$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json) Hash identifier: /OGrKC6q/NuurVlbtbu/hkx+fq6ycNW0wWgFQIqYojY= Subject key identifier: D4:D1:81:D5:15:4B:CA:A9:03:87:4E:BF:9D:0C:CB:4A:D5:A9:18:F8 Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 0F9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft Manifest number: 0F7C Signing time: Thu 24 Apr 2025 17:32:58 +0000 Manifest this update: Thu 24 Apr 2025 17:32:58 +0000 Manifest next update: Thu 01 May 2025 17:32:58 +0000 Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: hWx/kXASA8KCdLvCePF5+dq9LnYQNtiiOqwwT4iCVUM=) 2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: Yxnc0WF7y7yG/Ke04997WUeH+aSKIu6WY3AiaujI7mg=) 3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: fuYiIxAwDhO4bPXLu2NpIMN0ReUFHJNWZB+675RLxUg=) 4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: 7y8BRBcxLZCZTnPYfc6VfQnaG4bxPBMAZ7uJUfKAC/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3998 (0xf9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Apr 24 17:32:58 2025 GMT Not After : May 1 17:32:58 2025 GMT Subject: CN=680a75ca-90de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:9c:51:7e:09:ca:e8:f5:06:a9:1e:88:56: 0d:d3:10:85:15:f1:ed:e0:ca:30:ea:44:db:16:74: 07:03:90:81:33:f3:67:c8:02:b3:e3:5e:86:d1:93: a2:27:37:b0:bc:f0:f7:fd:12:aa:5c:28:60:70:ff: f0:61:bf:71:28:91:16:ef:f0:51:3c:93:ce:38:05: aa:0b:c1:a1:17:43:e1:8a:7d:9b:4e:e5:1d:50:aa: e4:13:65:13:31:f4:c5:43:6f:64:e5:fd:c0:b1:23: 82:72:76:d8:59:a8:44:43:0b:86:6e:1f:76:e4:fe: 13:18:0d:9c:8b:5d:05:f3:ef:f4:8d:1d:ba:0d:f9: 9e:5f:dd:e7:f5:51:db:6b:8d:41:0b:f4:51:b8:a4: a9:b8:2b:ca:b0:be:a2:ed:69:d8:11:30:ea:78:7e: 6a:68:ab:9f:8b:61:bf:f5:09:d7:91:17:b2:0d:dd: 45:b4:73:46:72:17:77:a8:ca:af:c5:84:c0:e0:4d: f3:d1:74:d7:bf:da:ac:f8:4c:30:79:e3:61:dd:a8: 56:38:71:b1:48:08:87:5f:95:b6:de:2d:c6:a1:7c: e5:2c:7c:1b:98:92:84:f6:08:7a:a5:2e:bb:dc:6e: ce:84:b8:41:42:7d:15:f6:a0:e2:80:33:a4:02:56: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:81:D5:15:4B:CA:A9:03:87:4E:BF:9D:0C:CB:4A:D5:A9:18:F8 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:88:08:6d:ba:69:5b:75:fc:f2:25:c6:d3:8e:76:24:2b:a7: 04:43:c5:8e:3a:7f:ab:a2:fa:31:59:55:08:22:17:30:47:d5: c9:7a:1a:cb:c4:c1:73:53:9a:e6:4e:0d:b8:70:10:db:5a:c2: 91:c1:5b:15:85:9d:79:07:d8:59:58:41:8a:e4:b7:e0:d0:31: 23:79:c3:11:e9:9e:59:f9:ba:53:2a:e6:4f:46:c5:98:47:bf: f3:4a:9f:02:53:58:61:11:a5:ff:fc:d5:b7:f7:1a:fb:90:77: 09:41:9a:a8:40:11:cd:a4:39:43:6b:e8:c4:6e:e7:44:5d:5e: 7d:91:ee:db:be:25:4e:dc:76:be:e0:c9:01:54:dc:be:f6:18: 38:8e:54:49:00:29:54:f1:5a:77:60:8d:49:1d:5d:cf:97:a1: 56:1d:1b:30:fb:81:47:51:44:d9:c7:14:b0:87:42:a5:0f:c4: 46:7e:de:3c:ca:79:fe:66:81:9b:1d:66:8e:d9:98:ec:f6:cc: 31:71:97:44:64:c5:6e:fd:f1:81:3f:b3:19:f0:10:e3:f1:e2: f8:25:0d:87:9b:f4:d5:5b:05:c8:1c:06:86:e3:ab:ba:87:ad: d3:4d:5b:aa:f4:6b:ea:07:7f:6f:dc:f9:06:97:68:f8:14:96: 6c:46:dc:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjUwNDI0MTczMjU4WhcNMjUwNTAxMTczMjU4WjAYMRYwFAYD VQQDEw02ODBhNzVjYS05MGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SOcUX4Jyuj1BqkeiFYN0xCFFfHt4Mow6kTbFnQHA5CBM/NnyAKz416G0ZOi JzewvPD3/RKqXChgcP/wYb9xKJEW7/BRPJPOOAWqC8GhF0Phin2bTuUdUKrkE2UT MfTFQ29k5f3AsSOCcnbYWahEQwuGbh925P4TGA2ci10F8+/0jR26DfmeX93n9VHb a41BC/RRuKSpuCvKsL6i7WnYETDqeH5qaKufi2G/9QnXkReyDd1FtHNGchd3qMqv xYTA4E3z0XTXv9qs+EwweeNh3ahWOHGxSAiHX5W23i3GoXzlLHwbmJKE9gh6pS67 3G7OhLhBQn0V9qDigDOkAlboYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTRgdUV S8qpA4dOv50My0rVqRj4MB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt cGtsZGdTYWhPZnhBU1RnQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFiAhtumlbdfzyJcbTjnYkK6cEQ8WOOn+rovoxWVUIIhcwR9XJehrL xMFzU5rmTg24cBDbWsKRwVsVhZ15B9hZWEGK5Lfg0DEjecMR6Z5Z+bpTKuZPRsWY R7/zSp8CU1hhEaX//NW39xr7kHcJQZqoQBHNpDlDa+jEbudEXV59ke7bviVO3Ha+ 4MkBVNy+9hg4jlRJAClU8Vp3YI1JHV3Pl6FWHRsw+4FHUUTZxxSwh0KlD8RGft48 ynn+ZoGbHWaO2Zjs9swxcZdEZMVu/fGBP7MZ8BDj8eL4JQ2Hm/TVWwXIHAaG46u6 h63TTVuq9GvqB39v3PkGl2j4FJZsRtyg -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:03 2025 by rpki-client