$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json) Hash identifier: AK1Iq+llmkbhUTr/auGmp+h8mQYb7JSrGF6S/sMQonQ= Subject key identifier: 3A:2D:A1:A2:84:9E:29:FC:D8:BF:61:6C:12:27:A0:F0:67:BB:07:AC Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Certificate serial: 0F28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft Manifest number: 1907 Signing time: Thu 24 Apr 2025 17:36:40 +0000 Manifest this update: Thu 24 Apr 2025 17:36:39 +0000 Manifest next update: Thu 01 May 2025 17:36:39 +0000 Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: YLB0o7hWe8RMz/OCouGi2v1TZCbPRBYf37Em2IYCmAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Validity Not Before: Apr 24 17:36:39 2025 GMT Not After : May 1 17:36:39 2025 GMT Subject: CN=680a76a8-fb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:de:03:74:fa:94:3e:bf:f8:76:3c:3c:28: b2:08:83:bf:bf:45:42:33:51:fc:1d:c6:19:cc:8b: fe:9e:88:c3:e6:27:47:c1:8f:8b:13:78:1c:a4:d6: 05:2b:59:7c:cc:f0:a5:e7:e8:04:92:8b:cc:4a:58: 9a:de:03:26:0e:91:9b:2c:72:b7:41:50:9e:52:c3: be:b2:74:6b:bf:f4:06:4c:3c:bc:db:68:44:60:a0: 3e:65:76:02:b5:48:29:27:f7:ce:78:e4:37:18:c3: 3d:60:d2:a2:2c:dd:66:82:62:9b:86:74:35:fd:04: 94:a3:f0:3f:90:cb:19:0f:e6:5c:4b:c3:dd:be:46: 16:38:7d:e7:ce:42:c9:ed:b6:51:9b:dc:de:10:f1: 37:32:b1:8a:34:9a:4e:62:6d:b7:3b:89:84:14:07: 47:83:9a:de:e4:a9:9e:3d:34:51:ed:82:a3:06:74: 3b:89:20:95:2c:c0:64:87:30:19:10:86:4a:88:1e: 0e:8a:44:d9:2c:2c:45:1c:ec:49:83:3c:a1:c3:0c: f8:6e:0b:65:c7:b7:55:3e:96:1a:b4:ee:ef:18:e3: 7e:61:ad:b3:7b:d4:33:0a:4a:03:f5:db:4a:e3:f3: 39:ad:17:07:fe:d7:9d:a6:7b:c5:b3:bb:61:21:5b: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2D:A1:A2:84:9E:29:FC:D8:BF:61:6C:12:27:A0:F0:67:BB:07:AC X509v3 Authority Key Identifier: keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e8:07:71:17:ab:86:04:3d:5f:40:0f:7c:2f:a7:79:af:36: ab:45:8c:0b:92:66:bc:f5:31:5e:26:95:9a:ca:51:a1:38:3d: 79:80:90:d5:84:34:73:6d:a2:f9:0d:05:c7:fe:65:01:63:ca: e7:c3:19:83:f9:af:d4:cf:a9:5e:b4:97:40:0b:e8:64:fe:bb: 63:7a:20:e6:7d:65:d9:08:27:bf:95:e7:0a:b3:8d:e2:8e:c2: 06:c3:66:35:3d:ad:c0:67:00:ef:ca:81:90:b3:de:18:33:db: 9f:f8:53:74:e5:41:5e:95:ad:cc:73:ee:9e:ff:cf:2b:fd:75: 6d:58:63:c7:0d:18:47:02:11:b1:24:5d:73:94:1e:01:fb:8e: ef:1e:7a:4e:5f:4f:7a:9e:67:ce:dc:72:db:40:bc:e0:3f:99: 87:18:6e:4e:84:3c:51:d4:e4:b4:c8:b4:e1:ee:5e:eb:2a:53: f2:c4:ab:46:81:fb:8f:40:12:40:b7:30:45:9d:51:8b:89:c9: f8:3d:3e:e1:c9:c4:31:af:cb:8c:c8:e6:21:0e:f3:e6:a2:62: 94:62:16:3d:4b:8f:b2:d6:c0:d2:6e:9a:1c:fe:ef:17:91:d1: c5:fd:44:f9:e8:78:9a:33:69:c7:1f:00:2b:1b:18:f2:10:e6: 06:f8:4b:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0 RjgyMDE3QzkwHhcNMjUwNDI0MTczNjM5WhcNMjUwNTAxMTczNjM5WjAYMRYwFAYD VQQDEw02ODBhNzZhOC1mYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4i/eA3T6lD6/+HY8PCiyCIO/v0VCM1H8HcYZzIv+nojD5idHwY+LE3gcpNYF K1l8zPCl5+gEkovMSlia3gMmDpGbLHK3QVCeUsO+snRrv/QGTDy822hEYKA+ZXYC tUgpJ/fOeOQ3GMM9YNKiLN1mgmKbhnQ1/QSUo/A/kMsZD+ZcS8PdvkYWOH3nzkLJ 7bZRm9zeEPE3MrGKNJpOYm23O4mEFAdHg5re5KmePTRR7YKjBnQ7iSCVLMBkhzAZ EIZKiB4OikTZLCxFHOxJgzyhwwz4bgtlx7dVPpYatO7vGON+Ya2ze9QzCkoD9dtK 4/M5rRcH/tedpnvFs7thIVtQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDotoaKE nin82L9hbBInoPBnuwesMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB46AdxF6uGBD1fQA98L6d5rzarRYwLkma89TFeJpWaylGhOD15gJDV hDRzbaL5DQXH/mUBY8rnwxmD+a/Uz6letJdAC+hk/rtjeiDmfWXZCCe/lecKs43i jsIGw2Y1Pa3AZwDvyoGQs94YM9uf+FN05UFela3Mc+6e/88r/XVtWGPHDRhHAhGx JF1zlB4B+47vHnpOX096nmfO3HLbQLzgP5mHGG5OhDxR1OS0yLTh7l7rKlPyxKtG gfuPQBJAtzBFnVGLicn4PT7hycQxr8uMyOYhDvPmomKUYhY9S4+y1sDSbpoc/u8X kdHF/UT56HiaM2nHHwArGxjyEOYG+EvE -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:09 2025 by rpki-client