$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: wPDvoHotZhJ9DUhRc5EtaDJQvAdcG/HwLchptUz5kYw= Subject key identifier: C5:94:9E:F2:B9:38:B3:A4:D4:5A:F8:98:06:B9:C4:88:D2:26:A6:84 Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: 83 Signing time: Fri 25 Apr 2025 05:43:55 +0000 Manifest this update: Fri 25 Apr 2025 05:43:55 +0000 Manifest next update: Fri 02 May 2025 05:43:55 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: Gvtj+ojgWVVRg2PyCpMJKfKjp/8KyXXLufjYKODfA4U=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Apr 25 05:43:55 2025 GMT Not After : May 2 05:43:55 2025 GMT Subject: CN=680b211b-305f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:52:26:90:34:af:44:b2:dd:8b:0c:fe:8d: c5:67:b7:76:af:25:55:41:57:de:c3:8d:ff:63:61: 5d:34:82:67:83:72:8d:ee:8f:f1:9c:8e:35:b9:36: 43:e0:4a:2f:fe:99:85:4c:9b:fd:e7:87:9d:0d:4f: 23:8d:67:ee:c1:a5:34:d7:0b:dc:b5:f6:ed:d5:d4: 01:eb:aa:92:18:3f:61:2f:ad:41:ea:44:1b:7d:73: 22:28:fe:bb:8e:33:81:ba:0f:fd:65:9b:49:5a:a9: 2a:d3:4b:27:46:2e:a6:ff:3a:65:62:26:31:b6:9d: 63:cf:61:cb:4c:25:3c:07:97:60:ce:ad:fb:f5:6b: b1:a9:ae:cc:37:94:0a:25:5e:f9:a1:f4:22:87:21: 4d:8f:7f:87:50:73:96:10:39:3f:4b:6c:f4:1c:66: d3:4c:ce:77:e1:15:00:bc:88:40:8d:49:4e:46:4e: 37:a7:8a:db:1b:09:c7:3e:f5:e7:54:ec:00:f8:8e: fd:9b:86:95:d7:d7:f1:c4:49:01:70:b9:75:0d:9c: 44:f0:89:6a:18:01:79:f3:f8:75:9a:c7:d6:ec:5d: 5f:e3:10:a6:24:28:88:46:aa:41:1c:02:7b:b0:95: ef:04:04:12:6e:0b:93:4f:85:98:58:99:0e:4f:c4: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:9E:F2:B9:38:B3:A4:D4:5A:F8:98:06:B9:C4:88:D2:26:A6:84 X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:71:d4:b7:33:26:f3:60:bb:57:71:e3:08:fb:97:d1:33:a2: 2a:6c:c9:1b:28:f4:b0:fa:68:b5:fd:c7:b0:96:c5:7d:7a:16: 11:cc:9c:80:67:64:b5:f6:b4:cb:7f:3b:35:6b:d7:55:27:1e: 14:01:3e:8b:3d:70:7b:c7:c0:13:a4:2b:22:c0:08:a5:bc:7b: 96:c3:62:7a:bb:34:86:4c:1e:74:54:a5:f0:7f:c4:72:28:73: 50:89:2d:6f:62:c8:a9:57:c5:b8:f6:4c:86:3f:7b:59:36:1f: 08:ed:18:6a:78:17:2f:85:c0:6d:4d:26:13:2c:b4:99:ea:4e: bd:7d:c5:11:6d:8c:d5:14:01:bd:19:2f:4d:e5:46:c3:aa:52: f6:ca:75:04:3e:f1:55:c5:1a:0b:e0:0c:4e:7f:32:42:f3:09: bd:e1:fe:63:df:91:fc:99:a5:b3:29:b5:36:e1:3a:f4:6b:13: 3d:68:1d:2c:8d:9c:8e:c1:e4:d5:b6:a6:5e:d4:64:70:eb:08: e0:2e:68:5b:0c:1e:9a:29:9d:e4:52:43:37:58:b7:b7:a2:9c: 84:c0:95:9b:e0:57:e0:33:89:ee:9d:cd:af:0c:02:fe:79:77: 70:88:39:be:56:f8:0f:9d:29:09:49:81:82:d2:31:e3:31:c3: ff:6a:b0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjUwNDI1MDU0MzU1WhcNMjUwNTAyMDU0MzU1WjAYMRYwFAYD VQQDEw02ODBiMjExYi0zMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGdSJpA0r0Sy3YsM/o3FZ7d2ryVVQVfew43/Y2FdNIJng3KN7o/xnI41uTZD 4Eov/pmFTJv954edDU8jjWfuwaU01wvctfbt1dQB66qSGD9hL61B6kQbfXMiKP67 jjOBug/9ZZtJWqkq00snRi6m/zplYiYxtp1jz2HLTCU8B5dgzq379Wuxqa7MN5QK JV75ofQihyFNj3+HUHOWEDk/S2z0HGbTTM534RUAvIhAjUlORk43p4rbGwnHPvXn VOwA+I79m4aV19fxxEkBcLl1DZxE8IlqGAF58/h1msfW7F1f4xCmJCiIRqpBHAJ7 sJXvBAQSbguTT4WYWJkOT8TBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWUnvK5 OLOk1Fr4mAa5xIjSJqaEMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/cdS3MybzYLtXceMI+5fRM6IqbMkbKPSw+mi1/cewlsV9ehYRzJyA Z2S19rTLfzs1a9dVJx4UAT6LPXB7x8ATpCsiwAilvHuWw2J6uzSGTB50VKXwf8Ry KHNQiS1vYsipV8W49kyGP3tZNh8I7RhqeBcvhcBtTSYTLLSZ6k69fcURbYzVFAG9 GS9N5UbDqlL2ynUEPvFVxRoL4AxOfzJC8wm94f5j35H8maWzKbU24Tr0axM9aB0s jZyOweTVtqZe1GRw6wjgLmhbDB6aKZ3kUkM3WLe3opyEwJWb4FfgM4nunc2vDAL+ eXdwiDm+VvgPnSkJSYGC0jHjMcP/arD9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:11 2025 by rpki-client