$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json) Hash identifier: B4JnpTCA42vUggeTtMcsaCCoAdMr2uU2p424Q9dl7yE= Subject key identifier: 0E:0B:E6:E5:C3:83:7F:42:FD:FF:89:F7:7D:94:B0:C6:EF:41:FB:67 Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:32:13 +0000 Manifest this update: Fri 25 Apr 2025 05:32:12 +0000 Manifest next update: Fri 02 May 2025 05:32:12 +0000 Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: FWRrZ5JDjJpV3RtMRsJ5VsZwsEfY+fIVKjC3a9uuAHQ=) 2: 609701825A1611EF9ED11513C4F9AE02.roa (hash: bgNsvlct6cf/BWMOzM4D0nnTwsIX5vRKPjJTejU5LP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C Validity Not Before: Apr 25 05:32:12 2025 GMT Not After : May 2 05:32:12 2025 GMT Subject: CN=680b1e5d-ee62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:97:2b:3d:0b:7b:fa:b8:33:24:ec:2f:d4: 98:37:e6:95:7c:1b:91:86:ff:02:4e:97:6f:f4:36: b2:b5:7f:65:2e:07:aa:2b:d5:73:87:8f:ce:85:0c: be:8c:a7:0e:57:88:0e:df:b3:f1:47:c2:7d:2e:5f: 02:8e:93:bc:72:f0:ee:be:1c:79:79:06:4e:53:ea: 0a:18:f2:2b:27:3d:d3:aa:1c:6c:49:dd:62:55:54: aa:f0:e1:a8:72:bb:08:77:d4:b2:02:cd:02:c4:d9: 59:03:f9:6f:63:ef:08:55:ee:2f:7b:a2:68:1c:8b: 65:e6:92:1b:a5:f2:55:fa:ea:e2:23:89:f6:04:42: 35:0c:d8:12:7c:48:6b:56:a3:69:b9:1e:33:62:e0: cc:0e:8c:50:c6:0b:06:21:48:31:cb:1c:df:da:df: 3b:13:c5:c4:2e:df:4c:41:5a:89:a1:4a:fc:a4:61: 29:d9:b8:ea:7c:d1:bd:fd:6c:88:23:76:a2:51:02: 66:17:eb:b4:db:de:9a:36:a7:71:54:8c:47:54:02: c1:14:4b:71:cc:22:5a:23:b0:0d:31:de:e7:71:86: e9:87:7f:56:43:03:a8:59:9b:93:cf:f2:2e:de:9d: 35:17:99:a6:84:b4:f2:71:61:cd:f8:38:4d:c7:a4: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:E6:E5:C3:83:7F:42:FD:FF:89:F7:7D:94:B0:C6:EF:41:FB:67 X509v3 Authority Key Identifier: keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:94:4b:da:f8:3a:ab:f0:ed:38:88:ee:de:0c:41:31:e2:76: 40:b1:44:cd:ed:0b:3c:4a:8b:8c:41:4e:0b:53:23:05:02:b0: 04:59:42:86:c3:76:49:13:49:9b:83:69:f9:e8:f8:5f:43:c9: 88:52:2c:e6:fb:18:9b:95:76:0b:eb:59:d4:39:ec:5d:06:f2: dc:d0:b8:57:b5:4a:bd:72:87:96:e3:ad:18:61:74:f8:34:d3: e5:33:24:59:9e:d2:cc:dd:d6:4d:92:a3:39:de:be:c8:e4:07: 0a:24:c6:7e:db:1f:ae:7b:b3:86:21:bd:7b:59:b7:d1:55:c2: 8b:6c:bd:5c:6a:69:36:ec:e5:a0:46:21:14:46:83:99:90:37: 32:21:9b:6c:2b:4e:45:80:05:bb:96:f1:71:7c:6a:9d:95:d1: 24:27:e6:63:95:32:ba:2b:db:0c:bf:5e:3c:1d:26:10:84:56: b4:a0:24:96:e7:94:90:1e:54:27:da:bd:08:f6:0b:97:7b:41: fa:2a:46:38:65:64:18:d0:a2:7d:36:5e:95:ed:14:6f:fe:4c: f5:03:ac:75:c2:29:c5:ca:c3:ff:2d:c0:3c:e2:10:00:1d:b9: 09:95:d6:31:3f:14:22:19:11:28:03:67:54:4b:88:c2:85:07: 2e:ce:cb:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5 MTUzOEM1NUMwHhcNMjUwNDI1MDUzMjEyWhcNMjUwNTAyMDUzMjEyWjAYMRYwFAYD VQQDEw02ODBiMWU1ZC1lZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AiXKz0Le/q4MyTsL9SYN+aVfBuRhv8CTpdv9DaytX9lLgeqK9Vzh4/OhQy+ jKcOV4gO37PxR8J9Ll8CjpO8cvDuvhx5eQZOU+oKGPIrJz3TqhxsSd1iVVSq8OGo crsId9SyAs0CxNlZA/lvY+8IVe4ve6JoHItl5pIbpfJV+uriI4n2BEI1DNgSfEhr VqNpuR4zYuDMDoxQxgsGIUgxyxzf2t87E8XELt9MQVqJoUr8pGEp2bjqfNG9/WyI I3aiUQJmF+u0296aNqdxVIxHVALBFEtxzCJaI7ANMd7ncYbph39WQwOoWZuTz/Iu 3p01F5mmhLTycWHN+DhNx6Q6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4L5uXD g39C/f+J932UsMbvQftnMB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkNEQS8yQzdFNzJCODVBMTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJu ZmhpYlViNG00bHlSVTR4VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvlEva+Dqr8O04iO7eDEEx4nZAsUTN7Qs8SouMQU4LUyMFArAEWUKG w3ZJE0mbg2n56PhfQ8mIUizm+xiblXYL61nUOexdBvLc0LhXtUq9coeW460YYXT4 NNPlMyRZntLM3dZNkqM53r7I5AcKJMZ+2x+ue7OGIb17WbfRVcKLbL1camk27OWg RiEURoOZkDcyIZtsK05FgAW7lvFxfGqdldEkJ+ZjlTK6K9sMv148HSYQhFa0oCSW 55SQHlQn2r0I9guXe0H6KkY4ZWQY0KJ9Nl6V7RRv/kz1A6x1winFysP/LcA84hAA HbkJldYxPxQiGREoA2dUS4jChQcuzssg -----END CERTIFICATE-----Generated at Sat Apr 26 05:17:19 2025 by rpki-client