$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft File: dS97SFPDqcnwf9naxduWq37y398.mft (raw, json) Hash identifier: NSHBgfwoW79tY6woGOPlphMYSJv2psEZ5qVOYlbR9+o= Subject key identifier: B3:B8:58:2B:CA:83:2A:A8:45:E1:54:A2:49:53:0A:62:77:CD:1C:E1 Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF Certificate issuer: /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft Manifest number: 037E Signing time: Fri 25 Apr 2025 00:38:57 +0000 Manifest this update: Fri 25 Apr 2025 00:38:56 +0000 Manifest next update: Fri 02 May 2025 00:38:56 +0000 Files and hashes: 1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: d5dsI7LOpizf9Y+NgygtAZUi5VnYExeGBaU88tsZe0w=) 2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: vZ6MvUd27mPzfp5A96TFmJZRSLkOxkRd29pgThht6lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913979C, serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF Validity Not Before: Apr 25 00:38:56 2025 GMT Not After : May 2 00:38:56 2025 GMT Subject: CN=680ad9a0-b697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:40:64:c3:4c:4c:63:77:bb:e0:2a:a3:a9: 2d:1a:9f:6d:ea:4f:f0:e9:a2:78:e1:8f:87:3c:0c: d8:5f:6d:d0:87:6c:5a:c7:ae:2c:39:05:de:91:83: a7:4d:99:92:f5:43:41:45:02:2a:f7:cc:54:1e:14: 2d:a3:c9:11:7f:56:f1:62:17:65:3d:e7:c2:6e:a0: 38:fb:b9:36:fc:3a:10:b4:90:a4:d2:0a:17:20:3c: c9:40:23:00:de:86:29:89:1b:f7:4b:3c:57:34:d4: b5:a6:c2:95:8c:cd:52:d1:7b:22:75:d6:f9:06:30: 77:f2:98:42:1c:bc:b8:ac:75:2c:b9:e3:70:5a:09: 29:1d:6e:0a:02:6e:db:b2:2e:ac:75:4f:98:22:b4: 6c:e8:80:7f:2d:f9:ae:8c:33:72:23:12:c8:8a:e0: 33:f5:f4:0d:ab:10:ee:02:41:fb:07:56:f9:84:1d: cd:6a:c3:bd:cf:de:57:d3:d8:d4:35:fa:ba:07:f5: 06:2c:93:b1:24:d1:6b:71:e8:0a:a9:5d:c3:38:b2: 2c:b0:78:42:a7:b6:fe:c8:01:ae:38:f2:f7:66:2a: 13:51:01:ab:3a:1b:75:9e:6b:77:4e:65:72:7a:1c: 13:70:a5:bc:e6:9f:a6:f2:96:ad:cf:f9:1c:3a:b0: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:58:2B:CA:83:2A:A8:45:E1:54:A2:49:53:0A:62:77:CD:1C:E1 X509v3 Authority Key Identifier: keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:93:58:02:37:d5:6e:13:0d:2c:03:fc:ed:87:3d:34:d4:32: bd:31:f9:16:08:07:73:26:f8:db:88:c8:87:03:ac:14:e3:5c: 44:d9:28:73:b1:70:37:c8:22:01:59:a7:86:cd:ec:24:d1:aa: c0:13:b3:d1:56:f9:42:79:1c:65:d2:8a:35:e4:16:e4:60:30: e2:1f:28:8f:a9:64:63:80:55:07:74:9d:e0:26:f4:9b:5b:33: 4c:2e:9e:bf:68:5e:56:c2:35:ad:13:89:58:91:a6:d1:0c:e0: ed:a3:e6:9c:82:97:f6:53:3e:fc:1a:69:86:bd:19:d7:20:e7: 41:0c:c9:08:85:c8:f5:c4:92:9b:eb:3f:b7:ae:d1:5a:53:78: f6:44:ee:4b:c1:cf:af:af:7f:7b:9f:44:86:23:44:e1:1d:74: 4c:0d:ae:5d:61:d5:20:9f:61:aa:6e:aa:6a:42:e3:e5:63:6c: 85:a6:31:94:71:08:1a:74:56:85:8e:39:74:b3:eb:1a:a0:85: 21:07:ec:24:7c:b3:dc:83:36:22:69:9d:0b:69:65:e6:43:08: ca:b3:73:05:7f:c1:f3:18:ff:a2:99:86:cf:25:24:00:a6:ab: c1:68:a1:0f:90:12:e0:31:0e:3b:f2:5c:ce:42:f6:eb:fb:f1: 9c:d7:be:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3OUMxMTAvBgNVBAUTKDc1MkY3QjQ4NTNDM0E5QzlGMDdGRDlEQUM1REI5NkFC N0VGMkRGREYwHhcNMjUwNDI1MDAzODU2WhcNMjUwNTAyMDAzODU2WjAYMRYwFAYD VQQDEw02ODBhZDlhMC1iNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1RAZMNMTGN3u+Aqo6ktGp9t6k/w6aJ44Y+HPAzYX23Qh2xax64sOQXekYOn TZmS9UNBRQIq98xUHhQto8kRf1bxYhdlPefCbqA4+7k2/DoQtJCk0goXIDzJQCMA 3oYpiRv3SzxXNNS1psKVjM1S0Xsiddb5BjB38phCHLy4rHUsueNwWgkpHW4KAm7b si6sdU+YIrRs6IB/LfmujDNyIxLIiuAz9fQNqxDuAkH7B1b5hB3NasO9z95X09jU Nfq6B/UGLJOxJNFrcegKqV3DOLIssHhCp7b+yAGuOPL3ZioTUQGrOht1nmt3TmVy ehwTcKW85p+m8patz/kcOrAEAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO4WCvK gyqoReFUoklTCmJ3zRzhMB8GA1UdIwQYMBaAFHUve0hTw6nJ8H/Z2sXblqt+8t/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5Qy9COUM5NThCODlG ODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFjbndmOW5heGR1V3EzN3kz OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTOTdTRlBEcWNud2Y5bmF4ZHVXcTM3eTM5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTc5Qy9COUM5NThCODlGODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFj bndmOW5heGR1V3EzN3kzOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXk1gCN9VuEw0sA/zthz001DK9MfkWCAdzJvjbiMiHA6wU41xE2Shz sXA3yCIBWaeGzewk0arAE7PRVvlCeRxl0oo15BbkYDDiHyiPqWRjgFUHdJ3gJvSb WzNMLp6/aF5WwjWtE4lYkabRDODto+acgpf2Uz78GmmGvRnXIOdBDMkIhcj1xJKb 6z+3rtFaU3j2RO5Lwc+vr397n0SGI0ThHXRMDa5dYdUgn2GqbqpqQuPlY2yFpjGU cQgadFaFjjl0s+saoIUhB+wkfLPcgzYiaZ0LaWXmQwjKs3MFf8HzGP+imYbPJSQA pqvBaKEPkBLgMQ478lzOQvbr+/Gc177M -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:36 2025 by rpki-client