$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: +opl1LhlW2IgHFfQLHGmS5zX/wBcIwrR5RfSzx/Gx2Y= Subject key identifier: 67:DB:84:72:4E:58:D5:BB:D6:A1:40:7B:C6:B5:80:CE:2C:48:74:5E Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: 59 Signing time: Fri 25 Apr 2025 06:09:41 +0000 Manifest this update: Fri 25 Apr 2025 06:09:41 +0000 Manifest next update: Fri 02 May 2025 06:09:41 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: EmARSaDpAzbofMjwyFmLEs1ETTkKmfoF8DJGzC+OnCk=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: gOxPsMK6qt78bQigJet/lS4chqy9h8TzqNHqZP/sKyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Apr 25 06:09:41 2025 GMT Not After : May 2 06:09:41 2025 GMT Subject: CN=680b2725-0fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:12:39:b0:9e:f0:68:8b:c6:ac:3f:fd:ee: 4a:ad:a6:d0:00:ae:33:1e:23:07:a4:3d:e0:27:00: 09:c1:2a:72:88:14:34:be:29:29:94:4c:ef:e8:7f: 2a:9a:3a:d6:72:5e:11:5b:77:a2:5f:51:c4:f5:e2: 15:38:2b:8f:64:6b:70:e0:b4:60:48:87:41:05:ad: 55:2c:9e:c1:ae:a3:04:c6:59:5c:20:37:f1:32:24: e6:b6:9c:a6:25:0f:77:48:3b:69:04:03:20:a2:8a: 60:f0:2d:38:86:34:57:d4:8b:e5:c0:2e:72:25:7b: be:8c:08:2c:50:f7:e1:21:58:c0:02:94:f2:a7:a2: 3f:8e:6e:1a:dd:e8:08:5e:be:e0:ea:32:d2:3e:ff: 32:6a:5a:d9:54:8d:d4:b2:68:b8:b0:89:ea:fa:e2: 0d:78:b4:02:13:ce:4a:bc:47:f4:3b:72:04:99:12: 5d:68:51:67:9d:19:c2:21:45:7c:41:45:a1:8d:28: ca:f0:42:6b:81:92:26:3b:62:80:61:04:3f:3f:f6: dd:e3:1e:b9:3f:3b:d9:1a:2e:43:aa:32:5d:27:8c: a3:89:08:ab:af:1a:cc:69:eb:bd:8b:26:6e:92:4d: 4c:3e:8a:81:83:2a:08:75:9f:b5:62:3a:e4:f1:6b: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:84:72:4E:58:D5:BB:D6:A1:40:7B:C6:B5:80:CE:2C:48:74:5E X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:58:83:2c:4e:c4:44:10:d4:54:0d:a7:9a:33:dd:67:da:d6: 43:15:68:a4:f4:0d:33:7b:4e:d6:ca:ae:c4:ea:6d:93:de:97: 12:1f:01:37:32:9a:6c:d4:e1:7b:de:3a:67:03:d4:46:d5:94: cc:db:ea:c6:10:44:45:e5:ba:04:23:5a:85:c0:d6:54:93:bb: 58:5e:96:89:35:b8:f4:70:36:10:db:d5:72:8d:3a:62:c9:b9: d3:a9:d9:46:51:0b:f6:e4:a1:f9:25:0d:84:e6:37:39:be:b6: 7e:5c:36:a2:98:55:92:52:c8:e4:76:8b:87:aa:30:80:0d:49: fd:25:af:ac:79:14:0a:af:ba:20:9b:1d:ae:93:4b:a9:7a:fe: 05:ad:87:7b:f3:cf:8f:05:37:e1:2c:cd:c8:ee:c6:f9:5d:d3: a6:0b:72:80:94:f0:41:b3:26:bf:a4:ca:b2:03:8b:91:78:f9: 96:ca:90:7a:4c:f8:49:c5:2a:7c:dc:59:80:3f:04:7f:dc:98: 59:95:d6:26:38:7c:17:33:ae:73:db:df:56:15:6c:d8:f4:c7: 40:50:8c:31:db:f4:37:06:ac:a4:8e:1f:18:9c:b3:6a:15:6a: d5:67:00:4e:41:66:85:30:16:70:e0:34:b7:ec:86:0f:92:de: ac:99:b9:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTczOTExMC8GA1UEBRMoMEMxQkNFMDI0QjQzRkREQTg3RjM5NjE1RDk5NEJBMzcw NjI0NkM1MDAeFw0yNTA0MjUwNjA5NDFaFw0yNTA1MDIwNjA5NDFaMBgxFjAUBgNV BAMTDTY4MGIyNzI1LTBmYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZMRI5sJ7waIvGrD/97kqtptAArjMeIwekPeAnAAnBKnKIFDS+KSmUTO/ofyqa OtZyXhFbd6JfUcT14hU4K49ka3DgtGBIh0EFrVUsnsGuowTGWVwgN/EyJOa2nKYl D3dIO2kEAyCiimDwLTiGNFfUi+XALnIle76MCCxQ9+EhWMAClPKnoj+Obhrd6Ahe vuDqMtI+/zJqWtlUjdSyaLiwier64g14tAITzkq8R/Q7cgSZEl1oUWedGcIhRXxB RaGNKMrwQmuBkiY7YoBhBD8/9t3jHrk/O9kaLkOqMl0njKOJCKuvGsxp672LJm6S TUw+ioGDKgh1n7ViOuTxawL3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ9uEck5Y 1bvWoUB7xrWAzixIdF4wHwYDVR0jBBgwFoAUDBvOAktD/dqH85YV2ZS6NwYkbFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNzM5L0M5NUQzOTdDOUY1 MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREJ2T0FrdERfZHFIODVZVjJaUzZOd1lrYkZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NzM5L0M5NUQzOTdDOUY1MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2Rx SDg1WVYyWlM2TndZa2JGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINYgyxOxEQQ1FQNp5oz3Wfa1kMVaKT0DTN7TtbKrsTqbZPelxIfATcy mmzU4XveOmcD1EbVlMzb6sYQREXlugQjWoXA1lSTu1helok1uPRwNhDb1XKNOmLJ udOp2UZRC/bkofklDYTmNzm+tn5cNqKYVZJSyOR2i4eqMIANSf0lr6x5FAqvuiCb Ha6TS6l6/gWth3vzz48FN+Eszcjuxvld06YLcoCU8EGzJr+kyrIDi5F4+ZbKkHpM +EnFKnzcWYA/BH/cmFmV1iY4fBczrnPb31YVbNj0x0BQjDHb9DcGrKSOHxics2oV atVnAE5BZoUwFnDgNLfshg+S3qyZuVw= -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:28 2025 by rpki-client