$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: Z6iRw37qXCCRypVlPg0jX/U+CpD0Veyo9+qla2lgvrg= Subject key identifier: 93:B5:11:79:E6:AF:95:B9:41:B1:29:66:D3:C6:B0:CB:E5:EA:35:C6 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: C0 Signing time: Fri 25 Apr 2025 05:01:55 +0000 Manifest this update: Fri 25 Apr 2025 05:01:54 +0000 Manifest next update: Fri 02 May 2025 05:01:54 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: BX5P1reQPvSerUlGcdBLS5rhdrmrH0izAGhRXKGHFeI=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Apr 25 05:01:54 2025 GMT Not After : May 2 05:01:54 2025 GMT Subject: CN=680b1743-3b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:93:7b:25:db:ac:34:2a:bd:dc:af:15:db: 41:6f:ec:d7:c1:d7:55:e4:c8:22:ed:19:42:35:ce: 90:b3:ec:0a:8a:40:8f:e6:d5:fe:95:8a:cf:8a:79: c8:7f:c2:36:1a:0e:cb:df:84:7d:f9:6d:53:43:0e: f5:8e:2e:4b:4c:c0:da:b3:04:d6:79:e2:97:00:0a: 7c:de:df:ca:2a:21:43:bc:d1:7d:32:6d:6e:ee:22: 33:9c:22:29:ee:b4:9f:43:ef:b8:f3:c5:0e:be:3a: 4f:b5:5f:d4:a9:1d:94:aa:d2:39:a1:20:31:b6:a8: 96:3f:ab:4d:12:3b:f2:7f:83:5e:9d:2a:3b:f6:5b: 82:41:f3:19:10:58:02:97:36:79:72:2f:5e:45:de: 0c:6e:94:87:ca:c5:e9:aa:09:dc:83:de:ae:a0:28: 6e:50:e3:24:ac:d9:dd:69:69:c1:ef:51:70:3d:ce: 85:d2:71:84:57:eb:07:7d:ab:07:42:06:0c:9d:1d: 47:f2:dc:ea:6a:b1:41:dd:ff:65:67:7b:f2:89:e2: 17:91:10:e8:f8:d2:c9:a7:bf:b4:d6:88:bc:21:d4: 02:c2:c5:9c:18:64:12:4e:4f:a6:ca:0e:9b:05:fd: ef:74:b6:9f:db:39:c7:8d:2d:f2:40:28:d1:a3:06: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B5:11:79:E6:AF:95:B9:41:B1:29:66:D3:C6:B0:CB:E5:EA:35:C6 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:56:ba:22:22:c9:54:e0:1d:e0:89:40:f6:11:0b:b4:88:e2: 6c:f8:fc:2f:44:8c:fb:84:a5:59:a5:7c:b8:02:7d:8e:1e:5b: 92:2e:be:1f:b9:0c:61:51:37:2d:60:f7:e6:78:fb:ec:b1:69: 9a:63:c5:45:0d:64:b3:33:0a:2f:9e:ba:06:59:07:e5:73:15: 95:98:44:2a:d7:07:f8:6d:c9:39:d5:fe:3c:64:a3:b6:a4:47: b5:f5:eb:c3:91:d5:3a:17:6f:59:3f:0e:61:e1:80:f3:76:8b: 00:4b:51:6b:a8:82:7e:5d:bb:61:44:99:6d:5b:69:6f:c5:9c: 36:84:12:18:06:ff:c4:36:0e:33:22:a8:ac:3d:8c:e5:fe:97: e2:e5:a3:6e:58:ca:ae:2c:56:c7:78:4a:71:95:07:cf:6a:9c: a2:c3:8e:7e:e1:ec:15:51:d1:7d:7e:77:7d:ff:6f:fe:d4:45: 0c:0b:60:09:07:66:ec:c0:91:d9:3c:cd:8d:1d:04:a9:cf:15: 71:f0:f2:41:a6:19:97:22:a4:be:08:bc:43:6d:fc:23:95:56: db:3a:61:e9:e1:51:81:76:43:1a:fd:67:3e:b5:95:fb:49:19: d4:0b:c4:79:9d:34:bb:4e:e0:a3:55:02:83:2e:b6:8f:96:15: 85:92:fa:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwNDI1MDUwMTU0WhcNMjUwNTAyMDUwMTU0WjAYMRYwFAYD VQQDEw02ODBiMTc0My0zYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZGTeyXbrDQqvdyvFdtBb+zXwddV5Mgi7RlCNc6Qs+wKikCP5tX+lYrPinnI f8I2Gg7L34R9+W1TQw71ji5LTMDaswTWeeKXAAp83t/KKiFDvNF9Mm1u7iIznCIp 7rSfQ++488UOvjpPtV/UqR2UqtI5oSAxtqiWP6tNEjvyf4NenSo79luCQfMZEFgC lzZ5ci9eRd4MbpSHysXpqgncg96uoChuUOMkrNndaWnB71FwPc6F0nGEV+sHfasH QgYMnR1H8tzqarFB3f9lZ3vyieIXkRDo+NLJp7+01oi8IdQCwsWcGGQSTk+myg6b Bf3vdLaf2znHjS3yQCjRowao8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO1EXnm r5W5QbEpZtPGsMvl6jXGMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvVroiIslU4B3giUD2EQu0iOJs+PwvRIz7hKVZpXy4An2OHluSLr4f uQxhUTctYPfmePvssWmaY8VFDWSzMwovnroGWQflcxWVmEQq1wf4bck51f48ZKO2 pEe19evDkdU6F29ZPw5h4YDzdosAS1FrqIJ+XbthRJltW2lvxZw2hBIYBv/ENg4z IqisPYzl/pfi5aNuWMquLFbHeEpxlQfPapyiw45+4ewVUdF9fnd9/2/+1EUMC2AJ B2bswJHZPM2NHQSpzxVx8PJBphmXIqS+CLxDbfwjlVbbOmHp4VGBdkMa/Wc+tZX7 SRnUC8R5nTS7TuCjVQKDLraPlhWFkvo1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:23 2025 by rpki-client