$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: M+qXTgyc+UcX3ZEN2sPOXp2Ft9dvAJob2RmsH9xo0Pk= Subject key identifier: FA:34:9A:F0:AF:7C:72:5A:C1:9C:64:49:6A:7C:43:B4:28:8E:CD:9C Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 01E7 Signing time: Fri 25 Apr 2025 01:59:57 +0000 Manifest this update: Fri 25 Apr 2025 01:59:56 +0000 Manifest next update: Fri 02 May 2025 01:59:56 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: Me2zvZ+waGp5Pxuz5ntnyknMi3jMhlGrdlbJi4mgDB8=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Apr 25 01:59:56 2025 GMT Not After : May 2 01:59:56 2025 GMT Subject: CN=680aec9c-2587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:72:a2:eb:02:2f:11:2f:2c:75:e9:88:12: bc:17:1c:11:0f:f9:ce:f5:4c:a4:f1:de:ab:cd:97: 12:c8:d5:88:6a:1c:fc:9d:a8:54:e2:cb:c8:1c:4f: 6f:bb:50:6e:25:b5:af:34:fa:0e:04:f9:6b:41:1f: d2:c6:12:16:21:8e:f0:d1:ac:2b:70:91:20:89:e5: e9:20:3f:05:89:01:01:a9:7a:ad:ae:63:bf:db:8e: e0:5f:00:c0:41:36:4b:d3:51:6c:07:cf:e9:28:7d: a8:91:fe:ce:df:9c:f1:f8:a4:38:cc:93:03:83:78: ed:99:94:ab:66:9c:61:ba:6f:67:37:a8:c9:13:89: 1f:18:27:4f:13:d8:d6:00:3b:0d:3c:0c:a7:a3:a8: f6:6e:f2:0a:a0:bd:58:68:4d:6c:5a:f3:d5:35:64: 53:fc:2c:2f:0c:77:1d:ce:bc:90:0a:a0:c5:75:a8: 18:54:2e:83:13:cf:f9:45:0b:a6:ee:66:b4:f2:68: 73:2a:cf:61:f6:61:fe:af:ac:83:8c:41:c9:d7:3d: 84:c9:c0:f0:b2:7c:3f:8c:3f:2d:d1:4c:67:e7:d8: f4:df:59:6d:70:e4:f4:e9:9a:1d:c7:e7:50:06:4e: 37:60:88:fc:cb:82:23:80:39:aa:98:47:ff:af:12: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:9A:F0:AF:7C:72:5A:C1:9C:64:49:6A:7C:43:B4:28:8E:CD:9C X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6f:a3:9a:78:3b:47:1c:0b:11:d0:fe:10:2b:1d:df:58:d4: ab:49:7a:04:3c:5f:8d:3a:5e:dc:8f:66:3a:7c:60:4f:68:66: 2e:87:88:f5:13:50:f5:1d:24:f9:66:cb:43:af:84:00:21:2e: 67:50:9f:fc:e2:52:15:e9:6c:9e:cb:0a:ec:b6:c4:a6:d1:09: 39:06:2f:29:68:38:52:3a:c1:d0:39:5d:3f:7f:4b:0b:d1:fa: 8d:46:63:f6:39:61:e4:12:03:27:3c:8e:34:b7:08:d3:8e:d8: 4b:bd:a7:c7:5e:39:65:08:2c:e9:12:42:22:f6:30:d8:22:98: 0c:71:ad:f3:b9:b5:6e:dd:1a:25:f9:05:1b:e9:17:ca:c8:c8: 5e:ec:1a:9f:48:89:0d:dd:4d:b8:05:c8:f1:0f:cf:c2:cc:35: 4e:dd:c4:73:b2:40:2a:b1:fa:c0:2a:59:4d:48:fa:ca:f9:62: 86:8d:da:fe:bb:23:9a:06:c2:3d:3d:1a:ab:de:6c:24:fc:2f: 46:df:be:20:f2:f3:ba:99:69:18:07:b0:39:31:4a:21:8f:ad: 23:17:5e:bc:2e:cd:93:97:76:0f:21:61:c7:45:c7:5e:6b:86: 5d:e8:d2:06:c5:42:02:d3:bd:a4:ac:9c:70:8e:4a:3a:d8:49: 37:6e:61:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwNDI1MDE1OTU2WhcNMjUwNTAyMDE1OTU2WjAYMRYwFAYD VQQDEw02ODBhZWM5Yy0yNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI9yousCLxEvLHXpiBK8FxwRD/nO9Uyk8d6rzZcSyNWIahz8nahU4svIHE9v u1BuJbWvNPoOBPlrQR/SxhIWIY7w0awrcJEgieXpID8FiQEBqXqtrmO/247gXwDA QTZL01FsB8/pKH2okf7O35zx+KQ4zJMDg3jtmZSrZpxhum9nN6jJE4kfGCdPE9jW ADsNPAyno6j2bvIKoL1YaE1sWvPVNWRT/CwvDHcdzryQCqDFdagYVC6DE8/5RQum 7ma08mhzKs9h9mH+r6yDjEHJ1z2EycDwsnw/jD8t0Uxn59j031ltcOT06Zodx+dQ Bk43YIj8y4IjgDmqmEf/rxIP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo0mvCv fHJawZxkSWp8Q7Qojs2cMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkb6OaeDtHHAsR0P4QKx3fWNSrSXoEPF+NOl7cj2Y6fGBPaGYuh4j1 E1D1HST5ZstDr4QAIS5nUJ/84lIV6WyeywrstsSm0Qk5Bi8paDhSOsHQOV0/f0sL 0fqNRmP2OWHkEgMnPI40twjTjthLvafHXjllCCzpEkIi9jDYIpgMca3zubVu3Rol +QUb6RfKyMhe7BqfSIkN3U24BcjxD8/CzDVO3cRzskAqsfrAKllNSPrK+WKGjdr+ uyOaBsI9PRqr3mwk/C9G374g8vO6mWkYB7A5MUohj60jF168Ls2Tl3YPIWHHRcde a4Zd6NIGxUIC072krJxwjko62Ek3bmE9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:58:00 2025 by rpki-client