$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json) Hash identifier: Ql98jkX8B8gk0lLMF0BOVrDfNr1zwo1tThdYoClerzw= Subject key identifier: 19:78:1D:BD:A5:5A:D8:E2:C9:95:FC:90:0A:38:A6:A6:F9:DD:59:78 Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Certificate serial: 076B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft Manifest number: 075F Signing time: Thu 24 Apr 2025 21:23:47 +0000 Manifest this update: Thu 24 Apr 2025 21:23:47 +0000 Manifest next update: Thu 01 May 2025 21:23:47 +0000 Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: 64MqVy0BOoxZjWG7aPFYh0MzzfbmrSCP1Y1CPcPtnX8=) 2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=) 3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Validity Not Before: Apr 24 21:23:47 2025 GMT Not After : May 1 21:23:47 2025 GMT Subject: CN=680aabe3-605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:40:f9:e5:61:7b:85:c5:b4:dc:fc:a1:d8: 6e:1b:5f:5c:2f:6d:46:b1:29:4c:74:3d:48:71:38: 65:9d:60:ad:dc:9f:ed:a9:09:ca:a2:49:74:02:d2: 0b:b0:5c:38:9a:e1:28:f6:95:1b:ed:c5:68:95:69: 4b:fc:16:24:e5:4c:62:8b:10:3f:74:42:07:3d:09: 28:2a:71:f7:83:26:13:31:73:e6:50:39:44:08:a4: 71:f0:58:c1:3e:bf:4e:bf:f0:8b:ed:63:ce:58:81: 8b:f5:23:29:4e:2b:df:1b:7e:7a:07:c5:43:1a:4e: d1:65:3f:7d:0c:8b:af:32:08:44:f3:c9:52:8b:a6: 6f:b6:89:10:c9:26:3e:46:80:66:3c:2a:83:9e:b2: c0:8e:41:a2:bc:a0:80:7f:2d:66:ee:c9:f2:1f:e8: 19:d6:f1:78:49:30:5b:d5:d8:67:a6:3a:c5:7d:7a: c3:0c:4f:06:a2:75:b8:3f:0b:fb:22:df:ed:01:92: 53:a7:71:5d:21:b5:cc:34:30:d4:39:ee:72:2c:a6: 14:42:2d:01:f0:a9:c1:73:27:af:7e:b8:3d:e9:20: 5a:0c:cf:2a:f9:4b:4a:65:83:b9:10:2c:18:5f:71: 13:2f:16:e8:92:fd:06:29:e5:ff:7d:44:ff:1a:1e: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:78:1D:BD:A5:5A:D8:E2:C9:95:FC:90:0A:38:A6:A6:F9:DD:59:78 X509v3 Authority Key Identifier: keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:6b:b2:a4:6a:f3:0b:49:1a:53:87:a8:26:62:a6:69:af: 29:14:b3:b0:71:5b:96:cd:d1:54:80:1b:51:3b:69:ed:b3:a8: 6e:74:86:68:66:5a:19:f9:aa:c0:42:7c:1e:4c:f1:31:88:85: f5:a5:1c:77:0f:32:26:8c:2d:b1:24:f8:4e:ed:c2:5b:37:70: b1:b5:a5:56:d4:b7:a9:ef:8d:54:87:bb:6f:84:b9:89:5b:0b: eb:bf:46:02:13:e4:0f:de:a0:3b:1e:89:fc:f2:29:1b:07:6a: 95:e4:67:50:d1:2d:a0:c8:2d:43:28:01:d3:71:56:9d:2b:90: 7f:bd:9a:ae:f2:32:2f:35:9b:3b:6c:59:05:23:ee:82:16:be: 6f:d2:d4:ec:76:f6:83:49:81:b7:be:75:5e:c4:90:47:30:5d: 61:83:d8:01:1e:4a:6f:33:18:a6:05:f6:77:8d:9f:b8:e4:fa: a0:f9:4d:b1:58:30:5c:d6:97:be:b1:dc:51:02:be:5e:e3:33: cb:1d:28:36:26:b3:4a:88:da:a4:53:eb:ae:e0:2c:c3:10:19: 58:3a:2f:09:e0:13:4a:6d:db:9c:a2:77:99:86:e9:5c:7d:6a: 82:5f:f6:9d:e0:82:26:ff:3c:c0:0e:7a:79:72:b0:5a:08:a8: e1:bb:c6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB RjlCMUQzNTgwHhcNMjUwNDI0MjEyMzQ3WhcNMjUwNTAxMjEyMzQ3WjAYMRYwFAYD VQQDEw02ODBhYWJlMy02MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d1A+eVhe4XFtNz8odhuG19cL21GsSlMdD1IcThlnWCt3J/tqQnKokl0AtIL sFw4muEo9pUb7cVolWlL/BYk5UxiixA/dEIHPQkoKnH3gyYTMXPmUDlECKRx8FjB Pr9Ov/CL7WPOWIGL9SMpTivfG356B8VDGk7RZT99DIuvMghE88lSi6ZvtokQySY+ RoBmPCqDnrLAjkGivKCAfy1m7snyH+gZ1vF4STBb1dhnpjrFfXrDDE8GonW4Pwv7 It/tAZJTp3FdIbXMNDDUOe5yLKYUQi0B8KnBcyevfrg96SBaDM8q+UtKZYO5ECwY X3ETLxbokv0GKeX/fUT/Gh4C2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl4Hb2l WtjiyZX8kAo4pqb53Vl4MB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2 aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjP2uypGrzC0kaU4eoJmKmaa8pFLOwcVuWzdFUgBtRO2nts6hudIZo ZloZ+arAQnweTPExiIX1pRx3DzImjC2xJPhO7cJbN3CxtaVW1Lep741Uh7tvhLmJ Wwvrv0YCE+QP3qA7Hon88ikbB2qV5GdQ0S2gyC1DKAHTcVadK5B/vZqu8jIvNZs7 bFkFI+6CFr5v0tTsdvaDSYG3vnVexJBHMF1hg9gBHkpvMximBfZ3jZ+45Pqg+U2x WDBc1pe+sdxRAr5e4zPLHSg2JrNKiNqkU+uu4CzDEBlYOi8J4BNKbduconeZhulc fWqCX/ad4IIm/zzADnp5crBaCKjhu8b5 -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:37 2025 by rpki-client