$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft File: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json) Hash identifier: dIxlD2cclc69F/75O6is1zypDzvgQ+Rk3D/EI2/iMPo= Subject key identifier: 14:99:39:3F:34:D6:E6:AE:A9:84:4A:8D:42:77:B9:FF:EA:AA:8C:77 Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft Manifest number: 0110 Signing time: Fri 25 Apr 2025 03:59:08 +0000 Manifest this update: Fri 25 Apr 2025 03:59:08 +0000 Manifest next update: Fri 02 May 2025 03:59:08 +0000 Files and hashes: 1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: 6hA7t3NPQtwAtGu0mrGfF691d2atH6ZrvjiBrabVEKs=) 2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: V4QPgu3zjTh1ZjDu4R2dcCzkveFmbrdSQ5O0sl9cGCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Validity Not Before: Apr 25 03:59:08 2025 GMT Not After : May 2 03:59:08 2025 GMT Subject: CN=680b088c-1754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:56:f2:91:10:3c:ab:ef:86:db:b0:4b:2e: b7:e9:c3:cb:3f:be:3f:92:dc:e8:3f:4a:0e:c0:ec: 9a:d6:01:a1:e1:71:ad:72:62:80:88:42:ac:46:a9: 56:37:46:25:a8:f6:b0:b3:de:f4:82:fc:f8:f4:bc: 46:df:e5:66:a8:7a:55:ee:bf:f1:ce:b7:97:68:02: a9:dc:10:0f:f7:d7:2e:69:bf:35:02:cf:92:92:ef: 89:82:28:14:92:da:c9:55:86:98:c6:06:86:61:39: 97:bf:c7:ed:d8:f0:85:99:24:67:fa:8d:c8:06:35: a4:7a:d2:65:ee:a9:22:23:af:27:bb:39:2a:3f:1c: cf:89:7a:35:2f:8f:8f:43:ac:c9:7c:cf:a5:f7:41: cf:06:1d:70:e6:ea:10:b3:c2:a7:5b:1e:f3:43:22: 1a:df:c7:96:fb:6e:00:36:db:c8:4c:e0:b0:cc:1f: 1a:cb:0b:e8:3a:9f:63:af:43:9f:55:05:e7:70:a1: d3:39:7d:85:ee:8a:98:a6:97:ac:3f:21:13:08:83: e2:37:69:01:a2:93:24:f0:b3:e4:2a:46:10:9d:8c: 17:b6:3f:ff:e3:01:d0:de:0c:e0:db:71:90:8c:1d: e5:cd:f8:fb:64:78:8f:37:e9:5c:7c:47:fb:0d:65: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:39:3F:34:D6:E6:AE:A9:84:4A:8D:42:77:B9:FF:EA:AA:8C:77 X509v3 Authority Key Identifier: keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0b:ff:ff:56:fd:d3:2c:67:1c:76:95:bc:61:83:4d:3b:ad: 3e:ab:9d:9c:f6:19:22:67:1f:b9:8e:a4:b7:d5:0a:6b:5f:1a: ca:a8:9d:c0:fa:ce:08:40:a2:b6:7c:75:f8:c1:c4:18:9d:10: e3:b8:69:ef:cf:c7:4d:3a:ee:fb:35:ab:16:43:41:17:ad:65: 54:16:89:1d:f3:04:d9:4e:93:1c:2c:5c:61:ad:a6:f2:16:33: 48:01:09:59:09:3b:13:b2:ba:1d:91:49:56:7e:ec:c3:7a:26: d5:26:fe:c9:f1:a9:da:b1:03:b0:33:ae:c4:23:2b:0b:25:33: ad:36:9c:b9:12:25:22:c5:19:90:2d:3e:03:f6:17:ea:da:24: 8e:69:c9:24:01:a4:39:ee:c6:89:b2:14:7d:ff:1c:61:c2:d4: 8b:90:62:02:41:7f:e0:0f:e1:7d:1d:42:d9:6e:95:e1:03:ab: f0:16:14:86:dc:fe:2d:14:47:68:b2:58:dc:50:b7:91:fe:1e: 1e:8c:70:c2:79:7d:85:c2:a2:c4:23:e0:c7:86:03:97:5a:54: aa:3c:fa:54:8e:3b:1a:6a:5e:4a:54:5e:1c:54:f9:4a:f1:70: 3e:25:a9:8a:13:a4:8a:f6:dc:e6:c8:2b:c2:8d:c8:13:46:ff: f0:4c:30:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwRDIxMTAvBgNVBAUTKDc0MjI3ODlFOEVEMEJGQzIwQzM0RDdCRjY4RjUxOUVF NjVFRkY0QkMwHhcNMjUwNDI1MDM1OTA4WhcNMjUwNTAyMDM1OTA4WjAYMRYwFAYD VQQDEw02ODBiMDg4Yy0xNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEdW8pEQPKvvhtuwSy636cPLP74/ktzoP0oOwOya1gGh4XGtcmKAiEKsRqlW N0YlqPaws970gvz49LxG3+VmqHpV7r/xzreXaAKp3BAP99cuab81As+Sku+JgigU ktrJVYaYxgaGYTmXv8ft2PCFmSRn+o3IBjWketJl7qkiI68nuzkqPxzPiXo1L4+P Q6zJfM+l90HPBh1w5uoQs8KnWx7zQyIa38eW+24ANtvITOCwzB8aywvoOp9jr0Of VQXncKHTOX2F7oqYppesPyETCIPiN2kBopMk8LPkKkYQnYwXtj//4wHQ3gzg23GQ jB3lzfj7ZHiPN+lcfEf7DWVkowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSZOT80 1uauqYRKjUJ3uf/qqox3MB8GA1UdIwQYMBaAFHQieJ6O0L/CDDTXv2j1Ge5l7/S8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBEMi84OEY5NzlBMjgy Q0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4SU1OTmVfYVBVWjdtWHY5 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDSjRubzdRdjhJTU5OZV9hUFVaN21YdjlMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBEMi84OEY5NzlBMjgyQ0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4 SU1OTmVfYVBVWjdtWHY5THcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxC///Vv3TLGccdpW8YYNNO60+q52c9hkiZx+5jqS31QprXxrKqJ3A +s4IQKK2fHX4wcQYnRDjuGnvz8dNOu77NasWQ0EXrWVUFokd8wTZTpMcLFxhraby FjNIAQlZCTsTsrodkUlWfuzDeibVJv7J8anasQOwM67EIysLJTOtNpy5EiUixRmQ LT4D9hfq2iSOackkAaQ57saJshR9/xxhwtSLkGICQX/gD+F9HULZbpXhA6vwFhSG 3P4tFEdosljcULeR/h4ejHDCeX2FwqLEI+DHhgOXWlSqPPpUjjsaal5KVF4cVPlK 8XA+JamKE6SK9tzmyCvCjcgTRv/wTDCt -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:38 2025 by rpki-client