$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft File: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json) Hash identifier: v0A8r3/9s88Xin81e7nveSCthoXNpBCa6ESHcgUrF54= Subject key identifier: 40:FC:75:08:8A:A4:8E:E1:F6:3F:D2:4E:85:06:E9:5B:D4:6F:DB:F3 Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB Certificate issuer: /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft Manifest number: 08F5 Signing time: Thu 24 Apr 2025 20:13:58 +0000 Manifest this update: Thu 24 Apr 2025 20:13:57 +0000 Manifest next update: Thu 01 May 2025 20:13:57 +0000 Files and hashes: 1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: 6oHH+1hqlmFYhhebnDbTFYkIwMhyJhyLUxhRb1PuTYs=) 2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5DA, serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Validity Not Before: Apr 24 20:13:57 2025 GMT Not After : May 1 20:13:57 2025 GMT Subject: CN=680a9b86-c8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:18:7c:22:e4:fe:5f:f2:32:16:7e:ab:e0: 8d:88:ff:22:30:23:1d:c3:ae:6b:fe:d1:f8:e5:bc: 73:57:bf:39:3d:8d:40:b3:05:ce:5c:cc:b6:ab:81: ec:60:25:c5:55:c5:9a:f5:b5:ba:d5:05:d5:46:43: 4f:77:7c:a8:4a:d6:15:8d:0f:f9:95:a9:62:8b:79: 00:36:a9:74:b4:d5:46:58:00:a4:3c:12:10:f3:bb: 16:73:fb:a5:65:5e:ae:ed:f5:fa:d4:5c:09:9c:2f: bf:d2:ae:0e:3f:23:6e:39:7e:1f:30:34:43:da:2a: 35:af:8f:9d:75:2f:d7:e4:72:7c:42:1c:b0:aa:a7: ec:d6:c9:c1:17:31:bf:18:b5:85:37:93:41:49:a8: 7a:e5:cb:6c:c2:8a:e4:0f:62:a1:0b:58:b8:bb:22: f6:37:23:cd:c1:17:da:f6:db:3a:96:5f:9d:4e:2d: 65:12:e1:d6:6a:1b:57:d0:cf:03:c2:46:37:b7:f1: 8a:1a:9a:3d:fd:66:92:4c:15:00:b9:20:fd:c4:0b: 30:15:53:ee:b4:41:7a:d7:08:e8:47:4f:05:de:bd: 1d:4a:80:79:e9:12:29:0b:35:c1:d3:33:be:46:dc: af:94:3f:c7:2e:67:7b:80:f4:53:2f:74:43:3c:78: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:75:08:8A:A4:8E:E1:F6:3F:D2:4E:85:06:E9:5B:D4:6F:DB:F3 X509v3 Authority Key Identifier: keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bd:16:90:c6:84:43:7b:f3:85:3e:e8:18:78:e3:d4:e1:3c: 49:cf:96:b3:e8:98:87:fe:9e:77:07:e6:c2:f9:6d:6b:ea:d8: 9a:e4:d1:0d:b9:c9:d0:32:bd:d9:63:50:18:09:32:48:8c:9d: 7f:77:0f:df:4c:62:fe:23:72:99:4c:cf:cb:a4:31:a4:94:75: 67:bb:ba:9d:fa:4b:45:c7:ad:af:9b:8c:1b:e6:45:28:e6:c1: a2:cb:8a:ae:94:a8:5c:2b:d5:31:8a:20:06:3f:03:48:e6:49: 99:59:c2:09:0f:4e:63:a5:31:7e:86:35:19:ae:18:d7:b7:47: 2f:e3:fa:f7:57:3c:6c:be:d9:84:50:7f:8e:2e:99:a4:3b:fc: bf:80:39:ea:34:4a:13:19:b5:7e:51:ad:cd:4f:1b:75:04:3b: 1c:70:7c:ed:fc:d5:f9:84:42:1a:bf:32:b1:dd:17:63:e9:29: a2:65:1a:02:50:97:1b:de:51:82:a4:20:14:40:2c:2c:e4:0f: 04:c8:58:a3:95:8e:80:71:ad:e7:b8:b4:af:a1:e8:a3:74:72: e8:4a:0a:97:cc:a1:08:a6:ab:17:7a:23:29:ae:10:f6:ab:bf: 50:e5:c6:39:0c:44:1a:b3:48:a9:e5:ac:32:83:12:4f:31:ea: 35:12:13:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1REExMTAvBgNVBAUTKDBFQkREMkJGNDQ5RUYzMzQ0MDYzNTE1NTNGMEVENjgz MkU0NkU0Q0IwHhcNMjUwNDI0MjAxMzU3WhcNMjUwNTAxMjAxMzU3WjAYMRYwFAYD VQQDEw02ODBhOWI4Ni1jOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXMYfCLk/l/yMhZ+q+CNiP8iMCMdw65r/tH45bxzV785PY1AswXOXMy2q4Hs YCXFVcWa9bW61QXVRkNPd3yoStYVjQ/5lalii3kANql0tNVGWACkPBIQ87sWc/ul ZV6u7fX61FwJnC+/0q4OPyNuOX4fMDRD2io1r4+ddS/X5HJ8Qhywqqfs1snBFzG/ GLWFN5NBSah65ctsworkD2KhC1i4uyL2NyPNwRfa9ts6ll+dTi1lEuHWahtX0M8D wkY3t/GKGpo9/WaSTBUAuSD9xAswFVPutEF61wjoR08F3r0dSoB56RIpCzXB0zO+ RtyvlD/HLmd7gPRTL3RDPHg4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED8dQiK pI7h9j/SToUG6VvUb9vzMB8GA1UdIwQYMBaAFA690r9EnvM0QGNRVT8O1oMuRuTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVEQS9CODQ4REY2OEE2 MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6UkFZMUZWUHc3V2d5NUc1 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RyM1N2MFNlOHpSQVkxRlZQdzdXZ3k1RzVNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVEQS9CODQ4REY2OEE2MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6 UkFZMUZWUHc3V2d5NUc1TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqvRaQxoRDe/OFPugYeOPU4TxJz5az6JiH/p53B+bC+W1r6tia5NEN ucnQMr3ZY1AYCTJIjJ1/dw/fTGL+I3KZTM/LpDGklHVnu7qd+ktFx62vm4wb5kUo 5sGiy4qulKhcK9UxiiAGPwNI5kmZWcIJD05jpTF+hjUZrhjXt0cv4/r3VzxsvtmE UH+OLpmkO/y/gDnqNEoTGbV+Ua3NTxt1BDsccHzt/NX5hEIavzKx3Rdj6SmiZRoC UJcb3lGCpCAUQCws5A8EyFijlY6Aca3nuLSvoeijdHLoSgqXzKEIpqsXeiMprhD2 q79Q5cY5DEQas0ip5awygxJPMeo1EhMm -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:29 2025 by rpki-client