$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: Yo6ME+NXiN0/IFOuODjcFRLnuBG1bqN65qZBBiLO2lk= Subject key identifier: 6A:3D:7B:68:EC:F5:69:45:3E:B8:B6:19:2E:D4:62:49:71:9F:27:A8 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 21 Signing time: Fri 25 Apr 2025 06:49:29 +0000 Manifest this update: Fri 25 Apr 2025 06:49:29 +0000 Manifest next update: Fri 02 May 2025 06:49:29 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: +AiWmp0qQtI+u9IAEaB5OPNqEdkWqNY3oWi5DFQpiNo=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: VAI7zkNz19dGI6fGQU68XKDlsZjsYQpjUZnb2rSND4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Apr 25 06:49:29 2025 GMT Not After : May 2 06:49:29 2025 GMT Subject: CN=680b3079-3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:18:e1:48:11:73:4f:90:4c:35:78:f7:f4: 84:9d:92:84:f0:59:43:42:f5:b7:c2:c8:83:c4:15: 66:e6:a6:4b:3f:27:f1:3a:19:f7:21:82:0b:c5:f2: cb:2c:5e:fc:c9:a7:c6:3b:66:27:32:b0:2c:8b:54: 6c:8f:84:e6:88:f4:42:21:c6:44:7d:19:94:db:a4: ae:f7:fd:f9:4e:1b:bf:43:bd:47:3a:db:ee:31:7e: 91:c1:6f:1e:2e:c0:bb:f0:29:23:f2:8e:4f:8b:ae: e3:e6:26:64:a2:df:70:ed:90:c2:db:02:96:4c:78: c5:12:fe:3d:26:4c:55:7e:75:2a:e1:7b:a3:49:87: a5:95:81:c7:c6:85:f2:df:eb:89:46:6f:3d:d5:72: 00:bb:81:8d:f1:7b:44:b0:1b:5e:ed:39:ef:6d:b6: 7d:f7:d6:48:cd:34:13:8e:c1:30:6c:ce:69:e7:e8: 68:87:d0:65:18:cf:1c:1d:c3:7f:bf:a4:04:bc:d8: b4:b6:9c:32:a4:2a:3b:b2:2e:32:ca:55:1b:9b:4a: 3f:1c:16:49:21:6a:45:e6:a6:b8:2a:5c:26:65:78: ce:7f:3d:e9:51:24:b9:8a:58:19:e4:35:a8:96:16: ec:07:cd:9e:ba:cb:d5:0d:ad:db:b0:15:35:5d:97: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:7B:68:EC:F5:69:45:3E:B8:B6:19:2E:D4:62:49:71:9F:27:A8 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:eb:79:7c:24:76:6f:c2:58:68:b3:d7:f8:14:88:50:c9:77: 62:93:a3:89:4e:51:59:54:bd:bf:01:76:61:e9:f1:8c:45:98: f1:f3:43:2f:d9:81:4c:51:d5:f3:ad:4e:87:dd:cc:95:d2:08: 7f:05:88:40:2d:15:7e:8f:25:62:fb:80:99:70:51:fb:9e:06: 73:06:f7:53:53:5a:9b:cf:5e:80:3b:bb:12:ad:48:24:f4:e7: 5c:dc:71:a2:f4:ce:bd:74:64:0c:ef:87:16:3a:99:c2:a8:bf: 60:88:38:1f:da:2a:95:9f:36:57:8a:a7:7b:a5:04:86:8d:a5: 48:b6:76:3d:dd:15:ec:3f:14:b8:e8:7f:51:89:62:1f:a3:ff: db:f5:6c:4f:8c:6d:00:0e:b5:f6:e1:dc:71:df:de:49:b5:4f: 94:8f:76:13:c9:fe:7b:80:2c:da:4d:b2:cf:83:78:92:63:53: 18:8b:a0:ae:7d:98:08:42:a7:ee:87:26:e3:48:9d:a8:11:91: d3:c4:42:34:25:68:0f:91:37:35:a6:0a:df:32:ef:13:48:b2: 84:38:03:3a:a3:78:97:1e:21:da:23:a5:13:2b:4d:1e:c0:e3: 8e:82:14:23:27:87:8a:79:90:af:e4:26:ad:e6:81:40:c1:b3: 3d:ad:17:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA0MjUwNjQ5MjlaFw0yNTA1MDIwNjQ5MjlaMBgxFjAUBgNV BAMTDTY4MGIzMDc5LTM5MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm9xjhSBFzT5BMNXj39ISdkoTwWUNC9bfCyIPEFWbmpks/J/E6GfchggvF8sss XvzJp8Y7ZicysCyLVGyPhOaI9EIhxkR9GZTbpK73/flOG79DvUc62+4xfpHBbx4u wLvwKSPyjk+LruPmJmSi33DtkMLbApZMeMUS/j0mTFV+dSrhe6NJh6WVgcfGhfLf 64lGbz3VcgC7gY3xe0SwG17tOe9ttn331kjNNBOOwTBszmnn6GiH0GUYzxwdw3+/ pAS82LS2nDKkKjuyLjLKVRubSj8cFkkhakXmprgqXCZleM5/PelRJLmKWBnkNaiW FuwHzZ66y9UNrduwFTVdl0rZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaj17aOz1 aUU+uLYZLtRiSXGfJ6gwHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPreXwkdm/CWGiz1/gUiFDJd2KTo4lOUVlUvb8BdmHp8YxFmPHzQy/Z gUxR1fOtTofdzJXSCH8FiEAtFX6PJWL7gJlwUfueBnMG91NTWpvPXoA7uxKtSCT0 51zccaL0zr10ZAzvhxY6mcKov2CIOB/aKpWfNleKp3ulBIaNpUi2dj3dFew/FLjo f1GJYh+j/9v1bE+MbQAOtfbh3HHf3km1T5SPdhPJ/nuALNpNss+DeJJjUxiLoK59 mAhCp+6HJuNInagRkdPEQjQlaA+RNzWmCt8y7xNIsoQ4AzqjeJceIdojpRMrTR7A 446CFCMnh4p5kK/kJq3mgUDBsz2tF0k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:50 2025 by rpki-client