$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: 47Xn2n9WCnkZfBggXeOhOw/BC/bKowLJ1XHQHFZ3jNw= Subject key identifier: 26:83:C4:49:75:5F:76:D2:4E:11:8E:D8:AF:83:B1:BA:99:64:16:F3 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 0296 Signing time: Fri 25 Apr 2025 01:18:09 +0000 Manifest this update: Fri 25 Apr 2025 01:18:08 +0000 Manifest next update: Fri 02 May 2025 01:18:08 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: w46YuzVPwISdgxV9eW5N53yxiZ08KibtXRqSeX71PcE=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Apr 25 01:18:08 2025 GMT Not After : May 2 01:18:08 2025 GMT Subject: CN=680ae2d0-98c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:04:23:bf:b2:8b:e8:91:2a:ad:0d:7f:32: 44:28:cd:c9:e2:b3:e8:f4:76:ba:24:36:82:ac:c1: 21:2c:0d:a1:6a:ff:e0:41:49:41:9e:c4:b4:ca:33: aa:33:e5:2f:1a:89:60:10:f9:1f:c1:c6:f3:ba:5b: f1:82:58:57:fd:ff:41:36:e0:bf:78:df:34:3c:a9: 3c:ed:7f:8f:e6:60:40:d5:81:58:9d:0a:b6:17:b8: ff:95:f4:07:de:7a:5f:e1:76:16:86:6e:3e:7d:ae: 8a:50:58:47:c6:da:a8:df:cf:cc:5f:e5:64:c5:57: e2:45:82:7f:01:20:b2:8a:ec:20:f7:a0:95:f9:90: ae:0c:d7:15:b8:04:de:98:c5:e8:19:02:ab:fb:7f: a2:5f:2a:20:ac:59:04:f7:66:b7:41:a0:32:10:6d: 01:67:7f:d7:fd:d8:90:db:f9:81:ea:30:c9:db:d4: 65:52:cf:74:21:43:e4:2c:26:2d:1d:40:9b:9a:60: 6b:c2:ae:5d:e4:d3:dd:06:23:b8:90:85:08:6c:b0: f0:70:43:a8:18:b4:ff:1b:db:bf:ca:52:f5:15:1a: 85:aa:4c:ee:e2:e4:ad:88:0e:5f:7f:35:29:89:78: 44:02:11:60:fd:5f:d9:71:46:be:4c:f2:99:35:1b: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:83:C4:49:75:5F:76:D2:4E:11:8E:D8:AF:83:B1:BA:99:64:16:F3 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c7:1a:89:a7:81:2c:fc:53:cd:e1:94:fa:87:97:b0:fb:bb: fc:33:bd:af:d8:c2:5c:ab:7c:18:c0:12:96:69:60:29:5f:0b: 62:2e:a0:6f:e3:59:4b:79:c7:45:34:ef:8a:b6:72:1d:5d:66: ef:f0:c6:1e:ad:cd:ee:bc:4e:76:1f:28:26:df:1e:da:23:83: bb:5c:5a:6a:65:6d:86:07:a7:79:4b:2d:52:c7:e0:c6:4d:2b: a5:10:ab:8b:59:ea:95:33:17:01:09:b4:41:09:8b:58:88:e7: 4a:6c:de:bf:e7:e7:78:62:eb:c2:80:8a:3d:e5:6c:0c:20:7a: 16:5e:f2:ff:53:aa:11:a9:2d:3b:a7:86:ce:a8:73:fd:5c:5c: d7:14:59:e8:50:fa:e7:1c:e4:2f:b4:ac:89:96:33:e1:f2:00: 11:17:67:63:92:47:2c:56:84:9f:d1:39:15:a1:b3:80:3b:b8: b7:a6:61:eb:2b:9c:17:16:31:84:8b:02:3d:fe:60:61:4a:92: a5:b4:8e:3b:39:bd:de:8b:83:b0:af:4e:e7:23:46:99:74:48: 51:c9:1b:95:66:b8:08:ce:52:f4:8b:37:06:19:c0:8e:51:d2: 6d:de:e3:12:fb:46:60:d4:b9:3f:23:c8:1f:f1:4e:39:db:11: f0:72:6f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNDI1MDExODA4WhcNMjUwNTAyMDExODA4WjAYMRYwFAYD VQQDEw02ODBhZTJkMC05OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYgEI7+yi+iRKq0NfzJEKM3J4rPo9Ha6JDaCrMEhLA2hav/gQUlBnsS0yjOq M+UvGolgEPkfwcbzulvxglhX/f9BNuC/eN80PKk87X+P5mBA1YFYnQq2F7j/lfQH 3npf4XYWhm4+fa6KUFhHxtqo38/MX+VkxVfiRYJ/ASCyiuwg96CV+ZCuDNcVuATe mMXoGQKr+3+iXyogrFkE92a3QaAyEG0BZ3/X/diQ2/mB6jDJ29RlUs90IUPkLCYt HUCbmmBrwq5d5NPdBiO4kIUIbLDwcEOoGLT/G9u/ylL1FRqFqkzu4uStiA5ffzUp iXhEAhFg/V/ZcUa+TPKZNRsCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaDxEl1 X3bSThGO2K+DsbqZZBbzMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgxxqJp4Es/FPN4ZT6h5ew+7v8M72v2MJcq3wYwBKWaWApXwtiLqBv 41lLecdFNO+KtnIdXWbv8MYerc3uvE52Hygm3x7aI4O7XFpqZW2GB6d5Sy1Sx+DG TSulEKuLWeqVMxcBCbRBCYtYiOdKbN6/5+d4YuvCgIo95WwMIHoWXvL/U6oRqS07 p4bOqHP9XFzXFFnoUPrnHOQvtKyJljPh8gARF2djkkcsVoSf0TkVobOAO7i3pmHr K5wXFjGEiwI9/mBhSpKltI47Ob3ei4Owr07nI0aZdEhRyRuVZrgIzlL0izcGGcCO UdJt3uMS+0Zg1Lk/I8gf8U452xHwcm+B -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:58 2025 by rpki-client