$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: DDSsOKVp/gIMt8+Ov+P1hMkScyu0QJJlHQxiDMX4YFM= Subject key identifier: 3E:CB:E4:38:E2:86:09:AF:D9:B7:55:8B:9F:11:C2:F5:0B:31:CD:F4 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 0633 Signing time: Thu 24 Apr 2025 22:25:54 +0000 Manifest this update: Thu 24 Apr 2025 22:25:54 +0000 Manifest next update: Thu 01 May 2025 22:25:54 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: Fdj5quGKze0gRSGB8S3foIVihSGpul3BAvnuFrAj08A=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Apr 24 22:25:54 2025 GMT Not After : May 1 22:25:54 2025 GMT Subject: CN=680aba72-2a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:60:7a:35:de:2f:32:b7:e3:05:c1:c2:57: e3:4c:8b:66:e5:37:ff:36:b1:47:47:53:97:82:db: b3:d7:32:c5:b2:09:a2:50:44:01:08:3b:7b:ab:ea: 94:5f:97:6c:b1:eb:a4:43:c4:f4:8d:77:01:24:3e: 89:cc:38:23:20:af:2c:6c:ed:1f:21:49:c4:75:05: b6:22:a0:24:9f:4f:c3:a0:2a:ab:22:df:d3:51:43: bb:95:d3:12:ea:e4:ff:aa:5d:f9:e8:cb:02:a0:45: 42:0f:bd:99:03:a1:07:81:8c:5b:c6:19:d5:14:e3: ac:ad:63:36:68:7d:65:d7:55:9e:1a:83:5d:8e:27: 61:2d:93:7f:53:ad:25:dc:53:c6:98:55:74:39:1e: 96:68:de:ab:4f:73:14:b7:6d:58:7b:97:17:c9:05: 70:c9:75:aa:a2:cc:a3:af:32:17:df:61:2d:0a:b3: 88:9e:62:22:03:a5:a3:e5:a8:9d:e8:a8:56:61:a0: c7:b3:58:11:47:0a:ca:b4:1b:af:54:b1:4e:c1:8b: af:7a:4b:b6:14:ce:23:98:10:f0:6e:02:af:02:e7: 58:5d:d7:0f:ca:d7:c1:56:7f:a1:68:eb:ae:52:3c: ec:cd:7a:4d:ca:e0:56:6f:53:73:85:cd:42:7a:cc: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:E4:38:E2:86:09:AF:D9:B7:55:8B:9F:11:C2:F5:0B:31:CD:F4 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:bb:95:7e:9b:c0:51:b0:a7:0d:63:51:c1:2c:f9:8d:d3:4f: 3a:f8:1e:75:02:02:bc:fc:df:e2:02:f0:26:2f:58:f8:64:8d: 12:0b:72:49:c4:9e:1b:3b:f6:16:2a:fd:c5:d7:87:cc:58:67: 7e:01:0a:9e:30:54:c0:44:3c:3f:56:28:b1:25:6c:a9:7f:c6: fa:07:b4:bf:2c:08:fc:4c:89:af:7f:40:f0:25:bd:59:0a:7f: 05:b6:a8:3c:9d:16:ac:1e:42:39:08:34:0f:a2:4a:4f:78:08: 39:27:2f:4f:28:3d:80:01:61:ce:a6:48:8b:50:d0:07:64:00: e9:16:01:de:4e:57:9e:17:5c:b7:fe:0e:d5:f2:af:97:d8:12: 29:99:8e:91:9c:1b:58:0c:73:00:3e:4a:18:b6:c0:00:bc:4a: c3:00:f0:1b:a3:2f:29:1b:2e:a9:b4:db:c6:d0:44:25:44:d6: 8c:c7:2e:01:66:41:57:dc:59:cc:d8:57:18:90:5a:cc:aa:f5: 14:cd:9f:0f:61:54:0f:89:97:f1:20:59:88:ed:88:de:f5:00: e2:75:d2:18:eb:0b:a1:40:73:28:7e:69:ac:95:66:4e:18:0a: 16:7f:fd:3d:ff:dc:1d:ee:ae:84:8b:a5:ed:9a:64:fb:7f:b9: 05:e1:94:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwNDI0MjIyNTU0WhcNMjUwNTAxMjIyNTU0WjAYMRYwFAYD VQQDEw02ODBhYmE3Mi0yYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RZgejXeLzK34wXBwlfjTItm5Tf/NrFHR1OXgtuz1zLFsgmiUEQBCDt7q+qU X5dsseukQ8T0jXcBJD6JzDgjIK8sbO0fIUnEdQW2IqAkn0/DoCqrIt/TUUO7ldMS 6uT/ql356MsCoEVCD72ZA6EHgYxbxhnVFOOsrWM2aH1l11WeGoNdjidhLZN/U60l 3FPGmFV0OR6WaN6rT3MUt21Ye5cXyQVwyXWqosyjrzIX32EtCrOInmIiA6Wj5aid 6KhWYaDHs1gRRwrKtBuvVLFOwYuveku2FM4jmBDwbgKvAudYXdcPytfBVn+haOuu UjzszXpNyuBWb1Nzhc1CesygFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7L5Dji hgmv2bdVi58RwvULMc30MB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzu5V+m8BRsKcNY1HBLPmN0086+B51AgK8/N/iAvAmL1j4ZI0SC3JJ xJ4bO/YWKv3F14fMWGd+AQqeMFTARDw/ViixJWypf8b6B7S/LAj8TImvf0DwJb1Z Cn8Ftqg8nRasHkI5CDQPokpPeAg5Jy9PKD2AAWHOpkiLUNAHZADpFgHeTleeF1y3 /g7V8q+X2BIpmY6RnBtYDHMAPkoYtsAAvErDAPAboy8pGy6ptNvG0EQlRNaMxy4B ZkFX3FnM2FcYkFrMqvUUzZ8PYVQPiZfxIFmI7Yje9QDiddIY6wuhQHMofmmslWZO GAoWf/09/9wd7q6Ei6XtmmT7f7kF4ZTQ -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:11 2025 by rpki-client