$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: 2TBoWjqTapFAG6+6MzGyQP3Ryabc7fieTbM5SxjhiOI= Subject key identifier: FE:7A:AA:0B:28:93:81:77:44:EB:7E:D7:DC:03:E6:5F:7E:6A:F8:B1 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 0306 Signing time: Fri 25 Apr 2025 00:59:38 +0000 Manifest this update: Fri 25 Apr 2025 00:59:37 +0000 Manifest next update: Fri 02 May 2025 00:59:37 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: OR8Phc7KX4fJ4Koy1jX2v/eNI6jPOIgyYgkQWpLKdjU=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: ATHtpOo5iB32fJStBSLmEkpBLzW5yPkGZ3s+RacPoK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Apr 25 00:59:37 2025 GMT Not After : May 2 00:59:37 2025 GMT Subject: CN=680ade79-0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:fb:64:97:b3:a4:f0:cb:5e:e8:aa:ab:12: 94:8a:cb:ed:ea:64:e4:c1:0c:20:6b:41:8b:88:05: d1:30:96:25:3d:3c:a6:49:19:56:10:03:18:55:ee: 6e:45:10:c6:69:d9:ce:17:5b:27:b4:5b:79:ce:42: 35:63:8b:cd:14:17:7e:33:4d:47:2b:84:84:0f:ed: 0f:a7:51:79:3c:44:f3:39:b4:97:77:3e:ec:b3:c1: e9:0d:b7:66:f8:ae:ea:79:f4:a7:61:f1:88:80:dc: 9b:78:2e:f2:0b:b7:75:65:d1:7a:ff:29:c4:29:3c: ca:e1:78:8f:8f:f0:bb:1a:59:ab:07:47:a0:9f:27: ac:75:26:d7:62:9e:82:2b:f8:78:80:90:7e:a1:8f: c3:b1:7b:c4:1a:b1:57:ad:33:49:b4:84:40:d5:35: 98:2b:7c:82:10:db:fa:b3:21:60:a9:1d:a9:8e:ba: e3:d3:68:58:1e:cd:eb:77:c5:84:f3:2f:e2:0e:02: 7a:a3:31:d9:63:9a:e1:20:80:d9:9b:ba:f4:60:dd: bb:96:b3:00:dc:1c:f3:6e:ba:80:db:6b:ee:0a:1a: 05:0c:ec:1b:69:5f:82:98:95:92:c2:37:3b:a7:2b: bd:de:88:d5:62:62:2c:a7:6a:90:64:ed:21:e4:30: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:AA:0B:28:93:81:77:44:EB:7E:D7:DC:03:E6:5F:7E:6A:F8:B1 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8d:9f:a5:d3:9d:b1:aa:8c:31:d1:2b:3f:84:45:07:00:0f: 8d:b9:7d:48:e7:c3:99:89:f2:37:6e:9b:1f:e7:bc:35:3f:75: ac:61:2e:a9:66:d5:4f:a7:12:7c:64:09:d8:96:ff:29:c1:28: 2d:f7:43:9d:7c:3f:db:41:8f:16:ed:8a:00:3c:20:41:9c:6d: 75:2a:86:0a:af:29:2a:bb:7f:8f:88:cc:b4:bb:b3:dc:4a:9a: b3:69:d8:4f:b2:5c:8f:76:2e:7d:c4:7f:f8:b3:18:e8:42:c7: 25:8c:79:69:79:49:94:51:ba:3b:dc:59:3d:de:c3:f4:01:6a: 5a:18:44:a4:d6:53:eb:8a:3d:b5:80:07:9b:c9:da:9e:06:9c: 60:66:04:32:bb:26:d0:bc:40:e5:7f:38:d4:dd:b3:b7:43:be: 37:89:63:a4:57:35:b7:5c:74:39:c1:6b:91:8a:2b:1d:9d:35: 88:34:f7:cc:a4:dd:59:0e:50:d1:4a:ce:2c:ad:f5:f5:a3:37: bd:fc:95:0c:9e:90:3b:c3:1d:fa:f7:7c:f5:f5:f1:ac:a5:68: be:80:3f:8f:09:33:3b:61:99:8f:a3:b1:a6:fd:d0:44:f2:a3: 66:6c:b3:61:12:27:90:bf:20:d3:48:9f:fa:61:06:62:ae:25: f8:fc:7a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjUwNDI1MDA1OTM3WhcNMjUwNTAyMDA1OTM3WjAYMRYwFAYD VQQDEw02ODBhZGU3OS0wNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMf7ZJezpPDLXuiqqxKUisvt6mTkwQwga0GLiAXRMJYlPTymSRlWEAMYVe5u RRDGadnOF1sntFt5zkI1Y4vNFBd+M01HK4SED+0Pp1F5PETzObSXdz7ss8HpDbdm +K7qefSnYfGIgNybeC7yC7d1ZdF6/ynEKTzK4XiPj/C7GlmrB0egnyesdSbXYp6C K/h4gJB+oY/DsXvEGrFXrTNJtIRA1TWYK3yCENv6syFgqR2pjrrj02hYHs3rd8WE 8y/iDgJ6ozHZY5rhIIDZm7r0YN27lrMA3BzzbrqA22vuChoFDOwbaV+CmJWSwjc7 pyu93ojVYmIsp2qQZO0h5DAe6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP56qgso k4F3ROt+19wD5l9+avixMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEjZ+l052xqowx0Ss/hEUHAA+NuX1I58OZifI3bpsf57w1P3WsYS6p ZtVPpxJ8ZAnYlv8pwSgt90OdfD/bQY8W7YoAPCBBnG11KoYKrykqu3+PiMy0u7Pc SpqzadhPslyPdi59xH/4sxjoQscljHlpeUmUUbo73Fk93sP0AWpaGESk1lPrij21 gAebydqeBpxgZgQyuybQvEDlfzjU3bO3Q743iWOkVzW3XHQ5wWuRiisdnTWINPfM pN1ZDlDRSs4srfX1oze9/JUMnpA7wx3693z19fGspWi+gD+PCTM7YZmPo7Gm/dBE 8qNmbLNhEieQvyDTSJ/6YQZiriX4/Hrq -----END CERTIFICATE-----Generated at Sat Apr 26 04:50:26 2025 by rpki-client