$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json) Hash identifier: 62NuL7dXBm1Kvhy3SSKzNn3o1kD1Da6ylfe3DM3bXTI= Subject key identifier: FB:F8:D7:A6:23:23:6B:64:32:6A:35:B9:28:B6:84:9E:15:FB:35:47 Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft Manifest number: FA Signing time: Fri 25 Apr 2025 04:15:05 +0000 Manifest this update: Fri 25 Apr 2025 04:15:04 +0000 Manifest next update: Fri 02 May 2025 04:15:04 +0000 Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: TtbYBYgPLbjCkYFRghUl0GOe0mVihN83GX3SNg5YlHw=) 2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Validity Not Before: Apr 25 04:15:04 2025 GMT Not After : May 2 04:15:04 2025 GMT Subject: CN=680b0c49-1c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:68:ba:26:c0:b6:0f:de:d4:b6:bb:20:c9: f7:d6:92:05:fb:ad:56:68:98:38:4f:5a:49:a6:b3: f0:a5:79:76:1e:ce:14:ba:55:4d:4f:e3:38:08:af: 78:d0:ca:f7:e3:93:61:26:78:b2:9e:09:0f:19:ee: 41:ba:7e:cf:d6:07:64:6a:55:96:ec:aa:b8:a0:ba: 55:77:c3:b6:9a:d3:77:98:6a:ea:1b:8b:c1:6f:36: 14:22:4f:28:0d:77:49:ab:cc:ba:64:be:fd:18:ed: 07:a0:b9:8a:10:97:47:05:e2:3d:65:a9:8b:d9:6f: 3d:a1:56:8c:20:01:a7:83:b9:5e:a8:94:26:a4:a6: 39:19:4c:94:e9:9a:e0:70:86:49:73:37:c5:15:34: 4b:2f:54:5d:66:ed:8b:7f:63:4e:ae:40:f4:f8:b7: 65:5e:f0:f4:64:fb:a8:95:08:e2:c7:55:19:12:52: bc:16:8d:4f:04:70:04:f9:f7:25:bc:9b:84:db:e7: f2:fd:87:c3:e6:70:a8:b4:27:d1:91:a5:3e:93:0c: 9f:24:e8:81:b8:e0:d7:41:cd:0f:cd:3c:f8:8c:e6: 46:dc:f1:b4:f5:0c:74:63:d1:f2:d5:10:e1:2c:d7: 74:a8:45:c5:72:37:2e:33:67:82:59:ca:06:78:d7: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:D7:A6:23:23:6B:64:32:6A:35:B9:28:B6:84:9E:15:FB:35:47 X509v3 Authority Key Identifier: keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:11:ef:3b:55:40:c2:78:54:38:9c:f3:8f:8b:97:10:b3:40: ab:a3:47:cf:bc:d7:25:fe:35:04:98:96:64:87:b0:bd:d6:bf: 67:6c:c0:12:c7:45:22:63:10:16:9d:43:75:a1:a1:30:e7:f9: 3e:84:98:7c:08:4b:6e:e5:f4:93:83:5e:71:84:af:d2:04:0d: 8f:5b:3a:55:48:a6:89:27:29:4c:aa:b6:6b:45:54:07:a2:9d: 74:78:15:81:f7:b2:c4:77:59:5e:f4:cf:d9:e3:39:d8:7d:22: 5d:3c:a4:83:65:3b:45:5d:c9:d4:3f:e9:a8:31:7b:35:61:09: 49:5c:21:d3:4f:d2:69:65:a0:51:7b:8c:00:a8:9f:a9:0d:66: f6:d9:a5:ad:1f:41:b7:72:b0:39:69:c7:38:1b:86:28:ba:0e: d8:b0:53:22:52:ee:2b:db:a3:c8:20:ba:41:94:d8:0a:c9:2d: 05:84:1e:11:fa:8a:72:4b:4f:63:76:3c:cf:10:12:a4:19:aa: 1f:d8:0c:65:6c:99:9d:14:4d:7c:d6:35:4c:d6:6d:db:8d:ec: de:d9:85:5a:0a:eb:04:ce:1f:2f:a8:a7:d4:58:40:07:99:5b: 6e:b8:ad:c6:80:92:e6:db:eb:2b:a5:a1:bc:6b:3b:d3:1b:70: 6e:e8:9f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCODYxMTAvBgNVBAUTKEZERDkxREQzMEU5QjFGRUEzQkI3RTEyQUVGNzYyMTY2 MjgxMjlCMjMwHhcNMjUwNDI1MDQxNTA0WhcNMjUwNTAyMDQxNTA0WjAYMRYwFAYD VQQDEw02ODBiMGM0OS0xYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu15ouibAtg/e1La7IMn31pIF+61WaJg4T1pJprPwpXl2Hs4UulVNT+M4CK94 0Mr345NhJniyngkPGe5Bun7P1gdkalWW7Kq4oLpVd8O2mtN3mGrqG4vBbzYUIk8o DXdJq8y6ZL79GO0HoLmKEJdHBeI9ZamL2W89oVaMIAGng7leqJQmpKY5GUyU6Zrg cIZJczfFFTRLL1RdZu2Lf2NOrkD0+LdlXvD0ZPuolQjix1UZElK8Fo1PBHAE+fcl vJuE2+fy/YfD5nCotCfRkaU+kwyfJOiBuODXQc0PzTz4jOZG3PG09Qx0Y9Hy1RDh LNd0qEXFcjcuM2eCWcoGeNcz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv416Yj I2tkMmo1uSi2hJ4V+zVHMB8GA1UdIwQYMBaAFP3ZHdMOmx/qO7fhKu92IWYoEpsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4Ni84NkU5NzdDQUE4 N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgtbzd0LUVxNzNZaFppZ1Nt eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI4Ni84NkU5NzdDQUE4N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgt bzd0LUVxNzNZaFppZ1NteU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Ee87VUDCeFQ4nPOPi5cQs0Cro0fPvNcl/jUEmJZkh7C91r9nbMAS x0UiYxAWnUN1oaEw5/k+hJh8CEtu5fSTg15xhK/SBA2PWzpVSKaJJylMqrZrRVQH op10eBWB97LEd1le9M/Z4znYfSJdPKSDZTtFXcnUP+moMXs1YQlJXCHTT9JpZaBR e4wAqJ+pDWb22aWtH0G3crA5acc4G4Youg7YsFMiUu4r26PIILpBlNgKyS0FhB4R +opyS09jdjzPEBKkGaof2AxlbJmdFE181jVM1m3bjeze2YVaCusEzh8vqKfUWEAH mVtuuK3GgJLm2+srpaG8azvTG3Bu6J/f -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:52 2025 by rpki-client