:20:74:c0:cf:c4:d5:c2: b2:e0:8e:d8:25:dc:63:a9:d2:cf:37:ce:f6:a2:ef:db:49:85: 5b:ec:a4:f0:9e:03:38:09:0f:0e:44:0a:f3:b3:85:e1:c0:cf: ed:22:39:ef:b1:64:f2:8a:65:6e:24:d8:04:68:6b:27:da:3e: b5:95:83:42:3a:43:c6:be:a0:18:97:1c:9c:d9:86:81:5d:2e: dc:f9:64:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTAxMDExMC8GA1UEBRMoNzUxQThCM0Q1QjYyRTgxRjQ2QTRDN0JENDY5NUJGM0E4 MDY5Q0EzRTAeFw0yNTA0MjQxODM1NDdaFw0yNTA1MDExODM1NDdaMBgxFjAUBgNV BAMTDTY4MGE4NDgzLTY3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGry9BD4dgAo2EOY/2JsyzJYKd9UK6xfsZ1y7Y+i2By0LPfwyNmf0AGwHm+tP3 cAXchEFqYF18N7E+xpUgcv7lizj3ZpRute0wKAwLCb5pxr84qxUU105T4pXXmvNj YBInkd1X4WzKwCeyze0/wBDmvQYeEWttnvZYYIPpquPTDIH/X2IKj7M0k0pqLurq j+tgXx8lrUt3e2KtZ+UCFYCJW2Ym/ejHWHZcqforFt49xNxm1aVPnIFUjz1UUo8Q Us3i9n+OmaWs/Vgj3BIv4J/G/Rs5TirKGyQjbmpiefh94d+fBdHhdvpIaxR03ZDg PIA36yYZPidPoz3e728wznrtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrtCtUKwH RLF9TV79opnxsCRRcPEwHwYDVR0jBBgwFoAUdRqLPVti6B9GpMe9RpW/OoBpyj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MDEwLzZBN0U5NDBBMEMz QTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5R3BNZTlScFdfT29CcHlq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFJxTFBWdGk2QjlHcE1lOVJwV19Pb0JweWo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MDEwLzZBN0U5NDBBMEMzQTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5 R3BNZTlScFdfT29CcHlqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdYPbo7qlx14FUeMMvvNvu2H86yfKsO+BbiOXmbosKpSBmhrkAQzatC 2rvMRx5SZv+NzWnt/WoR6+g6GDmCbHJq0Sgt1ME0XpMTdtHgk/emAShxFwjV3k/P D9G8C79YEtclF7lR3GDXmc8WMzb0YTCdqRGff8DquX1zshNfLmOjrM2FYcIMRakx 3tXFG+9Px6WfiRVJAGcRvhoo5YxDLB51F1OuZqf/OLnAo868IHTAz8TVwrLgjtgl 3GOp0s83zvai79tJhVvspPCeAzgJDw5ECvOzheHAz+0iOe+xZPKKZW4k2ARoayfa PrWVg0I6Q8a+oBiXHJzZhoFdLtz5ZFs= -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:42 2025 by rpki-client