$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: qG95xpsmGVzNG0SVghv0a+IFTRqKOt2YdPQZQ7drrbk= Subject key identifier: 98:C8:CD:47:E5:77:9A:CD:EE:65:93:3A:A3:F2:C1:AA:21:CD:67:5F Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0DE9 Signing time: Thu 24 Apr 2025 17:49:54 +0000 Manifest this update: Thu 24 Apr 2025 17:49:53 +0000 Manifest next update: Thu 01 May 2025 17:49:53 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: GUEysrWeK0xyXMsxTua25t1cXrDPB2pAmFnMIqmxFr4=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Apr 24 17:49:53 2025 GMT Not After : May 1 17:49:53 2025 GMT Subject: CN=680a79c1-e163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:1e:1b:63:2b:56:4b:78:59:49:6b:61:42: 83:06:e6:ee:20:5a:b6:93:06:75:8a:16:14:25:7f: c7:02:47:48:f1:74:7e:9a:56:1b:0b:4c:56:cc:6b: 85:be:29:fd:b4:f5:3b:49:ec:f5:11:ea:42:02:86: 5b:40:21:d9:93:96:69:0a:17:0d:e5:8f:5e:36:56: 45:6a:0a:40:5b:67:1f:35:29:39:bd:e8:b8:c0:60: fc:41:a3:b2:e7:6b:7e:7e:a5:ae:f4:9c:40:da:5b: 4f:2c:f0:5e:b6:c7:2d:b8:8e:76:47:2e:19:b2:c9: 66:27:ab:ad:e2:12:aa:01:1d:32:2a:c0:3d:8c:71: fd:8e:da:ca:08:58:a2:f6:f7:5f:d1:6a:05:6f:9b: 6b:f5:10:6c:ef:fe:a5:8c:a7:92:53:18:26:36:11: 11:c3:d5:69:6a:9b:94:95:e6:5a:44:46:1b:97:41: 7e:3c:02:25:13:ee:ee:f2:af:3b:32:a1:36:cb:fc: 82:31:77:95:74:3f:9a:dd:2c:24:97:dc:e6:d3:48: 98:da:69:64:a9:7b:c0:a5:f4:00:6c:01:08:ea:1e: ca:2d:cd:17:be:02:55:ab:1c:2f:80:dd:68:a9:ec: e3:62:d4:17:89:5b:b2:c0:9c:97:57:1b:e5:ba:0b: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:CD:47:E5:77:9A:CD:EE:65:93:3A:A3:F2:C1:AA:21:CD:67:5F X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4a:da:f3:1a:d5:80:25:c2:39:07:5f:36:e9:dd:ac:e3:02: e5:63:7f:f3:68:a6:ba:84:6a:91:ea:63:ed:22:1b:b9:92:a7: b3:e7:a0:4f:d5:fa:29:e8:91:49:e9:ae:7e:46:5c:0d:cf:06: 37:19:91:68:cc:16:16:5e:fb:5c:9f:d2:3c:ca:54:9f:be:ea: 93:aa:d8:94:ec:d8:db:82:f5:33:d2:8d:84:53:0c:18:a4:d4: d3:c9:c6:99:5c:93:c5:b6:03:c3:9c:59:ed:8e:cd:6f:bb:77: 5d:59:5d:7a:13:01:49:c5:c7:80:2e:34:fa:a0:26:da:b1:5c: 36:dd:8d:49:42:39:2a:6b:64:50:c9:bb:28:45:a0:74:45:e0: 89:70:28:58:b7:b9:ae:57:df:fa:ff:a7:a9:78:24:46:c1:a7: ba:53:20:bb:b0:56:4c:6b:61:fe:a1:e0:ba:26:27:28:3c:7b: 27:41:79:33:8b:3f:e0:57:19:2e:06:6c:c5:bb:e5:a8:6f:5a: 94:40:a4:51:49:8f:a8:a8:36:1f:5f:71:4b:0a:0b:19:8e:16: a6:2d:1a:4b:f0:b6:04:d0:5d:f8:d8:c3:eb:10:c9:6d:6f:71: 47:6f:5a:fd:d5:a3:ff:6e:f8:57:20:a1:8c:77:d5:6b:8e:08: 48:ba:94:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUwNDI0MTc0OTUzWhcNMjUwNTAxMTc0OTUzWjAYMRYwFAYD VQQDEw02ODBhNzljMS1lMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6MeG2MrVkt4WUlrYUKDBubuIFq2kwZ1ihYUJX/HAkdI8XR+mlYbC0xWzGuF vin9tPU7Sez1EepCAoZbQCHZk5ZpChcN5Y9eNlZFagpAW2cfNSk5vei4wGD8QaOy 52t+fqWu9JxA2ltPLPBetsctuI52Ry4ZsslmJ6ut4hKqAR0yKsA9jHH9jtrKCFii 9vdf0WoFb5tr9RBs7/6ljKeSUxgmNhERw9VpapuUleZaREYbl0F+PAIlE+7u8q87 MqE2y/yCMXeVdD+a3Swkl9zm00iY2mlkqXvApfQAbAEI6h7KLc0XvgJVqxwvgN1o qezjYtQXiVuywJyXVxvlugvAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjIzUfl d5rN7mWTOqPywaohzWdfMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8StrzGtWAJcI5B1826d2s4wLlY3/zaKa6hGqR6mPtIhu5kqez56BP 1fop6JFJ6a5+RlwNzwY3GZFozBYWXvtcn9I8ylSfvuqTqtiU7NjbgvUz0o2EUwwY pNTTycaZXJPFtgPDnFntjs1vu3ddWV16EwFJxceALjT6oCbasVw23Y1JQjkqa2RQ ybsoRaB0ReCJcChYt7muV9/6/6epeCRGwae6UyC7sFZMa2H+oeC6JicoPHsnQXkz iz/gVxkuBmzFu+Wob1qUQKRRSY+oqDYfX3FLCgsZjhamLRpL8LYE0F342MPrEMlt b3FHb1r91aP/bvhXIKGMd9VrjghIupRj -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:00 2025 by rpki-client