$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: RkcPQ+nW4EQzGguWqMoVgdcI4pk78mD/QM43lfg5WDg= Subject key identifier: D6:63:9C:63:32:1F:F6:CE:8B:12:91:10:C5:7B:E8:63:E7:BC:F4:22 Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0BF0 Signing time: Thu 24 Apr 2025 18:41:30 +0000 Manifest this update: Thu 24 Apr 2025 18:41:30 +0000 Manifest next update: Thu 01 May 2025 18:41:30 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: AnyrS+XAA7NNofD8HyWrI8g4rCW5WfvxG3t28+h9R54=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Apr 24 18:41:30 2025 GMT Not After : May 1 18:41:30 2025 GMT Subject: CN=680a85da-3dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:93:a1:1d:bd:ae:dd:65:0f:d5:f4:b1:ff: bb:3c:73:9c:0f:c6:8a:ae:96:0e:e6:e4:03:d9:c2: 58:d0:58:c3:fa:62:72:70:e8:9f:e9:66:7d:2e:48: 47:96:95:1a:3e:68:f6:23:ab:1b:e7:a5:77:ee:9b: ea:14:bd:5f:0c:70:aa:57:de:ee:cc:b0:82:9d:43: 5c:cd:c0:4e:29:96:d2:88:dc:39:32:dd:e0:60:ef: db:8d:9e:de:37:4f:0f:0f:bc:2d:c1:18:34:8a:31: 92:4a:0e:06:41:5b:ee:70:a1:7b:66:e3:d0:1f:6a: 0d:18:d6:20:0e:ca:89:3d:84:a0:4d:7e:5e:61:e1: bf:95:5f:41:c6:21:af:6b:92:f7:c5:01:84:69:81: 8e:e8:4e:92:d9:01:07:ac:6b:da:07:fe:e3:83:48: ae:07:6f:e4:6e:aa:a6:55:8a:d7:25:14:2e:a2:51: b7:68:94:7c:31:40:41:8f:d9:eb:a3:9c:01:92:ff: 66:a8:52:40:4b:3c:22:32:2e:1b:45:0b:d1:84:9a: a8:59:10:56:76:c5:69:7d:3d:6f:f9:98:5a:3b:c5: 1e:cd:8f:ba:b3:f0:ab:56:16:4b:9e:0f:74:8c:ad: 66:4e:82:8c:f8:c0:28:65:65:53:a6:bc:22:73:00: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:9C:63:32:1F:F6:CE:8B:12:91:10:C5:7B:E8:63:E7:BC:F4:22 X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fe:16:3d:38:c1:6d:ac:3b:07:e7:03:16:d4:26:6f:df:60: 1d:a0:2b:a5:45:33:32:6e:fa:ed:a4:3f:90:02:5e:5e:8f:68: e0:01:44:a6:a4:c2:e7:0b:e2:99:ad:39:3a:87:2c:5b:9f:46: 70:89:38:3c:25:c9:a8:ec:6f:3c:0e:03:3f:df:b1:d8:d7:d6: 83:23:2e:90:d1:ac:54:1c:4d:af:14:98:ac:68:4d:53:8b:ea: c1:51:5a:06:06:79:4c:56:17:0b:13:6c:6d:ae:07:21:f4:b1: 22:09:0d:5d:b6:33:7e:74:20:d3:54:86:3c:18:d7:fb:89:3f: b0:ce:89:51:33:84:9a:ad:54:3d:e0:bb:d1:8c:74:f4:6b:62: b1:49:40:66:34:4b:74:35:a9:69:6b:55:ca:1a:ee:5b:b9:31: e7:16:00:41:25:fd:c4:d4:49:10:81:67:0e:10:be:e5:2e:54: cb:44:71:20:f1:0a:a7:ae:03:66:0d:cb:be:f1:36:49:9f:8f: a3:2b:e0:55:96:4b:2d:0e:e3:ef:e1:26:0a:e4:9c:d9:39:e2: 5b:29:8b:ce:4c:e2:d6:38:af:89:4b:6e:45:44:b1:17:37:3d: 17:8a:73:9f:a3:b0:77:d0:e0:f2:15:b1:a5:6d:06:a1:5c:52: 2e:d9:8f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjUwNDI0MTg0MTMwWhcNMjUwNTAxMTg0MTMwWjAYMRYwFAYD VQQDEw02ODBhODVkYS0zZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJWToR29rt1lD9X0sf+7PHOcD8aKrpYO5uQD2cJY0FjD+mJycOif6WZ9LkhH lpUaPmj2I6sb56V37pvqFL1fDHCqV97uzLCCnUNczcBOKZbSiNw5Mt3gYO/bjZ7e N08PD7wtwRg0ijGSSg4GQVvucKF7ZuPQH2oNGNYgDsqJPYSgTX5eYeG/lV9BxiGv a5L3xQGEaYGO6E6S2QEHrGvaB/7jg0iuB2/kbqqmVYrXJRQuolG3aJR8MUBBj9nr o5wBkv9mqFJASzwiMi4bRQvRhJqoWRBWdsVpfT1v+ZhaO8UezY+6s/CrVhZLng90 jK1mToKM+MAoZWVTprwicwCtOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZjnGMy H/bOixKREMV76GPnvPQiMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/hY9OMFtrDsH5wMW1CZv32AdoCulRTMybvrtpD+QAl5ej2jgAUSm pMLnC+KZrTk6hyxbn0ZwiTg8Jcmo7G88DgM/37HY19aDIy6Q0axUHE2vFJisaE1T i+rBUVoGBnlMVhcLE2xtrgch9LEiCQ1dtjN+dCDTVIY8GNf7iT+wzolRM4SarVQ9 4LvRjHT0a2KxSUBmNEt0Nalpa1XKGu5buTHnFgBBJf3E1EkQgWcOEL7lLlTLRHEg 8QqnrgNmDcu+8TZJn4+jK+BVlkstDuPv4SYK5JzZOeJbKYvOTOLWOK+JS25FRLEX Nz0XinOfo7B30ODyFbGlbQahXFIu2Y8k -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:03 2025 by rpki-client