$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json) Hash identifier: h5vgmwqdUrFfbc5GuakoLo0Fc15GueMTFvkEbXZjHhM= Subject key identifier: AD:3E:30:0F:E4:6A:AA:BC:9B:71:D6:47:C4:56:E4:16:F3:35:01:79 Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft Manifest number: 06C4 Signing time: Thu 24 Apr 2025 21:54:27 +0000 Manifest this update: Thu 24 Apr 2025 21:54:26 +0000 Manifest next update: Thu 01 May 2025 21:54:26 +0000 Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: 51+6h7SGLHUGRTVpTSs6V8X2MrMsdtjNSsC9nmADkRs=) 2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: Zjwbd7A/MXOwRReQkUKden3QdXuGaPIKzLzYkjV/0SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Validity Not Before: Apr 24 21:54:26 2025 GMT Not After : May 1 21:54:26 2025 GMT Subject: CN=680ab312-036e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:85:e2:7c:84:a7:fe:10:7c:cb:ec:fa:24: 81:7d:4d:8a:e3:2b:07:d8:0f:23:35:ce:cc:00:6c: 80:b7:42:46:5d:03:af:1f:47:ca:ac:e6:21:62:f4: 0e:26:76:64:1c:f8:14:97:8f:ed:8b:03:0a:66:40: c5:21:cd:ee:64:b8:17:b5:73:95:3c:e4:3c:db:6c: d6:26:ad:7a:78:88:7b:14:21:85:d0:30:12:ed:55: 63:1d:44:1c:7b:ba:1a:34:ab:66:a0:c9:09:04:b6: e0:56:a2:37:ff:15:82:27:c9:db:07:27:c7:9c:54: 04:d7:cf:ea:bb:47:8a:df:7c:c8:15:ad:95:26:3e: 72:52:e0:7c:91:56:ec:f4:64:70:38:e5:32:28:3e: 46:18:68:f0:1c:7e:82:e3:16:f8:bb:61:02:dd:69: 25:44:b7:eb:dc:b7:b5:2b:f4:0e:24:62:4f:37:94: 01:7b:96:d8:ab:3f:e5:74:71:6e:00:bf:78:41:2c: b3:29:b1:c0:b9:1c:9f:46:cd:b6:ae:8b:d5:d4:0c: 13:bf:99:72:f3:6c:c1:bb:4d:64:cf:a3:49:4e:b8: 7c:74:3d:b9:32:ef:4d:97:63:c1:77:12:ff:95:4e: 54:a9:49:fc:29:8c:ca:7a:56:64:48:f8:08:13:5c: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3E:30:0F:E4:6A:AA:BC:9B:71:D6:47:C4:56:E4:16:F3:35:01:79 X509v3 Authority Key Identifier: keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:08:96:77:e7:32:34:9a:fc:1a:48:0e:f5:84:0c:0f:1b:26: 4d:34:39:7c:cd:df:66:5e:c5:0b:82:bf:68:5a:d4:8f:d7:1f: 38:7a:59:56:4a:58:3d:41:a7:29:1c:e1:e8:53:25:d0:27:f7: 18:7a:39:e5:fd:e6:71:27:c9:81:80:42:b1:7e:5d:b5:3d:db: e1:26:16:7f:ab:b5:aa:b6:33:09:ac:4d:85:a9:5b:22:51:1f: 86:21:81:1f:b1:26:fe:90:8d:4e:2e:d4:2d:a9:bc:47:d6:65: c6:46:a9:24:fd:b3:38:74:98:80:69:28:f6:84:96:0c:01:24: a4:63:3d:8b:66:29:8f:57:d7:bf:37:f2:8e:06:5f:a3:10:fc: cd:d2:7f:e5:cf:35:82:aa:de:68:76:11:4f:69:23:7b:2c:ed: be:84:c7:9f:e2:81:47:ad:b7:1e:27:e8:13:82:28:db:e7:ad: 1b:4c:13:18:10:ba:5d:76:62:09:d5:fa:d2:90:fa:18:19:7c: f7:36:be:c1:d5:cf:da:29:0a:de:64:83:03:6c:90:75:5c:fa: cf:27:4f:b5:e8:f9:c2:42:f7:d1:e0:f2:47:97:64:8f:7e:85: 9e:6a:15:2d:07:b1:1c:16:03:b9:9e:f8:62:34:2f:ec:a7:b1: 52:34:08:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4 RTU3NzM3MjQwHhcNMjUwNDI0MjE1NDI2WhcNMjUwNTAxMjE1NDI2WjAYMRYwFAYD VQQDEw02ODBhYjMxMi0wMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eWF4nyEp/4QfMvs+iSBfU2K4ysH2A8jNc7MAGyAt0JGXQOvH0fKrOYhYvQO JnZkHPgUl4/tiwMKZkDFIc3uZLgXtXOVPOQ822zWJq16eIh7FCGF0DAS7VVjHUQc e7oaNKtmoMkJBLbgVqI3/xWCJ8nbByfHnFQE18/qu0eK33zIFa2VJj5yUuB8kVbs 9GRwOOUyKD5GGGjwHH6C4xb4u2EC3WklRLfr3Le1K/QOJGJPN5QBe5bYqz/ldHFu AL94QSyzKbHAuRyfRs22rovV1AwTv5ly82zBu01kz6NJTrh8dD25Mu9Nl2PBdxL/ lU5UqUn8KYzKelZkSPgIE1yaLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0+MA/k aqq8m3HWR8RW5BbzNQF5MB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1 OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2 TDFwWEM1bFJmS0NPVjNOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzCJZ35zI0mvwaSA71hAwPGyZNNDl8zd9mXsULgr9oWtSP1x84ellW Slg9QacpHOHoUyXQJ/cYejnl/eZxJ8mBgEKxfl21PdvhJhZ/q7WqtjMJrE2FqVsi UR+GIYEfsSb+kI1OLtQtqbxH1mXGRqkk/bM4dJiAaSj2hJYMASSkYz2LZimPV9e/ N/KOBl+jEPzN0n/lzzWCqt5odhFPaSN7LO2+hMef4oFHrbceJ+gTgijb560bTBMY ELpddmIJ1frSkPoYGXz3Nr7B1c/aKQreZIMDbJB1XPrPJ0+16PnCQvfR4PJHl2SP foWeahUtB7EcFgO5nvhiNC/sp7FSNAh5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:41 2025 by rpki-client