$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: wdAgv+vp5j3Coskj6CML7t4FlFse1dHsZZW6q9/E6AY= Subject key identifier: 7C:6B:63:E8:74:24:16:C9:28:89:86:C7:6A:0E:A4:A2:F8:BE:AF:9D Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 0375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 0369 Signing time: Fri 25 Apr 2025 00:44:26 +0000 Manifest this update: Fri 25 Apr 2025 00:44:26 +0000 Manifest next update: Fri 02 May 2025 00:44:26 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: eCpy5ZHFX/pd0yg7gzcKl4IXL07AqegyW4A/Yt00k3s=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Apr 25 00:44:26 2025 GMT Not After : May 2 00:44:26 2025 GMT Subject: CN=680adaea-36af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:71:87:81:cf:b9:60:2f:65:38:71:1f:e6: 85:1d:43:79:e5:12:6b:8b:68:e7:33:f3:d6:47:58: 91:95:31:30:78:f8:41:e3:4a:32:c7:fe:8a:fd:b7: 77:0d:ba:62:02:e0:0e:fe:54:8f:22:0c:76:68:1a: 90:40:0d:5f:ef:d2:33:c2:ad:9d:98:46:ae:fd:35: 1c:ef:25:7a:da:f7:5f:46:a1:f6:c3:2b:5c:eb:c6: 44:1e:42:1c:15:02:0e:8b:8b:98:42:55:37:bf:95: e4:5f:f9:a3:e7:b9:a3:d3:55:dc:07:f1:f5:3e:89: fd:b2:d2:70:d6:67:82:ed:57:e2:4d:33:fa:10:e3: 61:82:43:9f:8c:3a:cb:df:13:76:9e:6c:e9:9a:dd: 61:ea:81:be:22:f8:4d:f3:20:f0:50:40:9f:b9:97: 9d:bb:0a:86:9b:1f:d6:45:14:dc:e4:d0:63:47:6c: 4d:af:ef:ca:2d:f2:05:5a:d3:23:27:c5:29:e7:ee: 4e:77:37:e6:9f:c2:02:70:79:e9:06:e8:4b:3e:43: d5:ea:8c:0e:71:cb:c2:e0:bc:4c:8d:d1:d3:f8:af: 00:04:94:0f:16:fa:73:84:0f:33:32:5c:d7:f1:d2: d8:ea:57:c1:11:e1:ba:16:c3:c4:16:ba:f0:b8:f9: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6B:63:E8:74:24:16:C9:28:89:86:C7:6A:0E:A4:A2:F8:BE:AF:9D X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:84:56:67:ef:37:97:03:5d:f5:b8:26:b1:38:c7:5a:ca:2f: 8d:a6:35:bd:e1:2e:e0:09:20:98:c9:ed:b6:fe:97:9d:8a:c5: 9f:c0:b6:fe:cf:c6:33:db:76:d7:c2:8c:ae:52:6b:2e:13:e3: ed:f6:8f:06:96:3d:09:79:ac:15:65:ef:03:b4:e8:32:1f:d8: 26:53:52:1f:6a:0b:de:af:88:6f:36:b9:77:19:a5:0b:37:2a: 33:c3:13:a9:4a:a5:10:e2:e2:e4:cd:45:7a:59:78:d9:f4:7b: f6:17:1e:9c:04:1d:c9:1c:c2:95:82:bc:e4:3b:ae:63:4a:3a: 1d:01:c8:c2:0c:d6:60:9b:83:a3:51:ac:23:79:fc:1a:4b:23: 75:38:f7:e1:58:03:9c:2c:39:ae:c5:19:71:79:a8:97:5a:33: e9:e9:92:ef:b1:f2:e3:d0:15:3e:aa:0a:ac:e4:fa:87:62:ae: 44:90:42:83:c9:bb:61:1d:64:dd:e6:e9:ca:43:ec:aa:72:e1: 45:93:ea:a3:f1:5e:49:97:44:8f:a1:ae:d1:10:ad:8e:03:bc: d3:39:96:37:d3:54:d3:dc:03:d1:54:a2:f7:ae:51:b8:ab:1d: 93:40:47:51:d4:66:42:5c:44:a9:e5:d2:6b:ec:99:5a:ec:be: d5:25:fc:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwNDI1MDA0NDI2WhcNMjUwNTAyMDA0NDI2WjAYMRYwFAYD VQQDEw02ODBhZGFlYS0zNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5xxh4HPuWAvZThxH+aFHUN55RJri2jnM/PWR1iRlTEwePhB40oyx/6K/bd3 DbpiAuAO/lSPIgx2aBqQQA1f79Izwq2dmEau/TUc7yV62vdfRqH2wytc68ZEHkIc FQIOi4uYQlU3v5XkX/mj57mj01XcB/H1Pon9stJw1meC7VfiTTP6EONhgkOfjDrL 3xN2nmzpmt1h6oG+IvhN8yDwUECfuZeduwqGmx/WRRTc5NBjR2xNr+/KLfIFWtMj J8Up5+5Odzfmn8ICcHnpBuhLPkPV6owOccvC4LxMjdHT+K8ABJQPFvpzhA8zMlzX 8dLY6lfBEeG6FsPEFrrwuPkknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxrY+h0 JBbJKImGx2oOpKL4vq+dMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEhFZn7zeXA131uCaxOMdayi+NpjW94S7gCSCYye22/pedisWfwLb+ z8Yz23bXwoyuUmsuE+Pt9o8Glj0JeawVZe8DtOgyH9gmU1Ifagver4hvNrl3GaUL NyozwxOpSqUQ4uLkzUV6WXjZ9Hv2Fx6cBB3JHMKVgrzkO65jSjodAcjCDNZgm4Oj UawjefwaSyN1OPfhWAOcLDmuxRlxeaiXWjPp6ZLvsfLj0BU+qgqs5PqHYq5EkEKD ybthHWTd5unKQ+yqcuFFk+qj8V5Jl0SPoa7REK2OA7zTOZY301TT3APRVKL3rlG4 qx2TQEdR1GZCXESp5dJr7Jla7L7VJfyk -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:13 2025 by rpki-client