$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: TYUdYoAJkHNFqysR2h8Bd3INzOUFDdA/DT9CvdXRDRE= Subject key identifier: 95:99:68:40:96:B4:80:CA:6E:C2:3D:62:99:37:54:08:84:4D:2A:B8 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 0744 Signing time: Sat 26 Apr 2025 21:21:56 +0000 Manifest this update: Sat 26 Apr 2025 21:21:55 +0000 Manifest next update: Sat 03 May 2025 21:21:55 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: j9583M9hXFv1KpYyvhmPdG+f4iezV4FdxOAv/Jex80s=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: JZswEN+XecxArpSSM4RVMDRfDgGMw001dDeS9M+57zo=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: oEPtlYq/nXMulTOfDIA15K7NQ6WPK/Aw89/ToBV4eiI=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: a7MdMxFeYrNOuayo2yExYYUNllObfBGwl1IXCgsh4ko=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Apr 26 21:21:55 2025 GMT Not After : May 3 21:21:55 2025 GMT Subject: CN=680d4e73-662c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:02:51:e8:2a:2a:8b:b2:d8:e4:97:46:74: c5:04:51:d3:67:78:78:19:ea:98:8c:86:9b:73:ce: 3f:84:3d:30:2f:5f:fe:47:78:91:1e:44:36:b3:be: ab:e8:7c:de:b8:3d:88:91:0a:c9:34:8e:13:a9:2d: 6f:03:bb:ed:a9:2e:60:16:e5:fb:e9:9b:e9:92:64: 2e:fa:68:5c:f3:cf:bb:9f:62:9e:6f:42:39:2f:8c: 54:f1:db:eb:8f:3e:a8:50:0f:d3:48:b9:87:22:e7: f2:b8:11:96:cb:12:c7:0d:cb:17:68:7c:54:8a:24: ca:f1:bb:32:b7:8d:93:09:9a:74:2f:c1:78:38:c4: ea:a0:35:96:be:65:f9:ed:60:39:76:81:94:8e:7e: 98:37:30:ec:19:1e:78:10:66:cb:91:74:77:98:4d: 43:bb:10:49:01:87:2c:bb:24:db:cd:ed:0f:2e:ab: 72:5b:52:09:f3:67:f4:be:16:06:24:f8:73:67:ec: 5c:a3:b6:bd:42:47:46:8d:1a:41:7f:ae:cf:a6:b9: 0c:6e:8c:9d:05:9f:a4:5a:6c:fd:e5:61:ad:de:53: e2:79:0a:95:47:6d:98:63:a5:14:3e:c9:51:0e:36: ba:80:ec:e6:9f:61:a5:ea:2a:7d:1b:e3:64:98:e1: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:68:40:96:B4:80:CA:6E:C2:3D:62:99:37:54:08:84:4D:2A:B8 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7b:fa:63:9c:93:cf:4a:b0:15:e6:6e:e1:cd:88:57:55:1a: 05:c4:bb:06:a1:47:e4:c9:b1:67:60:1a:ba:77:a4:54:3e:00: ba:76:12:ec:f6:59:ac:e3:c3:5e:13:17:27:05:da:03:65:54: cd:ba:b6:98:d9:6b:ff:a1:aa:e6:d6:59:b3:6c:fb:f2:8f:71: 10:38:a9:50:6c:12:50:74:c5:5f:16:52:a8:7c:df:06:67:3b: 3d:56:1a:84:1c:44:cf:a1:0f:f1:14:ea:20:8d:64:9b:45:0c: 7b:4f:33:4b:46:4c:99:95:33:35:69:ba:72:6d:6a:9f:4e:92: 25:85:33:7a:12:4d:16:5a:e1:a3:40:7e:93:0b:96:4d:da:d5: 62:92:3d:b5:31:fe:a2:d5:bf:aa:dd:d2:9a:17:93:23:78:a2: 03:3d:6d:a3:ab:2a:55:4f:52:60:8d:60:40:a1:4d:31:dd:34: 56:0e:f8:3b:81:56:1d:7f:a0:ca:2d:a9:48:1c:6f:70:c0:1a: f5:78:4d:ae:a7:6c:26:8d:40:09:da:03:d5:04:de:14:bc:69: 7e:d1:a1:9d:b0:09:88:2e:ca:b6:86:14:ee:89:4b:50:5d:c2: 13:16:58:cf:30:86:8b:67:e0:c3:eb:98:31:90:d2:bb:af:fd: a9:09:b1:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUwNDI2MjEyMTU1WhcNMjUwNTAzMjEyMTU1WjAYMRYwFAYD VQQDEw02ODBkNGU3My02NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ToCUegqKouy2OSXRnTFBFHTZ3h4GeqYjIabc84/hD0wL1/+R3iRHkQ2s76r 6HzeuD2IkQrJNI4TqS1vA7vtqS5gFuX76ZvpkmQu+mhc88+7n2Keb0I5L4xU8dvr jz6oUA/TSLmHIufyuBGWyxLHDcsXaHxUiiTK8bsyt42TCZp0L8F4OMTqoDWWvmX5 7WA5doGUjn6YNzDsGR54EGbLkXR3mE1DuxBJAYcsuyTbze0PLqtyW1IJ82f0vhYG JPhzZ+xco7a9QkdGjRpBf67PprkMboydBZ+kWmz95WGt3lPieQqVR22YY6UUPslR Dja6gOzmn2Gl6ip9G+NkmOGnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWZaECW tIDKbsI9Ypk3VAiETSq4MB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALe/pjnJPPSrAV5m7hzYhXVRoFxLsGoUfkybFnYBq6d6RUPgC6dhLs 9lms48NeExcnBdoDZVTNuraY2Wv/oarm1lmzbPvyj3EQOKlQbBJQdMVfFlKofN8G Zzs9VhqEHETPoQ/xFOogjWSbRQx7TzNLRkyZlTM1abpybWqfTpIlhTN6Ek0WWuGj QH6TC5ZN2tVikj21Mf6i1b+q3dKaF5MjeKIDPW2jqypVT1JgjWBAoU0x3TRWDvg7 gVYdf6DKLalIHG9wwBr1eE2up2wmjUAJ2gPVBN4UvGl+0aGdsAmILsq2hhTuiUtQ XcITFljPMIaLZ+DD65gxkNK7r/2pCbE3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:08:33 2025 by rpki-client