$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: dS4GgDLOuzzYr6Qn4q7UU4YOuceeGdJA70D9KkFbhjA= Subject key identifier: 30:42:EE:F5:75:06:1D:7F:E5:7E:39:B7:A9:BF:1B:AE:D3:A8:3E:CE Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CA2 Signing time: Thu 24 Apr 2025 18:09:14 +0000 Manifest this update: Thu 24 Apr 2025 18:09:14 +0000 Manifest next update: Thu 01 May 2025 18:09:14 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: m5NLajHEG2xo58HcoNE5zFHJ00HXzJrozlYW1wZLGaE=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 6ikKO6mfXRBRmgTIVMuW6RtmQkhRBMlzw4JjoQkAAdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Apr 24 18:09:14 2025 GMT Not After : May 1 18:09:14 2025 GMT Subject: CN=680a7e4a-5b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:87:32:1c:dd:a2:ae:07:35:bc:77:fc:61: e3:8a:17:1d:90:55:f0:18:66:72:13:5b:7e:6a:23: 31:4e:93:29:7c:f2:38:ef:68:24:8a:28:41:36:72: c4:90:1b:e1:9d:76:8e:81:bf:32:2b:d3:38:ff:85: 04:67:54:99:0b:60:b9:ab:7a:6e:d5:ee:8a:c9:84: b6:2f:94:1a:c1:14:86:9c:04:89:82:6c:35:6a:12: ac:c2:26:04:8a:ad:60:e1:55:2b:a2:30:4c:57:e1: 30:26:0f:74:56:4e:b5:c1:78:99:0f:7e:81:85:12: b7:7f:ad:bb:ab:7f:09:59:81:2a:0d:85:d2:fe:51: b4:11:d4:20:36:6f:a0:9d:e0:e3:5c:39:c8:78:a0: c3:9a:bf:7f:bd:2f:49:af:7e:91:89:73:9d:e5:40: ee:6b:d2:92:d3:9c:37:7c:55:34:d0:db:77:dd:5e: 7c:30:7a:c2:d7:31:1b:d9:2c:a3:ae:33:9f:81:f2: 20:57:ac:0c:8c:8b:a3:f4:ca:ef:72:ce:be:54:10: 0e:71:07:5f:67:00:c1:d1:d3:97:13:8c:76:a9:e5: 4c:5f:49:78:d7:18:07:e6:3b:34:88:8b:ce:fd:34: 26:0b:a3:d8:ff:15:80:9f:4b:86:13:64:d2:0f:f1: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:42:EE:F5:75:06:1D:7F:E5:7E:39:B7:A9:BF:1B:AE:D3:A8:3E:CE X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:57:14:28:fd:60:87:c5:22:1e:01:59:44:34:5e:cb:0f:4b: 71:80:cd:dc:ad:9f:bc:71:5a:f4:8c:e1:03:84:be:32:24:ec: c9:57:c5:ee:7b:17:35:dd:cf:82:ce:ba:a6:ba:68:b3:f3:f0: f3:82:76:88:9c:40:04:9e:97:fd:f3:80:ff:fb:63:2a:bc:be: 5c:62:f5:91:d8:b8:a4:18:0a:c9:91:df:7e:25:e0:e0:55:92: 47:e1:7b:8c:44:7c:de:cd:ae:79:72:81:10:9a:28:8b:49:6e: 50:3e:86:a7:c1:21:7b:5f:d1:3a:93:69:49:e9:d8:fb:dd:9b: 76:8a:97:9a:03:ad:46:64:9a:e3:5d:05:9f:41:11:90:8f:42: 50:d5:c1:26:aa:62:49:b2:74:6d:19:0d:86:6a:28:04:89:cb: 9a:50:d9:b3:30:a2:c7:8b:20:04:43:9b:b5:8d:b2:4f:44:5a: 35:51:3e:53:07:62:d2:1c:33:45:c6:20:bc:b1:34:9d:fb:a7: 9c:f3:df:06:c9:52:64:87:93:89:e0:a6:24:b5:00:46:50:ef: cb:d9:0a:41:fd:b9:9c:1b:c2:2c:32:47:10:d8:b1:b0:7b:59: 12:5b:af:de:1d:7d:d3:82:49:19:46:a0:f2:0b:84:77:bd:9e: 8d:93:cd:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwNDI0MTgwOTE0WhcNMjUwNTAxMTgwOTE0WjAYMRYwFAYD VQQDEw02ODBhN2U0YS01YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA216HMhzdoq4HNbx3/GHjihcdkFXwGGZyE1t+aiMxTpMpfPI472gkiihBNnLE kBvhnXaOgb8yK9M4/4UEZ1SZC2C5q3pu1e6KyYS2L5QawRSGnASJgmw1ahKswiYE iq1g4VUrojBMV+EwJg90Vk61wXiZD36BhRK3f627q38JWYEqDYXS/lG0EdQgNm+g neDjXDnIeKDDmr9/vS9Jr36RiXOd5UDua9KS05w3fFU00Nt33V58MHrC1zEb2Syj rjOfgfIgV6wMjIuj9Mrvcs6+VBAOcQdfZwDB0dOXE4x2qeVMX0l41xgH5js0iIvO /TQmC6PY/xWAn0uGE2TSD/GIfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBC7vV1 Bh1/5X45t6m/G67TqD7OMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAVxQo/WCHxSIeAVlENF7LD0txgM3crZ+8cVr0jOEDhL4yJOzJV8Xu exc13c+Czrqmumiz8/DzgnaInEAEnpf984D/+2MqvL5cYvWR2LikGArJkd9+JeDg VZJH4XuMRHzeza55coEQmiiLSW5QPoanwSF7X9E6k2lJ6dj73Zt2ipeaA61GZJrj XQWfQRGQj0JQ1cEmqmJJsnRtGQ2GaigEicuaUNmzMKLHiyAEQ5u1jbJPRFo1UT5T B2LSHDNFxiC8sTSd+6ec898GyVJkh5OJ4KYktQBGUO/L2QpB/bmcG8IsMkcQ2LGw e1kSW6/eHX3TgkkZRqDyC4R3vZ6Nk82d -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:06 2025 by rpki-client