$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: BuTDjUSaqTYBteUp5+bU1upgttVqKLCLot9fiIR7usY= Subject key identifier: 5B:BA:C3:8A:A2:FD:C4:6A:F5:0D:6B:B2:B7:63:61:06:F6:D7:48:0B Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:33:54 +0000 Manifest this update: Fri 25 Apr 2025 04:33:54 +0000 Manifest next update: Fri 02 May 2025 04:33:54 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: yI/bo0VUm33zygJMLm/Ce+KBNEvtl9qy1JkKqOInfJQ=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Apr 25 04:33:54 2025 GMT Not After : May 2 04:33:54 2025 GMT Subject: CN=680b10b2-7af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:74:47:1f:46:da:b0:05:0e:40:15:a1:15: 6d:de:21:d4:26:9c:46:f6:a1:22:fb:b1:0e:60:1c: 47:91:35:96:49:8c:a8:4a:36:23:e7:f0:cc:74:ee: f7:b3:54:b2:96:50:3c:88:97:a1:3f:62:aa:57:59: 94:63:e0:21:75:97:4e:50:fb:ef:6b:5d:ea:7f:9f: 11:5f:50:5c:a6:82:2f:2a:a1:b7:13:3e:a3:0a:ca: 53:63:de:29:bd:4d:e7:6d:5f:68:2c:27:ad:67:bd: bd:ad:ce:98:3c:1f:97:40:12:6a:0d:78:52:63:03: c7:13:ac:85:9f:e5:15:8c:84:9a:24:04:f6:52:50: 43:92:a7:ec:8c:5b:b8:80:24:da:b9:7c:14:61:52: fb:02:36:3d:4e:d0:68:1f:b3:db:ef:2a:64:e6:d2: 3b:1c:36:b9:6d:e7:b0:6a:fc:d7:79:e1:5c:c6:17: 79:9b:3e:a8:83:de:b3:5e:1d:59:e1:b4:0b:60:07: 7e:ce:34:43:33:d3:4f:b0:1c:b9:1d:d1:6a:d4:8a: 3d:35:9a:7a:50:f8:93:eb:5a:29:48:95:f5:c0:7f: d8:cd:93:6a:44:7f:f3:a1:b1:87:61:64:70:9e:8a: cf:44:40:c9:45:15:34:40:bf:43:73:4f:5a:4d:d1: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:C3:8A:A2:FD:C4:6A:F5:0D:6B:B2:B7:63:61:06:F6:D7:48:0B X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:94:ef:4e:8b:31:fe:e0:9e:1e:16:b5:6a:e2:45:ca:cf:c6: 81:a9:d7:cb:26:f7:9a:66:b9:49:53:90:0d:79:8d:c4:01:83: 0c:c8:e7:36:06:d5:09:3b:02:44:e4:05:cf:e1:23:c3:eb:ef: a7:bc:22:7a:4f:c5:84:63:f7:17:28:f1:80:df:f9:19:a5:30: 75:b7:c1:e5:47:93:e9:57:e5:66:24:af:64:cb:3e:aa:4e:f2: 33:c7:0a:09:d8:27:b0:e7:35:24:13:23:bc:38:71:87:dd:a7: 4d:eb:03:ae:64:30:ea:f4:5e:19:16:b1:2c:01:e5:7a:f9:33: aa:62:39:66:89:e5:c7:61:c9:81:ac:4b:a2:59:85:78:ad:1f: 23:5c:ed:69:ae:94:87:9b:ed:cc:8e:c7:9a:b1:76:62:d0:d0: b9:a2:33:0f:7e:b5:59:d4:4b:c8:87:77:37:1d:9d:12:ba:21: 21:7b:5b:8a:4f:2c:51:ce:a0:c0:54:c1:16:4b:a5:ed:05:e8: 49:3d:ea:b9:c8:48:07:4d:c7:f8:fa:be:de:3f:0f:b2:79:d3: f6:75:b3:35:58:1c:95:96:17:c8:6d:47:a3:b1:0b:7c:6b:c7: 03:b2:05:65:2d:46:ca:79:7a:bd:88:dc:62:58:01:62:fb:fb: c9:e8:52:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNDI1MDQzMzU0WhcNMjUwNTAyMDQzMzU0WjAYMRYwFAYD VQQDEw02ODBiMTBiMi03YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+l0Rx9G2rAFDkAVoRVt3iHUJpxG9qEi+7EOYBxHkTWWSYyoSjYj5/DMdO73 s1SyllA8iJehP2KqV1mUY+AhdZdOUPvva13qf58RX1BcpoIvKqG3Ez6jCspTY94p vU3nbV9oLCetZ729rc6YPB+XQBJqDXhSYwPHE6yFn+UVjISaJAT2UlBDkqfsjFu4 gCTauXwUYVL7AjY9TtBoH7Pb7ypk5tI7HDa5beewavzXeeFcxhd5mz6og96zXh1Z 4bQLYAd+zjRDM9NPsBy5HdFq1Io9NZp6UPiT61opSJX1wH/YzZNqRH/zobGHYWRw norPREDJRRU0QL9Dc09aTdEK9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu6w4qi /cRq9Q1rsrdjYQb210gLMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAllO9OizH+4J4eFrVq4kXKz8aBqdfLJveaZrlJU5ANeY3EAYMMyOc2 BtUJOwJE5AXP4SPD6++nvCJ6T8WEY/cXKPGA3/kZpTB1t8HlR5PpV+VmJK9kyz6q TvIzxwoJ2Cew5zUkEyO8OHGH3adN6wOuZDDq9F4ZFrEsAeV6+TOqYjlmieXHYcmB rEuiWYV4rR8jXO1prpSHm+3MjseasXZi0NC5ojMPfrVZ1EvIh3c3HZ0SuiEhe1uK TyxRzqDAVMEWS6XtBehJPeq5yEgHTcf4+r7ePw+yedP2dbM1WByVlhfIbUejsQt8 a8cDsgVlLUbKeXq9iNxiWAFi+/vJ6FKm -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:29 2025 by rpki-client