$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json) Hash identifier: Vj3To4BdK0i2ejVGjpthvzbPPRzpWtMzRsV/yspZ37g= Subject key identifier: FF:C1:AB:77:8D:14:CD:FC:9B:F7:29:5A:E6:9A:1B:28:14:80:D7:FC Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft Manifest number: 05F5 Signing time: Thu 24 Apr 2025 22:42:28 +0000 Manifest this update: Thu 24 Apr 2025 22:42:27 +0000 Manifest next update: Thu 01 May 2025 22:42:27 +0000 Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: ipiiz/+RybqX8ExRu4mppbZePJLeiphOYiIvd006CY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369 Validity Not Before: Apr 24 22:42:27 2025 GMT Not After : May 1 22:42:27 2025 GMT Subject: CN=680abe54-d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:f5:0c:82:59:2c:21:bb:4b:bf:dc:e2:d4: bb:bd:b6:92:8f:a6:c6:4a:61:e0:af:85:29:ca:93: f1:d0:d2:0a:56:de:63:76:c8:15:9b:62:25:13:14: cc:d9:19:f9:05:44:ef:57:b6:ca:32:85:58:89:e5: 7d:2d:cb:23:70:e2:68:2d:a2:d1:76:f0:58:89:cf: 5b:49:9b:e4:d7:34:61:b0:f0:70:22:6d:9a:1e:66: 84:1b:ee:06:4d:76:10:e2:4e:56:6d:36:03:a4:b3: 49:64:97:b1:12:c8:a3:75:e0:67:68:94:7b:09:91: 2e:e1:05:4b:7a:ab:32:9d:19:92:d2:2c:3c:dc:ba: f6:57:6d:19:fd:43:82:56:fb:0f:15:34:0a:a8:be: 1a:9f:05:86:52:1e:85:02:ef:c8:b1:ee:a0:57:d5: f4:e7:3b:14:cf:66:28:96:d3:6c:d1:d8:83:0d:8f: d8:03:17:f9:bd:61:39:09:f9:c0:fd:31:6a:cb:d7: 1c:1c:f2:16:c3:e8:50:cc:2f:35:e5:2b:53:aa:5c: 9b:28:ed:35:74:c0:59:86:62:88:7d:e8:3d:f1:22: de:2a:76:04:a6:53:10:0a:a4:bc:2a:12:cc:12:b6: 5e:d5:2b:2c:00:3a:30:dd:e8:96:cf:43:af:be:7b: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:AB:77:8D:14:CD:FC:9B:F7:29:5A:E6:9A:1B:28:14:80:D7:FC X509v3 Authority Key Identifier: keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:96:ce:26:e6:9d:be:bf:1e:ad:b0:18:e5:d8:68:dc:a9: 1f:c7:1f:25:ff:80:74:0a:e3:d3:1e:c5:7f:f4:e0:b4:fe:27: 99:d5:d1:1c:8d:3c:1e:12:a5:29:ca:28:f3:55:62:d4:4e:ef: 31:f8:e7:5a:d1:c0:18:72:25:29:22:c0:51:25:95:44:d5:c4: 32:ab:f4:70:84:69:e6:4a:a0:ed:dc:d7:f8:93:cc:05:cc:67: 5b:73:38:28:50:5d:5d:7c:20:b6:d7:94:58:70:09:6d:4b:12: f4:1b:4c:ee:c6:96:26:a9:b5:92:45:47:d4:96:7c:12:7b:9f: 8c:e7:33:0b:69:79:99:1c:f2:c9:46:13:49:4e:0d:19:5b:71: 7b:b1:ef:4a:99:a3:93:84:1b:d4:fb:7d:0d:5a:7f:fb:e4:8b: e7:92:a7:de:ff:2c:d2:23:fe:8a:aa:c0:15:87:c6:a3:3b:c4: 90:44:32:7d:17:dd:d0:15:76:ea:28:cb:5a:e6:91:8a:12:65: 38:9d:b2:26:13:8f:aa:5c:0a:df:8f:73:f5:4a:12:d6:c5:a3: 46:ba:9c:60:58:b4:df:38:5d:6b:35:1d:b8:f1:a5:e7:0d:47: 8a:11:e8:6c:b5:02:fb:f7:9b:d0:26:63:51:2f:12:c3:ba:83: a5:92:83:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC MUQ1ODgzNjkwHhcNMjUwNDI0MjI0MjI3WhcNMjUwNTAxMjI0MjI3WjAYMRYwFAYD VQQDEw02ODBhYmU1NC1kNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0f1DIJZLCG7S7/c4tS7vbaSj6bGSmHgr4UpypPx0NIKVt5jdsgVm2IlExTM 2Rn5BUTvV7bKMoVYieV9LcsjcOJoLaLRdvBYic9bSZvk1zRhsPBwIm2aHmaEG+4G TXYQ4k5WbTYDpLNJZJexEsijdeBnaJR7CZEu4QVLeqsynRmS0iw83Lr2V20Z/UOC VvsPFTQKqL4anwWGUh6FAu/Ise6gV9X05zsUz2YoltNs0diDDY/YAxf5vWE5CfnA /TFqy9ccHPIWw+hQzC815StTqlybKO01dMBZhmKIfeg98SLeKnYEplMQCqS8KhLM ErZe1SssADow3eiWz0OvvnslaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/Bq3eN FM38m/cpWuaaGygUgNf8MB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2 MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfdpbOJuadvr8erbAY5dho3Kkfxx8l/4B0CuPTHsV/9OC0/ieZ1dEc jTweEqUpyijzVWLUTu8x+Oda0cAYciUpIsBRJZVE1cQyq/RwhGnmSqDt3Nf4k8wF zGdbczgoUF1dfCC215RYcAltSxL0G0zuxpYmqbWSRUfUlnwSe5+M5zMLaXmZHPLJ RhNJTg0ZW3F7se9KmaOThBvU+30NWn/75Ivnkqfe/yzSI/6KqsAVh8ajO8SQRDJ9 F93QFXbqKMta5pGKEmU4nbImE4+qXArfj3P1ShLWxaNGupxgWLTfOF1rNR248aXn DUeKEehstQL795vQJmNRLxLDuoOlkoOO -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:31 2025 by rpki-client