$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: 6LakinyCKlh2UzzJh3KR9/PWT0SHtCFY+kS+neSEiVg= Subject key identifier: D8:69:92:D4:21:B5:90:42:D4:9C:AA:D5:6C:4A:01:41:AD:C3:6E:C6 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0AE7 Signing time: Thu 24 Apr 2025 19:32:05 +0000 Manifest this update: Thu 24 Apr 2025 19:32:04 +0000 Manifest next update: Thu 01 May 2025 19:32:04 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: yNJOKLr/zmGBnduZ5EuUkKK/7Y5BXpVF7UyU9zCVzLY=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: d4UXXCMBLzbA5F5CBh6+/uxfNEdacqbjKjEwNBL2vSE=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Apr 24 19:32:04 2025 GMT Not After : May 1 19:32:04 2025 GMT Subject: CN=680a91b4-6e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:a8:c5:81:e3:c2:74:9d:38:cd:64:da:25: a7:39:64:7e:26:da:11:10:41:ac:39:c7:c0:26:cd: 6c:7e:44:36:48:80:d0:d7:30:01:2c:5e:28:ce:a6: 2e:9d:0b:9f:5d:e0:b3:59:b2:55:72:c5:c4:e8:2f: 94:db:21:ae:39:46:e7:b7:be:f3:07:2b:e0:b3:6d: 6e:df:95:9f:4f:e2:ae:df:79:44:db:f2:f1:b1:ab: 7d:86:d5:2a:ca:1e:1a:50:18:a3:34:65:70:9d:e1: ed:07:2e:8a:b4:b6:e7:6a:86:74:a3:fc:0e:61:fd: 81:19:ce:bb:c7:0e:96:bf:a1:b6:19:31:61:17:e1: 65:52:a6:76:b9:39:4e:7a:7d:28:61:c3:2a:d4:b7: d8:47:e0:21:b8:cf:74:66:48:42:1b:df:6a:68:17: c9:bb:70:03:54:37:5a:dd:92:e3:30:c4:6b:ea:9b: c0:34:b7:50:3e:42:61:9d:df:d9:7a:1f:06:60:5f: c4:43:61:50:4d:6a:38:fb:32:24:3c:b9:ae:6b:28: a0:a0:cf:26:68:2c:68:49:7f:02:72:5d:53:f1:cd: 66:3c:d7:8e:d3:4f:1c:a7:9c:3a:5f:c7:8c:25:94: fb:13:7c:d8:65:4b:bd:ce:e2:c2:c0:9e:a0:7a:e3: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:69:92:D4:21:B5:90:42:D4:9C:AA:D5:6C:4A:01:41:AD:C3:6E:C6 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:35:ca:ae:dd:cd:ab:6c:11:32:b4:ef:57:69:df:e9:db: 1a:7e:b4:a7:a5:0b:30:e5:df:75:c8:2c:06:da:18:86:03:4f: 1f:17:ab:17:32:c4:3c:7e:36:d2:02:97:7f:02:92:ed:cd:b6: 46:d0:78:0f:64:ca:bc:c9:b7:1a:3b:c3:1e:b4:6b:b6:65:b2: cf:9c:24:67:0b:40:eb:f9:e9:18:73:32:44:2f:42:be:b0:5d: 72:e4:65:29:f2:9d:35:cd:a9:36:04:05:cb:f8:87:78:72:d3: 95:06:e7:85:e7:42:1c:63:f4:75:84:a5:0e:54:18:62:6d:75: 5b:40:1e:a1:d9:c4:07:77:8d:08:8d:2c:77:1d:91:3b:70:c8: ea:68:45:59:74:f7:10:7a:ee:6f:65:ad:73:19:01:06:4c:e2: c1:b7:74:c5:05:43:3d:f7:c4:cc:99:72:de:0c:57:03:e4:13: 26:7d:6b:95:23:22:d3:99:8b:ed:af:5e:63:b2:58:73:27:78: d4:b3:ab:4d:55:cb:9b:ae:d8:0f:6c:bf:dd:44:8f:19:b1:f1: f5:70:10:bf:b8:cf:c5:2f:10:cb:ac:5e:58:a6:a7:6d:b8:47: 9b:1d:3e:af:72:e8:a7:c0:07:99:77:1f:da:12:cf:a2:98:7c: 1c:1b:aa:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNDI0MTkzMjA0WhcNMjUwNTAxMTkzMjA0WjAYMRYwFAYD VQQDEw02ODBhOTFiNC02ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDqoxYHjwnSdOM1k2iWnOWR+JtoREEGsOcfAJs1sfkQ2SIDQ1zABLF4ozqYu nQufXeCzWbJVcsXE6C+U2yGuOUbnt77zByvgs21u35WfT+Ku33lE2/Lxsat9htUq yh4aUBijNGVwneHtBy6KtLbnaoZ0o/wOYf2BGc67xw6Wv6G2GTFhF+FlUqZ2uTlO en0oYcMq1LfYR+AhuM90ZkhCG99qaBfJu3ADVDda3ZLjMMRr6pvANLdQPkJhnd/Z eh8GYF/EQ2FQTWo4+zIkPLmuayigoM8maCxoSX8Ccl1T8c1mPNeO008cp5w6X8eM JZT7E3zYZUu9zuLCwJ6geuPeQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhpktQh tZBC1Jyq1WxKAUGtw27GMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUczXKrt3Nq2wRMrTvV2nf6dsafrSnpQsw5d91yCwG2hiGA08fF6sX MsQ8fjbSApd/ApLtzbZG0HgPZMq8ybcaO8MetGu2ZbLPnCRnC0Dr+ekYczJEL0K+ sF1y5GUp8p01zak2BAXL+Id4ctOVBueF50IcY/R1hKUOVBhibXVbQB6h2cQHd40I jSx3HZE7cMjqaEVZdPcQeu5vZa1zGQEGTOLBt3TFBUM998TMmXLeDFcD5BMmfWuV IyLTmYvtr15jslhzJ3jUs6tNVcubrtgPbL/dRI8ZsfH1cBC/uM/FLxDLrF5Ypqdt uEebHT6vcuinwAeZdx/aEs+imHwcG6ok -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:05 2025 by rpki-client