$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: gFZAfy9HXgxeP4a1Ldo3bP8i4D+NKxS7b4r6L9f4QXI= Subject key identifier: 06:6C:C7:FC:1C:5A:EF:00:FB:31:C9:1A:CF:9E:3A:AE:63:B5:12:BA Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 04:30:07 +0000 Manifest this update: Fri 25 Apr 2025 04:30:07 +0000 Manifest next update: Fri 02 May 2025 04:30:07 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: 9ns6FdVqwi1VkgqkgyjmAAtP7ghCC/Ebegvb4vk5Ads=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Apr 25 04:30:07 2025 GMT Not After : May 2 04:30:07 2025 GMT Subject: CN=680b0fcf-46e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:27:e0:48:3d:cb:8e:de:64:66:e9:9e:ea: 63:9d:d2:da:d3:4e:67:3e:8c:a5:a1:5c:63:45:8c: 5e:d1:6f:f4:be:0f:86:ca:fe:c1:ca:e7:88:68:d2: a7:aa:0c:c0:34:55:16:f2:66:70:59:16:32:7b:ab: 8d:10:b6:ec:23:cb:5d:bd:37:e8:23:6f:7b:fb:52: 3f:b0:49:68:16:6b:2b:f7:48:0f:1c:08:f9:67:9b: 71:a1:7f:a1:93:a5:66:9c:77:ed:6b:33:ca:b8:dd: 0b:fe:0b:d9:6f:66:9a:ab:2f:ac:47:79:8f:fb:09: c4:0c:86:8c:5a:ca:da:99:be:52:ea:7e:d6:33:9b: fa:35:be:60:df:d0:9d:3c:70:9d:21:d0:65:74:1d: ac:c7:ff:42:1f:9e:d4:40:d2:e9:19:64:53:81:e0: 54:71:ba:c8:90:d5:ec:e9:f9:dd:2c:f0:eb:70:8d: 22:45:fd:6b:2b:a8:4b:cf:85:8c:d2:6d:9e:6b:0d: 38:1f:fc:c9:c3:84:a8:ea:84:41:e1:54:33:d9:91: e2:c4:37:c5:b4:38:12:8e:a6:c2:d8:8b:7d:03:91: e2:bb:ee:ba:f4:2d:53:52:21:be:2e:bb:5d:e9:bc: 4e:31:ed:be:93:15:b5:81:61:b9:25:a3:df:be:82: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6C:C7:FC:1C:5A:EF:00:FB:31:C9:1A:CF:9E:3A:AE:63:B5:12:BA X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:79:d4:22:19:f5:b5:7c:aa:e3:31:60:7d:53:e7:f9:bc:57: 33:c9:42:8c:e6:01:55:e3:c8:1f:a3:cc:42:c0:79:48:e8:1b: da:5b:ea:c9:80:d8:ae:7a:46:ab:8d:89:b4:68:6d:9e:7b:d2: 6a:48:c3:20:07:06:a0:f3:6a:9b:0f:4b:cf:fd:17:4d:ea:57: e8:8e:63:7c:c8:56:a1:18:58:17:69:00:c9:e8:c1:f3:a0:37: ad:b5:07:8d:46:db:7e:17:69:3b:76:97:50:de:54:3e:26:5e: 30:73:4f:22:86:79:79:de:38:ab:86:ca:dd:0b:6f:11:a6:3b: e6:0e:e3:27:47:11:b5:4b:a7:5b:7e:26:84:fa:65:50:23:67: 6a:3a:86:85:93:7b:c0:de:bb:d0:78:2f:a6:0d:d1:00:d1:a6: ef:d8:5a:5d:55:75:df:fc:8d:55:11:96:65:e7:1f:38:35:58: 63:b0:1f:12:ce:28:79:bb:98:f3:df:ae:c8:63:dd:05:c6:2b: d2:1e:60:dd:be:b0:36:37:22:7d:dd:f5:ba:4d:aa:52:16:68: b2:f1:e7:70:98:a7:32:31:dd:37:ce:f3:6f:1d:07:2a:9e:07: 3d:16:06:32:2f:76:6b:a7:67:4c:58:e1:45:06:1b:7f:36:27: c8:f1:5a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwNDI1MDQzMDA3WhcNMjUwNTAyMDQzMDA3WjAYMRYwFAYD VQQDEw02ODBiMGZjZi00NmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJUn4Eg9y47eZGbpnupjndLa005nPoyloVxjRYxe0W/0vg+Gyv7ByueIaNKn qgzANFUW8mZwWRYye6uNELbsI8tdvTfoI297+1I/sEloFmsr90gPHAj5Z5txoX+h k6VmnHftazPKuN0L/gvZb2aaqy+sR3mP+wnEDIaMWsramb5S6n7WM5v6Nb5g39Cd PHCdIdBldB2sx/9CH57UQNLpGWRTgeBUcbrIkNXs6fndLPDrcI0iRf1rK6hLz4WM 0m2eaw04H/zJw4So6oRB4VQz2ZHixDfFtDgSjqbC2It9A5Hiu+669C1TUiG+Lrtd 6bxOMe2+kxW1gWG5JaPfvoKamwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZsx/wc Wu8A+zHJGs+eOq5jtRK6MB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2edQiGfW1fKrjMWB9U+f5vFczyUKM5gFV48gfo8xCwHlI6BvaW+rJ gNiuekarjYm0aG2ee9JqSMMgBwag82qbD0vP/RdN6lfojmN8yFahGFgXaQDJ6MHz oDettQeNRtt+F2k7dpdQ3lQ+Jl4wc08ihnl53jirhsrdC28RpjvmDuMnRxG1S6db fiaE+mVQI2dqOoaFk3vA3rvQeC+mDdEA0abv2FpdVXXf/I1VEZZl5x84NVhjsB8S zih5u5jz367IY90FxivSHmDdvrA2NyJ93fW6TapSFmiy8edwmKcyMd03zvNvHQcq ngc9FgYyL3Zrp2dMWOFFBht/NifI8Vq1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:00 2025 by rpki-client