$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: PvsLUf0nrT8ToppWa6XxpAmLrAFTDRSKAuhF/jgOtKY= Subject key identifier: 0F:05:22:B5:59:E5:74:43:2B:00:44:46:55:62:7B:4A:4E:00:4D:7D Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 078F Signing time: Thu 24 Apr 2025 21:08:21 +0000 Manifest this update: Thu 24 Apr 2025 21:08:21 +0000 Manifest next update: Thu 01 May 2025 21:08:21 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: /q1WZnV5fiYfWLjt9mP5vgiUdmF8/x2XhMvathuRR90=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: Apr 24 21:08:21 2025 GMT Not After : May 1 21:08:21 2025 GMT Subject: CN=680aa845-4296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:eb:43:25:dc:f7:eb:09:a6:5f:04:bd:dc: b6:2d:87:de:96:a2:6c:e8:ff:4b:74:12:a4:58:92: 01:79:12:55:b5:c2:73:e7:9e:1c:c1:a7:84:7e:19: 47:3a:b2:64:04:6d:1b:50:3d:81:a4:f0:72:f8:69: bd:b1:39:48:e0:ab:a9:42:f1:a8:08:b7:40:f8:82: f0:06:ea:f9:47:7d:e3:79:30:fd:07:9c:7c:03:c6: c6:81:3e:d3:e9:8e:4c:04:58:77:2c:a9:9c:c0:aa: 12:32:c6:f8:e1:22:c2:b6:56:2a:76:39:14:66:da: af:36:32:a2:04:44:2e:c4:46:1b:61:a2:95:f2:3c: 1d:18:8d:0a:b5:8d:02:ca:75:e2:ee:8b:0d:6a:34: 34:35:7a:a5:56:9d:62:cc:f1:f9:07:1b:87:a3:46: c8:c8:99:65:ba:89:83:30:79:c0:8b:07:e4:a1:a7: 47:7a:36:3a:21:34:2d:2e:08:a6:f7:a6:07:41:1e: c0:c7:0e:0d:ca:ba:2d:12:d4:06:0a:49:26:dd:5a: f0:b6:98:fc:5b:bd:9c:12:ad:27:44:18:1b:41:cd: 42:13:25:ab:bc:9d:23:09:15:a1:ad:e6:ae:5c:9b: 6a:3e:e1:7f:e3:47:32:03:f0:0e:75:17:0c:d4:fc: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:05:22:B5:59:E5:74:43:2B:00:44:46:55:62:7B:4A:4E:00:4D:7D X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f2:ec:d1:fc:51:b2:65:c1:df:d9:a8:07:17:6e:84:8d:8d: c6:df:0c:d4:59:71:60:99:13:59:55:60:97:6f:22:03:29:74: b2:dd:31:2d:3c:d0:2e:dd:90:3b:b7:28:1c:b9:81:fc:92:bb: a7:5c:34:39:5f:8d:36:73:c4:e3:2d:94:68:cf:c0:cf:df:a1: 43:90:f8:58:e3:3d:61:9e:2e:50:d1:1f:1b:6e:c4:4c:e3:81: a5:24:43:7d:4c:5d:f1:3c:ef:83:ca:d9:fb:b4:96:71:5e:9f: d1:9d:8b:ff:15:3f:54:91:4a:d2:51:53:cf:1a:df:56:f1:17: 28:3d:c7:10:f8:9a:ea:36:9c:15:dd:a4:2a:3d:a6:bb:f6:00: 41:50:53:ca:1f:91:7a:af:a7:67:ee:35:9d:61:e5:ea:88:99: 29:58:38:f2:a7:2a:b1:d4:fc:2e:0d:47:c7:5a:2c:e6:76:da: 5b:2a:cf:8b:aa:09:b2:69:72:49:9f:b1:79:76:18:f6:9b:a4: 9e:e0:e3:04:b3:d4:03:96:70:b7:7a:cb:4e:5d:dc:56:b9:c6: 7e:3d:01:2c:84:dc:94:8f:96:6c:01:56:9e:35:56:34:b2:65: b5:4b:50:45:34:9f:1c:06:f8:d4:5a:bd:f6:f6:48:fd:61:03: fc:8e:e0:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjUwNDI0MjEwODIxWhcNMjUwNTAxMjEwODIxWjAYMRYwFAYD VQQDEw02ODBhYTg0NS00Mjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKTrQyXc9+sJpl8Evdy2LYfelqJs6P9LdBKkWJIBeRJVtcJz554cwaeEfhlH OrJkBG0bUD2BpPBy+Gm9sTlI4KupQvGoCLdA+ILwBur5R33jeTD9B5x8A8bGgT7T 6Y5MBFh3LKmcwKoSMsb44SLCtlYqdjkUZtqvNjKiBEQuxEYbYaKV8jwdGI0KtY0C ynXi7osNajQ0NXqlVp1izPH5BxuHo0bIyJlluomDMHnAiwfkoadHejY6ITQtLgim 96YHQR7Axw4NyrotEtQGCkkm3Vrwtpj8W72cEq0nRBgbQc1CEyWrvJ0jCRWhreau XJtqPuF/40cyA/AOdRcM1PxzuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8FIrVZ 5XRDKwBERlVie0pOAE19MB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD8uzR/FGyZcHf2agHF26EjY3G3wzUWXFgmRNZVWCXbyIDKXSy3TEt PNAu3ZA7tygcuYH8krunXDQ5X402c8TjLZRoz8DP36FDkPhY4z1hni5Q0R8bbsRM 44GlJEN9TF3xPO+Dytn7tJZxXp/RnYv/FT9UkUrSUVPPGt9W8RcoPccQ+JrqNpwV 3aQqPaa79gBBUFPKH5F6r6dn7jWdYeXqiJkpWDjypyqx1PwuDUfHWizmdtpbKs+L qgmyaXJJn7F5dhj2m6Se4OMEs9QDlnC3estOXdxWucZ+PQEshNyUj5ZsAVaeNVY0 smW1S1BFNJ8cBvjUWr329kj9YQP8juAa -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:02 2025 by rpki-client