$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: O2GPpGsrqHzZydmNnBEwPvEHbe7btfFBgzg9ntdAUZ8= Subject key identifier: 64:5B:D2:97:61:4A:BA:B7:CC:78:3D:CB:4D:2C:45:58:A3:3B:BA:68 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: C0 Signing time: Fri 25 Apr 2025 04:53:19 +0000 Manifest this update: Fri 25 Apr 2025 04:53:18 +0000 Manifest next update: Fri 02 May 2025 04:53:18 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: rqC3ZjDylP5WKUdhM08LztIBiEJaVLgMkIBvOvxhYbY=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Apr 25 04:53:18 2025 GMT Not After : May 2 04:53:18 2025 GMT Subject: CN=680b153e-0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:13:d7:5f:a7:75:8a:30:6b:c0:48:00:ff: 93:10:ee:83:79:8f:20:b9:61:e9:3a:34:41:c1:bf: 06:46:0c:3b:c3:51:0b:18:0a:6f:71:d6:e0:b6:af: 67:b3:54:ee:23:b8:15:ef:5c:74:8d:88:06:10:55: 36:31:12:14:58:70:7a:73:aa:c9:d4:0d:52:83:c0: 16:81:6c:65:6c:29:c4:5d:62:93:36:94:02:23:14: 9c:fc:08:ea:47:e8:39:3e:09:60:8e:42:1c:1c:c7: ce:14:1c:f5:66:3b:38:a0:d7:44:2e:2d:61:f4:24: 75:f1:4b:30:d9:93:1d:d8:f2:56:af:56:9f:87:20: cf:48:82:ac:a9:36:f1:13:76:af:00:42:a0:39:93: 65:25:61:a4:be:0d:a1:36:39:ad:06:70:dd:0b:3c: 7c:c7:4d:e0:a0:bf:0f:c0:e4:0f:6d:5f:c6:8c:1b: 39:62:3f:5c:ec:45:7c:cb:8d:31:3c:8e:69:f1:3b: e2:2b:56:ec:e6:79:71:32:70:48:a5:1c:fc:d2:6b: 55:3e:55:cf:18:e4:bc:83:09:07:31:e0:86:32:27: cc:c8:3a:18:57:8e:ed:a6:6c:cc:36:1e:91:ea:a4: e0:83:c0:d6:09:8d:8d:ab:36:ca:ed:19:eb:90:ae: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:D2:97:61:4A:BA:B7:CC:78:3D:CB:4D:2C:45:58:A3:3B:BA:68 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:35:d9:46:51:e9:f5:54:11:ba:63:a5:f8:8a:e5:e5:00:51: d6:2a:56:7c:f6:ad:f3:3f:d2:e9:4e:55:c6:f4:66:cb:91:19: cd:2e:7e:2d:f8:38:6a:53:9d:74:08:48:f4:c8:38:13:30:ab: d2:20:96:6d:b9:32:a6:0d:40:c9:df:ec:59:28:da:52:30:59: b7:76:ee:44:2e:27:00:60:dd:01:82:d0:a5:12:1e:ba:81:6c: bd:7d:26:77:dd:c2:96:59:ef:2b:2b:09:12:23:56:f8:48:ae: 26:5e:18:d5:8e:81:98:1b:22:bf:5e:c1:fd:94:1e:b6:76:b0: 16:f5:5e:9b:37:59:10:25:fa:c6:06:d5:9b:c7:0b:d8:31:3c: ea:2b:fd:f2:58:0e:cb:89:c7:d8:e2:1f:85:73:d3:71:a7:5c: 47:8f:12:fa:aa:db:82:05:e3:55:41:44:bf:1e:db:dc:d1:e7: af:57:88:de:f0:84:46:4d:02:33:52:18:96:c7:de:d8:45:67: 1f:f6:2d:27:d5:99:44:1b:89:d9:4c:90:29:a5:7e:24:6c:f2: a0:88:8b:b7:ca:7c:4b:b7:0d:05:a5:1f:85:30:45:f1:12:10: 62:d4:99:96:c0:b2:e2:7d:6a:dd:9d:3c:28:39:c2:64:66:bb: 94:05:18:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNDI1MDQ1MzE4WhcNMjUwNTAyMDQ1MzE4WjAYMRYwFAYD VQQDEw02ODBiMTUzZS0wZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1cT11+ndYowa8BIAP+TEO6DeY8guWHpOjRBwb8GRgw7w1ELGApvcdbgtq9n s1TuI7gV71x0jYgGEFU2MRIUWHB6c6rJ1A1Sg8AWgWxlbCnEXWKTNpQCIxSc/Ajq R+g5PglgjkIcHMfOFBz1Zjs4oNdELi1h9CR18Usw2ZMd2PJWr1afhyDPSIKsqTbx E3avAEKgOZNlJWGkvg2hNjmtBnDdCzx8x03goL8PwOQPbV/GjBs5Yj9c7EV8y40x PI5p8TviK1bs5nlxMnBIpRz80mtVPlXPGOS8gwkHMeCGMifMyDoYV47tpmzMNh6R 6qTgg8DWCY2NqzbK7RnrkK69XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRb0pdh Srq3zHg9y00sRVijO7poMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7NdlGUen1VBG6Y6X4iuXlAFHWKlZ89q3zP9LpTlXG9GbLkRnNLn4t +DhqU510CEj0yDgTMKvSIJZtuTKmDUDJ3+xZKNpSMFm3du5ELicAYN0BgtClEh66 gWy9fSZ33cKWWe8rKwkSI1b4SK4mXhjVjoGYGyK/XsH9lB62drAW9V6bN1kQJfrG BtWbxwvYMTzqK/3yWA7LicfY4h+Fc9Nxp1xHjxL6qtuCBeNVQUS/Htvc0eevV4je 8IRGTQIzUhiWx97YRWcf9i0n1ZlEG4nZTJAppX4kbPKgiIu3ynxLtw0FpR+FMEXx EhBi1JmWwLLifWrdnTwoOcJkZruUBRjz -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:54 2025 by rpki-client