$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: yOngU3LyRyqVnbWnbqQZZLqBbixJSkvH3h+ManbbZbg= Subject key identifier: 20:AC:BF:22:70:53:43:DB:2C:97:D1:2D:C5:6E:89:13:61:A5:ED:88 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07A3 Signing time: Thu 24 Apr 2025 21:03:36 +0000 Manifest this update: Thu 24 Apr 2025 21:03:36 +0000 Manifest next update: Thu 01 May 2025 21:03:36 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: mPd0iTSt+iJswkIAtd+LMlllUbYYgb4Rgk/H52I25cc=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Apr 24 21:03:36 2025 GMT Not After : May 1 21:03:36 2025 GMT Subject: CN=680aa728-5da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:1e:0a:ba:1c:39:c0:6e:49:79:2c:51:63: 0d:c3:ab:74:48:05:b8:60:83:3e:78:8d:bf:bd:14: ea:dc:f9:1b:3f:36:e4:ad:1d:f2:80:ad:24:e4:b9: 3e:7f:2a:3f:a2:84:8e:20:bd:f1:a4:30:de:83:df: 7b:d5:cd:4f:43:c2:5f:a3:6d:f5:e0:e6:2e:78:00: 8e:da:84:4a:34:c1:92:d7:5b:58:23:e9:ad:d8:e7: 9e:44:39:2f:fc:1f:ee:70:94:3c:91:90:1c:dd:5b: c2:44:72:17:ad:85:8c:e3:77:c0:ff:fb:5f:04:09: 3c:42:e8:d8:cb:9c:d4:b7:a3:9b:80:27:6d:45:6c: 6c:7a:7a:c6:31:d9:8e:62:16:f8:cf:ff:e6:0f:e8: 4b:72:fc:63:4e:12:3e:30:0e:cb:d9:51:58:77:04: b8:d5:74:d0:44:58:45:1b:6c:91:36:f9:33:75:6c: 05:0b:c1:92:a0:01:96:22:99:be:dc:10:2d:65:7e: 67:a8:5e:ae:f9:21:01:85:7b:4e:94:15:c4:89:c5: cc:8e:ec:02:21:aa:a4:aa:85:d9:e9:ac:fc:3b:5d: ac:ff:be:f1:cf:ca:57:2b:18:e8:d6:d1:62:3e:10: ea:72:b6:9f:36:ed:23:d6:a3:97:c9:7f:ec:af:5a: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:BF:22:70:53:43:DB:2C:97:D1:2D:C5:6E:89:13:61:A5:ED:88 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:84:3a:b5:b7:52:1d:86:dd:2e:d2:62:87:3c:04:cb:38:1c: a8:13:7b:8c:49:de:75:35:a9:4a:81:f5:16:d9:dc:ac:cc:01: d6:02:d8:c5:7f:9a:6b:b5:20:1a:e2:a2:a7:d8:8c:f6:14:32: fe:d0:9a:0d:e5:cf:0f:8c:a2:3f:89:7d:a0:ab:d2:2c:87:e0: 50:d9:72:f2:e1:54:d8:7b:c8:cb:5e:b0:08:10:d8:6b:63:23: 38:8c:b8:af:02:96:19:aa:96:0a:3d:9d:78:c4:09:79:be:39: c6:37:c7:32:65:ea:47:fc:f6:46:bb:1b:6c:ec:49:fb:c4:82: d0:9d:17:0a:a1:7d:49:1d:c0:7c:77:3b:12:fe:38:cd:82:dc: af:90:7c:32:f1:5d:3d:47:52:f4:c9:ff:cb:c3:cf:73:ae:cd: 7e:95:b2:d6:f7:18:d8:a0:7f:73:40:b6:18:85:22:5b:81:c0: 0b:5f:4b:19:97:66:59:c9:bc:39:08:22:c4:7d:99:84:91:96: 32:a5:a9:c1:8e:8b:ba:8a:8e:62:fe:50:e1:bb:1b:19:4d:80: c1:72:9b:01:52:e3:93:d1:9b:b8:4a:96:df:5b:d9:4f:b1:d9: 53:a9:8e:a0:91:ed:5c:b2:db:0d:34:18:b0:bc:6d:05:04:f9: ea:1f:45:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNDI0MjEwMzM2WhcNMjUwNTAxMjEwMzM2WjAYMRYwFAYD VQQDEw02ODBhYTcyOC01ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu50eCrocOcBuSXksUWMNw6t0SAW4YIM+eI2/vRTq3PkbPzbkrR3ygK0k5Lk+ fyo/ooSOIL3xpDDeg9971c1PQ8Jfo2314OYueACO2oRKNMGS11tYI+mt2OeeRDkv /B/ucJQ8kZAc3VvCRHIXrYWM43fA//tfBAk8QujYy5zUt6ObgCdtRWxsenrGMdmO Yhb4z//mD+hLcvxjThI+MA7L2VFYdwS41XTQRFhFG2yRNvkzdWwFC8GSoAGWIpm+ 3BAtZX5nqF6u+SEBhXtOlBXEicXMjuwCIaqkqoXZ6az8O12s/77xz8pXKxjo1tFi PhDqcrafNu0j1qOXyX/sr1p5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCsvyJw U0PbLJfRLcVuiRNhpe2IMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvhDq1t1Idht0u0mKHPATLOByoE3uMSd51NalKgfUW2dyszAHWAtjF f5prtSAa4qKn2Iz2FDL+0JoN5c8PjKI/iX2gq9Ish+BQ2XLy4VTYe8jLXrAIENhr YyM4jLivApYZqpYKPZ14xAl5vjnGN8cyZepH/PZGuxts7En7xILQnRcKoX1JHcB8 dzsS/jjNgtyvkHwy8V09R1L0yf/Lw89zrs1+lbLW9xjYoH9zQLYYhSJbgcALX0sZ l2ZZybw5CCLEfZmEkZYypanBjou6io5i/lDhuxsZTYDBcpsBUuOT0Zu4SpbfW9lP sdlTqY6gke1cstsNNBiwvG0FBPnqH0VZ -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:29 2025 by rpki-client