$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: VaUA2Xi3wPP8kVM+j/l8fKd/i/ohs+7dqDcZUTUnjNI= Subject key identifier: C0:DA:7E:5F:D1:39:2A:03:5A:38:A6:AD:01:70:29:FB:C7:79:62:73 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 01AF Signing time: Fri 25 Apr 2025 02:28:00 +0000 Manifest this update: Fri 25 Apr 2025 02:28:00 +0000 Manifest next update: Fri 02 May 2025 02:28:00 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: N365hPQvNlVYYXwJoQQkDcgtFoiXnYLA51mX0dpZaLY=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Apr 25 02:28:00 2025 GMT Not After : May 2 02:28:00 2025 GMT Subject: CN=680af330-eec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:3f:43:5f:dc:75:51:22:e5:c4:9a:73:68: d4:d9:ad:22:a6:22:bb:ca:14:8d:0c:b5:2e:5c:62: cb:41:d7:61:5c:90:f2:bf:56:3d:18:65:1d:9b:4f: de:6f:44:1e:cb:c9:65:63:e2:7a:7f:9f:ab:04:69: 37:b7:5a:06:60:bd:db:36:33:58:ea:26:bf:57:a4: c9:33:2c:8a:fc:48:39:c9:ed:db:14:95:26:6a:6a: b4:4f:52:8f:a6:27:81:d6:2d:84:fc:b4:88:64:8f: 14:30:d9:03:89:dc:a8:45:1d:22:e5:64:23:1a:49: ae:c0:dc:1c:c9:f4:75:b1:19:03:76:91:e8:31:17: 3e:b0:cb:d9:70:3a:8b:cb:7b:76:28:3c:e1:5b:6c: 10:9a:16:a5:57:24:f5:79:21:c6:5b:9b:31:59:e1: 99:ea:d3:19:6d:54:35:5d:6f:83:cf:ce:7d:79:93: 79:31:8a:d6:0f:62:ea:a4:d5:4a:58:93:a6:05:80: 07:37:59:f1:7c:1c:b3:70:b0:ec:ca:89:0e:f5:a4: 8f:53:36:b9:c3:75:c0:54:5a:85:30:1a:bc:6d:06: 49:9b:14:ea:ee:6d:c5:9d:8d:ee:04:a9:82:ea:41: 6a:c3:ff:07:ce:01:c8:ee:06:3b:8b:4b:32:dc:5d: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:7E:5F:D1:39:2A:03:5A:38:A6:AD:01:70:29:FB:C7:79:62:73 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:59:06:f6:e2:0d:ff:b0:17:6b:c4:7a:a9:b8:93:12:8d:b0: 2f:63:70:8c:cf:17:3b:bd:7d:68:82:a8:82:eb:30:e6:f6:13: 2f:62:aa:80:0e:74:17:22:ef:ec:b9:4f:a8:aa:92:f5:7e:81: 54:e0:18:21:8d:a4:50:3b:3f:9e:5b:5a:1b:50:8c:03:a4:2e: a3:d1:b3:fa:4f:30:ae:32:61:99:ad:89:9b:cf:f6:70:cb:cf: 9f:00:8b:dc:97:f4:59:1d:51:dd:37:15:4a:cc:0a:db:cf:d6: 09:08:00:42:98:cf:fb:2e:23:d8:55:9e:1d:e6:5a:fe:5c:74: d2:93:83:0a:8b:78:5b:7f:71:f0:d6:2f:13:55:94:38:7b:f2: e8:95:4b:06:2a:f2:35:50:c2:89:58:79:55:dd:12:32:9d:19: 18:06:79:83:e6:67:8d:04:8c:79:9d:12:40:15:9b:aa:1c:8d: df:fc:03:bc:8d:c0:74:0f:ec:9e:c6:f9:22:dc:47:73:c4:2e: e6:49:5c:9e:34:2d:03:39:4d:6a:9f:cb:05:0e:08:0e:cf:68: ee:02:dc:de:1e:e7:25:71:29:4b:9a:21:25:fd:ca:a0:37:cf: 2c:ea:d5:ca:ce:f7:54:c4:4f:a0:a6:04:2e:29:a5:ba:fc:56: 96:84:06:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUwNDI1MDIyODAwWhcNMjUwNTAyMDIyODAwWjAYMRYwFAYD VQQDEw02ODBhZjMzMC1lZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH8/Q1/cdVEi5cSac2jU2a0ipiK7yhSNDLUuXGLLQddhXJDyv1Y9GGUdm0/e b0Qey8llY+J6f5+rBGk3t1oGYL3bNjNY6ia/V6TJMyyK/Eg5ye3bFJUmamq0T1KP pieB1i2E/LSIZI8UMNkDidyoRR0i5WQjGkmuwNwcyfR1sRkDdpHoMRc+sMvZcDqL y3t2KDzhW2wQmhalVyT1eSHGW5sxWeGZ6tMZbVQ1XW+Dz859eZN5MYrWD2LqpNVK WJOmBYAHN1nxfByzcLDsyokO9aSPUza5w3XAVFqFMBq8bQZJmxTq7m3FnY3uBKmC 6kFqw/8HzgHI7gY7i0sy3F0XbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDafl/R OSoDWjimrQFwKfvHeWJzMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOWQb24g3/sBdrxHqpuJMSjbAvY3CMzxc7vX1ogqiC6zDm9hMvYqqA DnQXIu/suU+oqpL1foFU4BghjaRQOz+eW1obUIwDpC6j0bP6TzCuMmGZrYmbz/Zw y8+fAIvcl/RZHVHdNxVKzArbz9YJCABCmM/7LiPYVZ4d5lr+XHTSk4MKi3hbf3Hw 1i8TVZQ4e/LolUsGKvI1UMKJWHlV3RIynRkYBnmD5meNBIx5nRJAFZuqHI3f/AO8 jcB0D+yexvki3EdzxC7mSVyeNC0DOU1qn8sFDggOz2juAtzeHuclcSlLmiEl/cqg N88s6tXKzvdUxE+gpgQuKaW6/FaWhAYD -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:07 2025 by rpki-client