$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: bx3DcPxhwCCQBSBiA6GcFaKldnie0RMdsI2OYc9do/0= Subject key identifier: 45:99:3C:03:BC:08:9F:3F:D2:1B:CF:4C:29:51:98:63:4D:E8:81:22 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 16A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 169C Signing time: Thu 24 Apr 2025 16:41:49 +0000 Manifest this update: Thu 24 Apr 2025 16:41:49 +0000 Manifest next update: Thu 01 May 2025 16:41:49 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: E/clLRgPP+k9qz2tLudBIsll8KZhI1UYepVSw4/e19s=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5799 (0x16a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Apr 24 16:41:49 2025 GMT Not After : May 1 16:41:49 2025 GMT Subject: CN=680a69cd-ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:27:0c:df:ec:dd:57:51:28:ae:f3:6c:e2: b9:41:42:f1:5d:23:24:bb:72:45:96:fe:73:29:56: 56:7b:11:28:04:51:46:60:4d:8b:3d:0b:20:f4:ea: e7:2b:7e:6a:ac:65:98:38:29:23:67:8c:71:20:96: 98:c2:e7:8b:5f:c6:fa:0a:2d:83:6e:13:d3:e3:b0: d1:c5:6b:97:54:3c:be:be:85:f3:b9:b2:51:a0:64: 77:20:34:04:cf:6f:4b:39:e6:67:8e:68:cf:1e:4c: 5e:c9:33:bd:b2:58:98:6f:05:4c:84:6a:7e:2c:a0: 82:42:a1:77:9e:a2:3d:c1:2d:e8:7e:95:07:fa:76: 65:76:d6:89:7c:ad:c2:6a:6c:45:5a:d0:31:31:ef: 12:db:7b:bb:e3:e8:0c:41:43:43:4e:73:4b:b1:37: d1:22:d1:00:05:99:6d:ab:41:16:d9:6e:0e:e1:fe: 68:78:f1:b5:da:2d:0e:12:ab:ad:5f:38:78:32:4a: 58:e5:6a:f8:27:aa:f2:ad:19:15:b5:12:85:10:83: 08:fd:52:2f:39:3a:99:de:aa:af:c7:96:0b:ab:bd: 2e:7e:f8:5c:c8:1a:6c:a7:82:7d:32:b5:c2:20:6b: b1:8f:02:64:3d:7b:b1:0c:0f:b1:c5:44:af:c9:b5: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:3C:03:BC:08:9F:3F:D2:1B:CF:4C:29:51:98:63:4D:E8:81:22 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fd:a8:b4:7d:ac:e2:2b:91:ac:54:30:a4:d6:93:b2:41:0e: b6:e2:c0:0f:83:aa:dd:03:eb:56:2b:ca:04:b1:23:48:55:08: 1c:a1:68:b8:ac:bf:82:b0:1f:13:40:c0:5b:96:a8:61:21:bd: 54:98:a3:30:8b:11:50:aa:b2:53:03:fa:14:cb:36:a9:8a:78: a0:ab:a5:39:36:d3:56:7e:fc:63:7a:b3:03:47:df:0c:8f:a5: 92:f6:da:f7:34:0e:d7:20:af:cc:61:be:9d:d2:8e:9a:81:8b: 7a:7e:1b:32:c6:e6:c2:9c:33:af:6d:ec:b4:ba:57:a7:5b:18: 89:d4:6b:71:9d:d2:4d:21:ff:13:a8:23:20:53:bf:33:31:65: 65:21:19:f2:f1:a5:f7:00:33:de:b6:e2:d1:1e:1f:9b:ef:09: aa:10:e7:5c:24:61:94:8e:24:12:f3:e4:1a:01:6b:a6:f9:fc: 4b:2f:33:af:2d:e7:39:ce:42:9d:6c:3f:fc:50:cd:df:c5:34: 3f:1b:f4:18:7b:69:70:c5:53:fc:e9:f6:fe:c4:e8:8d:e1:47: dd:57:15:68:25:4d:a4:9d:46:d1:46:fa:90:c6:59:ae:67:ba: 10:24:43:16:e8:18:7c:b5:48:c4:a5:b3:f0:4b:2b:14:a9:0b: 88:75:55:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUwNDI0MTY0MTQ5WhcNMjUwNTAxMTY0MTQ5WjAYMRYwFAYD VQQDEw02ODBhNjljZC1hYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXonDN/s3VdRKK7zbOK5QULxXSMku3JFlv5zKVZWexEoBFFGYE2LPQsg9Orn K35qrGWYOCkjZ4xxIJaYwueLX8b6Ci2DbhPT47DRxWuXVDy+voXzubJRoGR3IDQE z29LOeZnjmjPHkxeyTO9sliYbwVMhGp+LKCCQqF3nqI9wS3ofpUH+nZldtaJfK3C amxFWtAxMe8S23u74+gMQUNDTnNLsTfRItEABZltq0EW2W4O4f5oePG12i0OEqut Xzh4MkpY5Wr4J6ryrRkVtRKFEIMI/VIvOTqZ3qqvx5YLq70ufvhcyBpsp4J9MrXC IGuxjwJkPXuxDA+xxUSvybXACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWZPAO8 CJ8/0hvPTClRmGNN6IEiMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/ai0faziK5GsVDCk1pOyQQ624sAPg6rdA+tWK8oEsSNIVQgcoWi4 rL+CsB8TQMBblqhhIb1UmKMwixFQqrJTA/oUyzapinigq6U5NtNWfvxjerMDR98M j6WS9tr3NA7XIK/MYb6d0o6agYt6fhsyxubCnDOvbey0ulenWxiJ1GtxndJNIf8T qCMgU78zMWVlIRny8aX3ADPetuLRHh+b7wmqEOdcJGGUjiQS8+QaAWum+fxLLzOv Lec5zkKdbD/8UM3fxTQ/G/QYe2lwxVP86fb+xOiN4UfdVxVoJU2knUbRRvqQxlmu Z7oQJEMW6Bh8tUjEpbPwSysUqQuIdVUB -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:16 2025 by rpki-client