$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json) Hash identifier: 9FYNoWmvpT6BYw08lstnXyw7BQ6YGVUS1gwMP9hhxuM= Subject key identifier: AB:E0:BA:B6:A8:BF:E4:FD:BC:83:61:C4:B5:F1:54:B7:60:D5:35:0B Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft Manifest number: 1B Signing time: Fri 25 Apr 2025 06:54:51 +0000 Manifest this update: Fri 25 Apr 2025 06:54:50 +0000 Manifest next update: Fri 02 May 2025 06:54:50 +0000 Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: eMpci1MuXxo6mwBwuZc+he0xv0mcX+xnQv3q3VtNfWU=) 2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: JCV9BgemXhUBaAgBPhl6UiNH0ukdvH/wrcQapOQQK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C Validity Not Before: Apr 25 06:54:50 2025 GMT Not After : May 2 06:54:50 2025 GMT Subject: CN=680b31bb-7ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:46:34:15:18:6b:a7:e1:bd:ce:55:07:40: 5c:4e:dd:39:87:3a:e7:a2:a9:1b:e8:36:65:14:2a: df:f1:dc:44:d3:02:75:ae:f6:87:91:7d:76:17:f0: 71:67:04:e6:f8:1b:b0:e9:aa:21:cb:b0:2b:af:67: 2e:e2:84:37:b1:65:3b:92:66:20:ef:49:20:a7:f2: 4c:d4:70:ab:7b:8e:44:c4:2b:a7:25:33:a3:a5:87: 59:20:a7:b3:6d:ae:6d:23:55:9f:4c:1c:a3:3d:2f: e8:2b:96:0d:b9:a8:cd:a0:d4:be:11:8e:35:c5:98: b3:45:55:62:8f:60:6b:78:b7:35:22:fb:3f:59:bb: 46:ee:23:96:7a:f9:f3:7e:41:46:ca:be:b9:4a:77: 1f:5b:02:89:4e:32:62:78:5a:65:7a:5e:1d:07:7f: 3e:ae:f5:f4:c0:da:09:4b:ec:3d:7d:61:cc:2f:e2: 8e:8d:f6:39:f2:67:9f:2f:d7:3f:7d:4e:14:4b:39: 86:af:22:df:69:51:82:7e:32:fd:2f:49:87:23:d0: 48:b2:a6:e3:e6:3e:d2:ed:1f:8c:2a:17:93:e3:19: a8:2a:95:d3:5d:fc:15:30:d9:4c:f0:5e:a9:12:94: 08:77:a8:a0:92:c6:db:01:db:3f:71:ed:9f:9a:dc: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:BA:B6:A8:BF:E4:FD:BC:83:61:C4:B5:F1:54:B7:60:D5:35:0B X509v3 Authority Key Identifier: keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:00:eb:1e:1b:1d:65:74:1a:87:e9:e4:4d:8b:0d:84:a3:e5: 66:c1:26:10:ea:93:fd:29:2a:59:f1:35:34:2f:41:5c:6c:4b: 4a:fe:1e:78:c9:0c:24:b3:2c:56:27:77:cc:25:3e:ef:70:2a: c7:2d:de:9e:6c:1e:74:c5:19:62:70:31:09:23:5e:41:6b:23: a7:ec:50:fc:64:32:f1:1a:e6:9a:e6:73:cf:4f:d8:d0:65:05: 43:61:36:6b:23:fb:94:00:95:ba:11:af:3c:8b:4d:44:93:e6: 8f:43:e8:7b:d2:fe:fe:31:b2:ac:79:09:1b:20:7f:b7:e8:c3: 13:cf:fe:1d:75:7d:46:1c:4e:c5:cd:48:70:fe:2c:dc:fa:61: 53:9a:75:30:ac:35:16:a7:3e:2c:d3:b1:19:30:37:8c:53:78: cd:19:52:03:2a:46:54:63:55:c1:02:61:9c:48:c2:70:a3:5d: dc:e4:de:a4:0e:8f:95:47:8a:90:5e:1b:56:d8:71:4a:f4:52: c5:72:be:0f:ef:ae:75:95:71:1d:0c:41:78:fb:05:4a:ff:df: 2a:56:e6:10:16:c4:57:10:ba:47:bc:4f:ee:d3:19:3b:62:d7: a9:be:56:31:77:6c:9c:5c:5b:de:ce:42:07:4a:9d:fd:11:3c: 13:3d:aa:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzlDRjExMC8GA1UEBRMoMEU2QzRBQjY3N0JERTFBRDQ0NjAzRkQ3MzdEQTI1QzA2 MDFDNDU5QzAeFw0yNTA0MjUwNjU0NTBaFw0yNTA1MDIwNjU0NTBaMBgxFjAUBgNV BAMTDTY4MGIzMWJiLTdiYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEqkY0FRhrp+G9zlUHQFxO3TmHOueiqRvoNmUUKt/x3ETTAnWu9oeRfXYX8HFn BOb4G7DpqiHLsCuvZy7ihDexZTuSZiDvSSCn8kzUcKt7jkTEK6clM6Olh1kgp7Nt rm0jVZ9MHKM9L+grlg25qM2g1L4RjjXFmLNFVWKPYGt4tzUi+z9Zu0buI5Z6+fN+ QUbKvrlKdx9bAolOMmJ4WmV6Xh0Hfz6u9fTA2glL7D19Ycwv4o6N9jnyZ58v1z99 ThRLOYavIt9pUYJ+Mv0vSYcj0EiypuPmPtLtH4wqF5PjGagqldNd/BUw2UzwXqkS lAh3qKCSxtsB2z9x7Z+a3OiLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq+C6tqi/ 5P28g2HEtfFUt2DVNQswHwYDVR0jBBgwFoAUDmxKtne94a1EYD/XN9olwGAcRZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzOUNGLzU2RjMxRkI0RkI1 OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGExRVlEX1hOOW9sd0dBY1Ja dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG14S3RuZTk0YTFFWURfWE45b2x3R0FjUlp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz OUNGLzU2RjMxRkI0RkI1OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGEx RVlEX1hOOW9sd0dBY1Jady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANkA6x4bHWV0Gofp5E2LDYSj5WbBJhDqk/0pKlnxNTQvQVxsS0r+HnjJ DCSzLFYnd8wlPu9wKsct3p5sHnTFGWJwMQkjXkFrI6fsUPxkMvEa5prmc89P2NBl BUNhNmsj+5QAlboRrzyLTUST5o9D6HvS/v4xsqx5CRsgf7fowxPP/h11fUYcTsXN SHD+LNz6YVOadTCsNRanPizTsRkwN4xTeM0ZUgMqRlRjVcECYZxIwnCjXdzk3qQO j5VHipBeG1bYcUr0UsVyvg/vrnWVcR0MQXj7BUr/3ypW5hAWxFcQuke8T+7TGTti 16m+VjF3bJxcW97OQgdKnf0RPBM9qnU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:21 2025 by rpki-client