$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: UUUAkiM+6YX+yNbx/tvgs9OLjcSb7MhQqr/RZ/YDxaI= Subject key identifier: C4:82:80:26:FB:AF:76:66:A3:11:9F:A3:2F:0A:B2:49:9B:81:6A:43 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0E4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E3D Signing time: Thu 24 Apr 2025 17:45:33 +0000 Manifest this update: Thu 24 Apr 2025 17:45:33 +0000 Manifest next update: Thu 01 May 2025 17:45:33 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: prVmJpbou9ePdjAGHPs1Maox8Vvnlqj/GnHj2XOa2c4=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Apr 24 17:45:33 2025 GMT Not After : May 1 17:45:33 2025 GMT Subject: CN=680a78bd-f3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:64:18:55:72:36:27:24:32:82:25:f6:9e: 24:28:98:03:c1:1c:e7:d0:3c:09:8c:2a:1d:21:ba: 75:55:e5:64:de:b9:3c:87:87:36:9d:b8:ba:ee:b9: 34:14:f1:bf:37:25:c9:fb:79:c4:2a:41:5a:6b:b4: 3a:1d:29:b9:89:04:1c:bb:2f:62:16:a3:46:d5:33: e8:36:53:8b:17:c6:01:a4:90:23:79:bf:4a:00:a9: aa:fb:bf:ad:46:49:74:55:eb:6d:da:42:7a:48:27: 37:44:ff:a4:6b:6f:15:67:ac:c0:d5:d0:f1:f1:0a: 5d:3c:0f:db:c5:ab:18:12:79:0e:0a:30:ba:6a:04: a7:49:34:5e:a2:ec:bc:df:33:6b:78:c7:42:10:09: 41:86:1f:cc:4e:54:08:6d:19:03:bd:c4:0e:1f:69: 45:45:ee:fe:78:c2:cb:89:af:bd:9a:05:8a:48:1b: 96:f0:08:e1:0f:0d:04:7b:3e:75:c5:81:a4:1f:17: 8d:81:f3:da:07:45:8f:33:54:db:de:63:be:95:ec: 2d:40:f2:d1:b9:2a:62:20:4b:90:1c:7e:4a:25:06: 55:09:e9:21:76:85:01:ea:78:0d:27:7f:95:64:ba: 28:45:1b:ee:49:0e:98:e3:a7:ad:f9:f6:dc:f5:2d: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:82:80:26:FB:AF:76:66:A3:11:9F:A3:2F:0A:B2:49:9B:81:6A:43 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3f:d2:5a:00:f0:3b:31:2c:00:d3:c4:0f:f0:43:cb:8a:76: a6:03:cb:53:a2:9c:52:b9:ac:61:98:35:ca:7d:3d:8d:06:e9: 0d:09:26:bd:e6:c7:90:e3:13:d6:ce:69:96:b5:07:3a:16:43: 02:36:c3:7d:ee:5e:bd:49:e9:70:58:1c:ab:ef:ba:42:83:10: cd:34:10:59:e0:20:df:01:f0:78:3e:5b:f4:4d:c5:11:71:1e: 07:00:f9:ac:a8:a0:fe:c5:40:61:9c:e1:39:99:99:c1:90:56: 5e:4e:f6:b0:e1:7e:87:78:07:8f:ec:c0:1d:51:8b:ca:94:0a: b2:c2:35:54:8f:6a:ed:90:cc:b4:37:71:64:d2:13:c7:f1:a1: 9f:fd:06:2f:11:a6:44:84:3e:85:b6:2c:79:e7:64:72:42:1f: a7:26:ac:d6:73:8a:91:44:67:e3:cf:60:e4:87:ef:42:26:1d: 00:50:06:57:0b:78:dd:cc:4e:cb:2f:e5:9e:ff:c3:69:4b:27: 4b:ae:63:ca:8e:58:7f:c2:a3:6c:c2:5e:29:00:ca:38:ea:37: 86:ab:c0:22:6c:7a:19:2c:3c:d9:4a:57:49:d7:b3:37:2f:da: e1:0a:bc:a5:1f:cf:72:e8:ae:a3:f6:b1:95:85:37:e0:3a:7c: a0:f3:d2:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUwNDI0MTc0NTMzWhcNMjUwNTAxMTc0NTMzWjAYMRYwFAYD VQQDEw02ODBhNzhiZC1mM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gpkGFVyNickMoIl9p4kKJgDwRzn0DwJjCodIbp1VeVk3rk8h4c2nbi67rk0 FPG/NyXJ+3nEKkFaa7Q6HSm5iQQcuy9iFqNG1TPoNlOLF8YBpJAjeb9KAKmq+7+t Rkl0Vett2kJ6SCc3RP+ka28VZ6zA1dDx8QpdPA/bxasYEnkOCjC6agSnSTReouy8 3zNreMdCEAlBhh/MTlQIbRkDvcQOH2lFRe7+eMLLia+9mgWKSBuW8AjhDw0Eez51 xYGkHxeNgfPaB0WPM1Tb3mO+lewtQPLRuSpiIEuQHH5KJQZVCekhdoUB6ngNJ3+V ZLooRRvuSQ6Y46et+fbc9S0vQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSCgCb7 r3ZmoxGfoy8KskmbgWpDMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGP9JaAPA7MSwA08QP8EPLinamA8tTopxSuaxhmDXKfT2NBukNCSa9 5seQ4xPWzmmWtQc6FkMCNsN97l69SelwWByr77pCgxDNNBBZ4CDfAfB4Plv0TcUR cR4HAPmsqKD+xUBhnOE5mZnBkFZeTvaw4X6HeAeP7MAdUYvKlAqywjVUj2rtkMy0 N3Fk0hPH8aGf/QYvEaZEhD6Ftix552RyQh+nJqzWc4qRRGfjz2Dkh+9CJh0AUAZX C3jdzE7LL+We/8NpSydLrmPKjlh/wqNswl4pAMo46jeGq8AibHoZLDzZSldJ17M3 L9rhCrylH89y6K6j9rGVhTfgOnyg89Ju -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:41 2025 by rpki-client