$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json) Hash identifier: myHStGkv/4ikDN9Qm10gTfojRLf/0EAwffyHghe9Afc= Subject key identifier: DF:E6:D7:25:AE:9B:1A:ED:1D:9B:12:06:AD:9D:DB:99:C4:07:1E:A9 Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft Manifest number: 0911 Signing time: Thu 24 Apr 2025 20:11:59 +0000 Manifest this update: Thu 24 Apr 2025 20:11:59 +0000 Manifest next update: Thu 01 May 2025 20:11:59 +0000 Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: vr7c/3r5nWupvcPiYc/M1k5VPRDgB7C2bTxJ984/owQ=) 2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: 8rvezRlfEmng/UgYNLuDBBrL/AQ4sVZHRDguwah88WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Validity Not Before: Apr 24 20:11:59 2025 GMT Not After : May 1 20:11:59 2025 GMT Subject: CN=680a9b0f-50c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:0c:c7:2e:f8:43:c5:e3:f4:c3:23:36:b6: ab:4b:30:0d:7b:ff:04:f6:99:d8:51:ce:c0:30:e1: 68:d6:7b:15:1c:01:ad:45:3a:7f:92:97:65:fe:d4: 2c:7f:05:f6:c0:83:9d:f4:74:f4:42:94:9a:ea:14: ed:b5:45:5c:95:b7:72:ad:d1:27:9f:42:21:0b:99: 7d:a5:41:a0:56:3d:a2:6c:82:db:71:0a:26:f0:ba: 9a:fe:9a:2e:79:ff:48:ee:d1:d0:a2:ad:10:6c:9e: 6b:2a:4d:fc:cb:c5:7a:16:6f:80:8c:73:8b:fd:be: e6:4f:25:9b:a5:e1:be:f0:b2:50:83:6f:2c:df:d1: 0e:40:f8:33:95:fc:bc:08:3a:4b:03:26:bf:01:39: bc:79:80:59:a8:7d:a3:48:d4:3d:bc:fe:9a:7e:5f: aa:8a:20:12:16:61:52:80:54:eb:8e:6e:31:ae:a9: 65:d0:d1:0e:e2:4d:7c:a8:6e:5c:0e:a3:f2:e2:eb: 8b:57:c6:62:bc:0e:5d:6f:ea:ff:c5:83:e8:99:97: 9a:db:58:9a:89:64:3e:b5:ae:dd:88:0c:2f:84:a6: f8:fd:20:3e:0e:b6:cd:65:ad:ed:a2:8f:19:5e:5c: b4:15:06:e2:c2:e9:91:3a:a1:85:d1:ae:39:1f:d2: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:D7:25:AE:9B:1A:ED:1D:9B:12:06:AD:9D:DB:99:C4:07:1E:A9 X509v3 Authority Key Identifier: keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:55:db:ab:18:eb:10:24:5a:d6:1f:5c:8a:8e:bf:21:53:ec: eb:85:9c:76:09:66:56:88:30:e9:d6:db:e3:ca:f2:a4:27:8b: 6c:b7:20:1d:30:11:f6:61:c4:af:8a:14:0f:f5:4d:5d:4c:a9: 8d:49:7a:de:ac:b4:39:be:d7:6e:e2:68:bc:5d:d0:0d:ef:7b: 0d:f8:fd:4e:29:cd:86:fd:c5:cc:e4:d0:6b:05:cc:84:fd:f0: b5:4f:9d:97:ad:8b:f0:27:64:c2:33:4c:7f:a1:c9:50:1c:ec: dd:ad:3a:16:31:60:c3:00:4d:e9:ec:f2:a6:16:52:dd:4b:48: 5a:6c:73:cb:36:14:01:14:96:2d:80:8b:22:8e:f3:3d:df:e7: b6:8d:9c:2f:5f:f0:12:43:67:96:7d:50:25:2d:0a:33:04:24: fc:32:64:33:2b:f5:16:38:fa:13:15:61:43:cf:60:92:75:99: f0:80:3d:25:9b:9b:71:75:77:79:56:38:31:63:88:9e:38:84: 3c:6b:af:6c:6a:70:ca:4c:24:2c:e1:67:24:06:77:86:b1:91: b4:25:4c:79:3f:d4:ce:ff:30:fa:7d:e8:d3:e6:de:b8:f6:07: 3b:e1:f8:f7:f8:79:63:c7:98:48:d7:d8:01:9c:77:d5:2d:d7: 11:4e:91:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy OEFFNEZEM0YwHhcNMjUwNDI0MjAxMTU5WhcNMjUwNTAxMjAxMTU5WjAYMRYwFAYD VQQDEw02ODBhOWIwZi01MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTkMxy74Q8Xj9MMjNrarSzANe/8E9pnYUc7AMOFo1nsVHAGtRTp/kpdl/tQs fwX2wIOd9HT0QpSa6hTttUVclbdyrdEnn0IhC5l9pUGgVj2ibILbcQom8Lqa/pou ef9I7tHQoq0QbJ5rKk38y8V6Fm+AjHOL/b7mTyWbpeG+8LJQg28s39EOQPgzlfy8 CDpLAya/ATm8eYBZqH2jSNQ9vP6afl+qiiASFmFSgFTrjm4xrqll0NEO4k18qG5c DqPy4uuLV8ZivA5db+r/xYPomZea21iaiWQ+ta7diAwvhKb4/SA+DrbNZa3too8Z Xly0FQbiwumROqGF0a45H9IxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/m1yWu mxrtHZsSBq2d25nEBx6pMB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS NVFhenM1bkNDaUlvcmtfVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuVdurGOsQJFrWH1yKjr8hU+zrhZx2CWZWiDDp1tvjyvKkJ4tstyAd MBH2YcSvihQP9U1dTKmNSXrerLQ5vtdu4mi8XdAN73sN+P1OKc2G/cXM5NBrBcyE /fC1T52XrYvwJ2TCM0x/oclQHOzdrToWMWDDAE3p7PKmFlLdS0habHPLNhQBFJYt gIsijvM93+e2jZwvX/ASQ2eWfVAlLQozBCT8MmQzK/UWOPoTFWFDz2CSdZnwgD0l m5txdXd5VjgxY4ieOIQ8a69sanDKTCQs4WckBneGsZG0JUx5P9TO/zD6fejT5t64 9gc74fj3+Hljx5hI19gBnHfVLdcRTpE7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:41 2025 by rpki-client