$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json) Hash identifier: XwSTDEOD09mHFIGBTI5rnRdhAHZ2hQ/gKtRWCTyEX6c= Subject key identifier: E3:E6:0B:94:4C:F5:ED:9B:2E:93:CC:25:21:3A:C1:A9:E5:E2:57:DF Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft Manifest number: E7 Signing time: Fri 25 Apr 2025 04:33:48 +0000 Manifest this update: Fri 25 Apr 2025 04:33:47 +0000 Manifest next update: Fri 02 May 2025 04:33:47 +0000 Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: WQGjIq9rHzIv+pfNVSeC1ibS8x/VD3deYVJLOT2ApmQ=) 2: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: duDXgnYLEwRFNw5fNTALQb7WNFeun5hiy5BHL+p0o+Q=) 3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: cZwVDK29snDD6Xr0iox6qVKQBw89Sanj4Nn6X381ztM=) 4: 79F7221E892911EF896D1145C4F9AE02.roa (hash: CdVHSgSFwVlvO0qZ+589iYkzFfVCO/HTOSZdhmiqYtg=) 5: F278C026892911EFB08D7746C4F9AE02.roa (hash: C5af6g+Lu9mdrwbxySM/XZuzLumGfZMRdOD7/d/Fh8M=) 6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: h643cI2g+iFcUuenN+s6pHi62OFIxZQfh52pwbMjNbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Validity Not Before: Apr 25 04:33:47 2025 GMT Not After : May 2 04:33:47 2025 GMT Subject: CN=680b10ac-9d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:53:cb:e8:8c:a8:42:d8:3e:2e:83:60:f7: d7:8d:71:05:2d:06:79:f2:96:1d:ee:93:90:82:0a: c5:1f:07:97:df:2b:85:54:77:89:72:a8:68:60:80: 1d:92:5d:26:de:07:4e:23:31:eb:cb:7b:cf:e1:9a: 2d:10:ff:19:a6:b3:08:03:4e:12:4c:f2:c2:75:7a: 12:09:ae:c3:c2:59:0c:08:94:7f:ce:ce:40:21:42: ac:b0:81:34:84:02:3f:b5:cf:b4:21:cb:a5:12:52: 14:07:be:74:72:c0:31:ef:99:51:36:6a:76:40:1c: 62:76:15:6a:bc:83:86:37:79:e0:9b:9e:7f:04:2c: 42:a0:3f:b2:cf:a4:81:4c:4a:a2:7a:9a:8c:7b:f2: be:53:4a:30:45:8e:51:62:a2:5c:ac:79:b6:ab:03: 40:79:66:90:38:fa:2a:65:a6:68:97:36:bd:ac:59: 74:76:84:23:4c:e9:61:99:cd:e6:a2:86:36:7c:4a: b6:c7:c0:3a:e5:91:f3:22:80:af:9c:cd:43:21:01: 12:76:9b:3b:3e:87:a2:be:4a:ee:50:e4:8d:2a:96: 30:9c:5b:b2:84:a9:ab:62:7c:42:09:c0:c5:f8:c5: b4:60:ed:8e:c5:6a:57:a7:47:e9:43:5f:41:d2:92: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:0B:94:4C:F5:ED:9B:2E:93:CC:25:21:3A:C1:A9:E5:E2:57:DF X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d5:66:0e:68:ea:97:51:41:1d:1a:b7:0b:fe:ab:99:29:41: 8e:c7:67:e8:e7:9e:57:8b:2b:e2:36:90:4d:25:bf:ed:7f:6e: a5:36:e0:d7:92:24:d7:bd:ae:12:77:05:44:81:75:d9:14:6e: 3c:24:80:71:11:1e:77:de:ca:98:31:62:b1:7c:17:9a:80:c9: 95:8a:4c:96:e4:66:e5:1c:b8:4c:bf:58:95:87:b9:87:4d:02: c9:be:57:f2:b0:6c:73:42:10:47:36:eb:99:33:eb:45:bf:86: 82:64:76:08:d3:ad:60:07:56:ad:07:cd:5e:bc:50:0f:6f:58: c1:c4:08:c9:55:24:fa:29:f9:4f:35:e8:fb:e7:45:ab:9f:69: 9e:66:f9:09:8f:c2:4c:b0:6c:88:19:35:e0:67:32:cc:28:84: a2:c3:ce:68:bd:47:ec:b6:af:89:1b:4a:0e:81:97:63:92:1a: 5c:06:6e:e0:14:37:fe:af:d5:f5:c8:b6:a3:5f:c3:70:f4:58: d0:50:67:b2:92:dc:d3:fc:db:cd:78:ec:3d:d1:ad:a0:cc:7e: 7f:59:c7:01:22:a9:0b:9d:7f:7c:33:61:85:15:9c:4a:a8:cf: 49:a7:45:82:1c:be:a3:6f:58:5d:b9:dc:49:c4:9b:9c:11:0e: d9:02:99:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwNDI1MDQzMzQ3WhcNMjUwNTAyMDQzMzQ3WjAYMRYwFAYD VQQDEw02ODBiMTBhYy05ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xVTy+iMqELYPi6DYPfXjXEFLQZ58pYd7pOQggrFHweX3yuFVHeJcqhoYIAd kl0m3gdOIzHry3vP4ZotEP8ZprMIA04STPLCdXoSCa7DwlkMCJR/zs5AIUKssIE0 hAI/tc+0IculElIUB750csAx75lRNmp2QBxidhVqvIOGN3ngm55/BCxCoD+yz6SB TEqiepqMe/K+U0owRY5RYqJcrHm2qwNAeWaQOPoqZaZolza9rFl0doQjTOlhmc3m ooY2fEq2x8A65ZHzIoCvnM1DIQESdps7PoeivkruUOSNKpYwnFuyhKmrYnxCCcDF +MW0YO2OxWpXp0fpQ19B0pKkAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPmC5RM 9e2bLpPMJSE6wanl4lffMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA51WYOaOqXUUEdGrcL/quZKUGOx2fo555XiyviNpBNJb/tf26lNuDX kiTXva4SdwVEgXXZFG48JIBxER533sqYMWKxfBeagMmVikyW5GblHLhMv1iVh7mH TQLJvlfysGxzQhBHNuuZM+tFv4aCZHYI061gB1atB81evFAPb1jBxAjJVST6KflP Nej750Wrn2meZvkJj8JMsGyIGTXgZzLMKISiw85ovUfstq+JG0oOgZdjkhpcBm7g FDf+r9X1yLajX8Nw9FjQUGeyktzT/NvNeOw90a2gzH5/WccBIqkLnX98M2GFFZxK qM9Jp0WCHL6jb1hdudxJxJucEQ7ZApk7 -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:11 2025 by rpki-client