$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: dXK70IyZswZn3Ryn3GoaQN6odZBqAjq7Za0lGWICCVQ= Subject key identifier: E5:37:8A:4A:37:09:54:E1:89:3E:C2:72:FB:60:F0:C5:45:AE:B7:4D Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 01B3 Signing time: Fri 25 Apr 2025 02:21:06 +0000 Manifest this update: Fri 25 Apr 2025 02:21:05 +0000 Manifest next update: Fri 02 May 2025 02:21:05 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: m6GmSuBbHnztvX7W7nFL0jnDs3qsFnJH+qBnmHGEid0=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Apr 25 02:21:05 2025 GMT Not After : May 2 02:21:05 2025 GMT Subject: CN=680af192-8ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:9a:9d:30:fc:a9:c1:15:d1:51:1c:0e:9d: 4f:7a:7e:35:b1:9a:17:45:c0:eb:22:9b:eb:21:c0: 3a:b6:51:57:6f:07:f2:1b:31:d4:b2:a6:a2:06:0a: 83:82:7e:f7:e4:9b:21:b7:6b:b6:9d:10:8b:ca:52: 08:3d:cb:77:d1:36:bc:52:cd:98:59:c6:90:83:00: 54:ac:cf:d7:5a:b0:da:19:88:7b:bd:f2:c7:df:f7: 17:69:53:ce:4e:88:bf:24:76:79:21:cf:bf:6c:a7: cd:fd:2e:f2:c5:76:2b:19:a4:49:0a:55:cb:29:b4: 9f:f8:11:c3:cf:eb:87:e4:d0:12:1d:d2:0e:d1:69: 43:66:5d:10:f9:c0:e1:16:74:bc:73:89:5d:b6:67: e8:e9:cd:f0:ce:5f:5b:05:8d:bd:56:8a:46:de:e4: ed:cc:09:7a:73:4b:ba:a9:07:a0:ca:24:21:c9:8c: 7b:b6:a5:b1:fb:21:34:71:08:4f:ad:c2:27:b5:72: 9c:91:f8:c7:96:96:3a:59:06:0c:b8:37:ea:dc:29: 6f:2c:ff:c9:02:af:6d:9b:65:e0:d1:46:ca:5c:00: 6e:ec:ee:af:1b:8f:f8:75:32:76:88:bf:21:bb:cf: 4a:b3:c7:b0:42:98:50:b8:eb:03:d9:e7:1f:b1:b7: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:8A:4A:37:09:54:E1:89:3E:C2:72:FB:60:F0:C5:45:AE:B7:4D X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:22:a9:a3:3a:96:b4:af:a6:f2:0c:9d:5e:44:cd:0c:5a:37: 9f:16:db:07:ac:ee:1e:67:ff:b8:5f:23:ec:41:54:99:08:f7: 89:d7:a6:4a:d2:65:11:39:2d:c8:f1:9c:da:be:25:d8:4a:dd: ff:0a:96:b0:2b:98:32:ff:82:6c:09:8b:1d:c7:85:2f:80:33: 82:ab:0c:07:f6:5a:10:c0:75:76:ef:14:42:81:0e:7a:af:ad: 85:00:68:b1:a9:94:59:04:0e:f2:f6:bb:3b:3a:b5:3d:3a:81: 55:3d:8b:ea:d2:10:92:af:04:62:a6:bc:0e:37:90:54:7b:91: 40:f3:75:0b:17:a8:a7:b7:4e:dc:05:c4:6e:e2:ff:ca:38:c5: 90:da:c3:6e:35:4c:de:8f:81:73:ac:73:a3:74:d0:f8:90:42: c5:64:eb:2a:24:3a:4e:11:bb:dc:a6:a4:58:d0:18:ae:e6:83: c0:b2:96:cd:36:ea:ec:51:5a:c6:03:45:72:d1:b7:11:4e:0b: 38:46:44:61:a3:16:e7:ec:23:c1:9d:eb:01:b6:24:c2:dc:f4: a8:21:9a:ca:77:88:ca:5d:20:a6:62:29:f8:79:af:c5:0e:a6: 57:64:54:d1:5b:82:9d:c4:00:0c:e8:02:13:e5:57:b1:2f:5e: 5c:3e:71:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjUwNDI1MDIyMTA1WhcNMjUwNTAyMDIyMTA1WjAYMRYwFAYD VQQDEw02ODBhZjE5Mi04Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0SanTD8qcEV0VEcDp1Pen41sZoXRcDrIpvrIcA6tlFXbwfyGzHUsqaiBgqD gn735Jsht2u2nRCLylIIPct30Ta8Us2YWcaQgwBUrM/XWrDaGYh7vfLH3/cXaVPO Toi/JHZ5Ic+/bKfN/S7yxXYrGaRJClXLKbSf+BHDz+uH5NASHdIO0WlDZl0Q+cDh FnS8c4ldtmfo6c3wzl9bBY29VopG3uTtzAl6c0u6qQegyiQhyYx7tqWx+yE0cQhP rcIntXKckfjHlpY6WQYMuDfq3ClvLP/JAq9tm2Xg0UbKXABu7O6vG4/4dTJ2iL8h u89Ks8ewQphQuOsD2ecfsbc5kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU3iko3 CVThiT7Ccvtg8MVFrrdNMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0IqmjOpa0r6byDJ1eRM0MWjefFtsHrO4eZ/+4XyPsQVSZCPeJ16ZK 0mUROS3I8ZzaviXYSt3/CpawK5gy/4JsCYsdx4UvgDOCqwwH9loQwHV27xRCgQ56 r62FAGixqZRZBA7y9rs7OrU9OoFVPYvq0hCSrwRiprwON5BUe5FA83ULF6int07c BcRu4v/KOMWQ2sNuNUzej4FzrHOjdND4kELFZOsqJDpOEbvcpqRY0Biu5oPAspbN NursUVrGA0Vy0bcRTgs4RkRhoxbn7CPBnesBtiTC3PSoIZrKd4jKXSCmYin4ea/F DqZXZFTRW4KdxAAM6AIT5VexL15cPnGb -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:34 2025 by rpki-client