$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft File: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json) Hash identifier: Re/x76Dm83S+HIY7RghCHT/NxzK2oZ3Ui4G8nBng/1M= Subject key identifier: CC:90:D1:3B:16:08:5B:74:C6:74:B1:B6:4E:F8:6D:76:D0:61:B6:AF Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft Manifest number: 0C67 Signing time: Thu 24 Apr 2025 19:09:12 +0000 Manifest this update: Thu 24 Apr 2025 19:09:12 +0000 Manifest next update: Thu 01 May 2025 19:09:12 +0000 Files and hashes: 1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: yT0dOIGgfdSZPNJwL3LgLOJkMxNQYaaX4RFlwmnp17U=) 2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Validity Not Before: Apr 24 19:09:12 2025 GMT Not After : May 1 19:09:12 2025 GMT Subject: CN=680a8c58-baae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:18:f0:78:fd:66:9c:1b:61:08:90:0c:d4: 3e:8a:da:73:9a:86:f5:1a:a1:14:7f:7a:56:7f:8f: 6b:0d:b9:b1:0d:71:8f:af:32:6b:d5:42:4f:0c:07: 83:16:5d:c5:5c:a9:a7:59:2a:2a:21:71:94:07:9a: c8:c9:ba:54:1f:3a:b6:d8:a9:34:f5:ff:0d:d5:da: 39:53:b9:a7:a6:44:5b:1f:67:a4:2f:aa:f0:03:4a: 96:e0:61:53:78:26:0d:92:fa:7a:3b:69:47:0d:0f: e7:f8:4f:06:20:73:2c:ae:c1:29:c6:40:ad:64:55: a7:71:fd:8b:af:e0:25:01:39:fb:fc:39:17:83:d5: e8:92:e7:7c:41:b5:74:1b:f5:4b:74:c5:67:36:be: d4:3a:a4:50:5e:ab:32:74:03:3d:27:2a:e8:d1:81: 2a:6d:d0:bf:1d:d5:90:ea:c3:56:9a:1a:4f:d5:76: f3:09:18:21:95:c7:98:d5:4f:67:bd:99:36:d9:44: 36:f5:23:5f:70:fa:cc:7c:a0:94:b4:a4:b1:23:9f: 10:f3:a4:32:79:99:01:cd:56:93:c3:58:87:0f:60: c6:ec:8d:25:23:ab:4a:5b:68:ff:e0:eb:fb:00:7b: 81:d9:20:f3:6e:1e:af:ff:c7:10:e7:d8:9e:ab:4f: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:D1:3B:16:08:5B:74:C6:74:B1:B6:4E:F8:6D:76:D0:61:B6:AF X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:73:36:3c:a7:d1:55:40:7b:fb:6e:8c:7a:3f:ca:66:76:e0: 20:7c:c4:ff:7c:72:c1:95:23:bb:ca:9b:13:74:94:b7:d5:af: 2a:2e:e0:85:0a:f1:b4:36:95:70:b5:bd:08:f2:80:7c:b7:f3: ad:82:e1:d2:ba:e5:e8:49:4a:92:ed:e3:7b:3a:cf:0c:34:b2: 75:2b:96:31:fb:f4:7d:d0:22:5a:01:1e:43:8c:0e:bb:60:f0: 7a:19:04:94:93:29:b3:bc:2d:4a:b7:79:c1:94:a8:42:03:3a: 89:b1:f6:03:11:ae:57:f0:60:b2:6f:42:b3:68:31:ad:a5:92: 64:a9:57:6f:3b:24:c7:7d:f6:75:2b:42:3d:d2:80:45:f4:aa: c9:a9:6c:9a:3b:53:f5:22:78:89:52:d9:1d:2b:98:1c:77:be: 3d:0e:de:5e:9c:e0:f6:36:eb:18:30:9e:b0:f9:5a:a8:86:b7: c1:a3:dc:fc:69:9b:e2:3e:ce:0a:de:9e:bf:8f:d8:e8:f4:24: b6:75:6d:c0:9e:80:fe:bc:7d:b4:bb:71:51:93:5f:75:e4:24: 76:37:82:7c:6e:eb:0b:f4:38:64:cc:9a:d0:93:81:3e:f4:b1: 8e:67:86:77:2b:7a:a9:18:1f:24:e5:a0:3d:39:e6:57:06:3a: 25:72:12:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUwNDI0MTkwOTEyWhcNMjUwNTAxMTkwOTEyWjAYMRYwFAYD VQQDEw02ODBhOGM1OC1iYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0coY8Hj9ZpwbYQiQDNQ+itpzmob1GqEUf3pWf49rDbmxDXGPrzJr1UJPDAeD Fl3FXKmnWSoqIXGUB5rIybpUHzq22Kk09f8N1do5U7mnpkRbH2ekL6rwA0qW4GFT eCYNkvp6O2lHDQ/n+E8GIHMsrsEpxkCtZFWncf2Lr+AlATn7/DkXg9Xokud8QbV0 G/VLdMVnNr7UOqRQXqsydAM9Jyro0YEqbdC/HdWQ6sNWmhpP1XbzCRghlceY1U9n vZk22UQ29SNfcPrMfKCUtKSxI58Q86QyeZkBzVaTw1iHD2DG7I0lI6tKW2j/4Ov7 AHuB2SDzbh6v/8cQ59ieq0+HgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyQ0TsW CFt0xnSxtk74bXbQYbavMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4 X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8czY8p9FVQHv7box6P8pmduAgfMT/fHLBlSO7ypsTdJS31a8qLuCF CvG0NpVwtb0I8oB8t/OtguHSuuXoSUqS7eN7Os8MNLJ1K5Yx+/R90CJaAR5DjA67 YPB6GQSUkymzvC1Kt3nBlKhCAzqJsfYDEa5X8GCyb0KzaDGtpZJkqVdvOyTHffZ1 K0I90oBF9KrJqWyaO1P1IniJUtkdK5gcd749Dt5enOD2NusYMJ6w+VqohrfBo9z8 aZviPs4K3p6/j9jo9CS2dW3AnoD+vH20u3FRk1915CR2N4J8busL9DhkzJrQk4E+ 9LGOZ4Z3K3qpGB8k5aA9OeZXBjolchKg -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:47 2025 by rpki-client