$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: s16r9e9zNBnWZ7x9bCL5IhFv4Ofpr8PlIrfM8Bm47UA= Subject key identifier: 69:88:97:A7:B9:3E:07:80:D5:E4:03:08:0D:D4:F1:41:51:2D:3D:82 Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: F3 Signing time: Fri 25 Apr 2025 04:21:59 +0000 Manifest this update: Fri 25 Apr 2025 04:21:59 +0000 Manifest next update: Fri 02 May 2025 04:21:58 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: lM3CU3eU+ekexGp84Rz9dwQRVK82/MF0/aQPw+p+rws=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Validity Not Before: Apr 25 04:21:59 2025 GMT Not After : May 2 04:21:58 2025 GMT Subject: CN=680b0de7-301f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:df:b0:0b:08:56:20:d8:2d:c1:ae:f3:97: eb:61:4d:97:41:9d:90:b2:46:66:a5:c9:92:75:b9: b5:1f:c1:dd:6a:c5:97:c9:d8:25:21:85:60:07:30: d0:13:17:32:2a:fe:02:55:3c:ae:5d:bf:04:b4:ba: 4b:9e:60:5a:19:dc:3a:a4:32:4e:a9:52:82:a8:0f: ef:36:5d:39:9b:9d:5c:39:fd:df:37:e5:b9:d7:81: 23:6c:55:ab:e4:c0:b9:33:24:cd:11:19:8f:26:60: fe:59:67:96:3f:87:b9:5d:99:3d:be:af:de:e0:03: 01:26:da:21:68:49:0e:9a:50:85:a5:10:a6:4e:a3: b5:ae:60:37:39:1e:27:42:91:69:19:46:e7:23:5f: 31:b8:eb:1e:46:62:df:21:2b:57:a6:eb:b5:b6:1b: de:12:55:33:8d:97:6c:40:d5:d8:e5:aa:fb:44:0a: 05:48:a1:86:0b:9c:cd:c9:d1:02:64:cd:00:21:2e: de:f1:05:43:75:3e:1e:17:39:3c:18:28:fa:39:1f: 72:3a:07:05:59:7d:c8:c6:45:03:a5:62:65:8c:1d: 3b:b7:ce:d4:f2:09:47:1d:4c:32:1d:87:c6:c1:17: 2a:e1:b2:f6:d9:2e:6d:dd:f0:e7:a1:ea:85:10:69: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:97:A7:B9:3E:07:80:D5:E4:03:08:0D:D4:F1:41:51:2D:3D:82 X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d5:f4:7e:be:dc:13:07:1b:9f:aa:5f:c5:bd:c7:36:39:35: da:b5:94:9e:e4:13:0b:57:0e:76:db:a4:df:4f:28:2c:97:55: c6:f2:1b:d2:df:71:f6:bd:af:8b:1e:e5:6c:2e:96:6c:4b:6a: c8:4b:71:2b:07:e4:74:49:85:4a:ed:2e:d1:74:07:7a:05:b8: 30:df:16:5c:6e:1f:38:59:78:98:fe:f9:04:86:0f:84:21:f7: fb:cc:61:f9:4b:65:b3:00:5f:fb:e9:03:08:85:12:c1:0a:a7: e8:d2:ff:56:a7:c5:30:67:45:a2:c9:6c:0b:ef:be:7b:28:53: 9c:8e:b4:39:42:62:27:c9:5f:88:07:53:8f:2a:45:ae:a2:55: 71:2b:c7:36:13:86:ab:a4:ab:8e:03:b6:7c:e1:97:d0:e7:d9: 8e:d2:82:3d:af:ff:ce:2e:65:49:1f:51:7e:cd:38:e0:45:37: 18:ff:83:84:1e:98:ab:87:9f:d6:27:6a:bc:43:25:1d:bd:ed: dc:a6:4c:93:fc:50:f5:02:d7:08:80:f5:ac:2f:e8:ca:34:ad: d9:d9:45:8f:5c:6a:89:59:d7:15:01:ce:31:06:03:90:05:7d: 19:51:63:19:f9:d8:74:07:9d:bb:7c:bf:01:fe:34:d6:c3:34: d9:b3:4c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1 RTZEQjJCRDEwHhcNMjUwNDI1MDQyMTU5WhcNMjUwNTAyMDQyMTU4WjAYMRYwFAYD VQQDEw02ODBiMGRlNy0zMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdTfsAsIViDYLcGu85frYU2XQZ2QskZmpcmSdbm1H8HdasWXydglIYVgBzDQ ExcyKv4CVTyuXb8EtLpLnmBaGdw6pDJOqVKCqA/vNl05m51cOf3fN+W514EjbFWr 5MC5MyTNERmPJmD+WWeWP4e5XZk9vq/e4AMBJtohaEkOmlCFpRCmTqO1rmA3OR4n QpFpGUbnI18xuOseRmLfIStXpuu1thveElUzjZdsQNXY5ar7RAoFSKGGC5zNydEC ZM0AIS7e8QVDdT4eFzk8GCj6OR9yOgcFWX3IxkUDpWJljB07t87U8glHHUwyHYfG wRcq4bL22S5t3fDnoeqFEGn8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmIl6e5 PgeA1eQDCA3U8UFRLT2CMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1 QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA1fR+vtwTBxufql/Fvcc2OTXatZSe5BMLVw5226TfTygsl1XG8hvS 33H2va+LHuVsLpZsS2rIS3ErB+R0SYVK7S7RdAd6Bbgw3xZcbh84WXiY/vkEhg+E Iff7zGH5S2WzAF/76QMIhRLBCqfo0v9Wp8UwZ0WiyWwL7757KFOcjrQ5QmInyV+I B1OPKkWuolVxK8c2E4arpKuOA7Z84ZfQ59mO0oI9r//OLmVJH1F+zTjgRTcY/4OE Hpirh5/WJ2q8QyUdve3cpkyT/FD1AtcIgPWsL+jKNK3Z2UWPXGqJWdcVAc4xBgOQ BX0ZUWMZ+dh0B527fL8B/jTWwzTZs0x7 -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:42 2025 by rpki-client