$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: eVYUgHsfBC9/v0HopiOaJtBFEBXsZwcdcHdV2S3sg5o= Subject key identifier: 39:05:5B:48:6C:63:C7:34:EB:C3:3B:A2:D7:C3:F3:C6:DE:93:1A:43 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 03D3 Signing time: Fri 25 Apr 2025 00:20:57 +0000 Manifest this update: Fri 25 Apr 2025 00:20:56 +0000 Manifest next update: Fri 02 May 2025 00:20:56 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: D8q3EgrWb6U8zFPP+nngfDL+/KFR9eaE9rlCBW8dYb0=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: 8BQNN/QNIWAJlkiQOUN0UFHd3tX4uQeluOnMm/rMf64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: Apr 25 00:20:56 2025 GMT Not After : May 2 00:20:56 2025 GMT Subject: CN=680ad569-0007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:e8:5d:d5:32:b0:c3:1e:91:48:e8:c8:19: 09:f8:24:cf:4e:29:74:76:53:7f:52:ca:df:e5:dc: 73:7b:44:59:0e:3b:f8:ea:74:42:27:73:1e:b2:44: 57:8a:98:a2:c3:04:8b:67:b8:75:e6:49:31:3c:b1: d1:1a:29:d6:c0:aa:e7:7a:62:3f:72:e9:10:ae:b7: c0:c5:05:8f:87:35:01:49:08:7d:4d:6f:83:13:c1: e2:3d:2f:00:49:c8:7b:2e:b3:1a:3d:e2:db:98:22: 80:88:a9:70:c3:4c:f3:a9:94:08:4f:d4:9b:0a:e1: 8e:fe:ae:6f:78:36:d4:a6:a9:a3:fd:95:4b:60:cc: 8d:69:99:8e:58:fd:27:63:ad:fa:be:1c:51:7e:61: 05:6b:2c:90:a4:ae:78:e7:ef:b5:3a:8d:20:ee:78: a1:06:74:29:23:2e:cc:41:50:2d:dd:45:43:f7:ce: b9:0d:53:84:0f:23:96:75:7b:82:1c:da:41:5d:cf: 2c:b4:ca:91:c0:b9:1b:6f:5f:51:a5:e5:57:57:df: 2b:af:da:27:3c:7d:e9:24:e7:d2:a6:3f:08:64:5c: 8a:e2:c6:ac:0e:d7:ee:05:7d:77:2e:41:b4:7d:1c: 49:99:53:1e:03:56:8a:a1:43:3b:70:40:5c:a3:10: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:05:5B:48:6C:63:C7:34:EB:C3:3B:A2:D7:C3:F3:C6:DE:93:1A:43 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:73:9c:d0:05:2b:92:5e:86:68:f7:1d:f7:31:3e:8b:19:13: 17:85:de:2e:69:7f:0a:55:11:ef:51:7e:95:a8:9b:8d:c4:36: ec:8b:63:11:2d:fc:44:87:97:26:a4:8c:bc:40:5b:e7:a7:3c: 34:ec:a2:77:c5:b0:3d:8c:6f:6d:56:50:a7:7d:ea:c8:2f:31: 55:98:06:0a:93:cd:bc:28:cb:6e:5d:bb:b5:75:49:bb:b2:4f: d0:30:8b:6f:ba:99:70:54:fc:4b:34:c5:55:a4:89:a9:91:35: c7:eb:a3:03:5f:dc:03:03:db:6e:e4:15:e8:da:ab:16:a5:45: ef:d3:a0:bd:3b:66:bf:60:ba:28:18:6a:50:07:73:a7:98:e0: 11:b1:0e:7c:5c:fd:67:24:6a:fd:68:d9:8a:b1:4b:d1:86:b2: 09:57:63:43:d0:32:b5:8c:e4:9a:9c:86:3a:07:05:07:e2:c1: c1:fe:ca:29:7f:10:32:5f:08:ce:fc:41:cb:df:b2:17:43:3c: 66:85:32:04:bd:12:77:0a:44:31:c8:17:8c:69:43:58:93:54: 39:d7:ff:29:6c:1f:96:5a:69:e6:b0:0c:c2:c4:09:44:50:36: 91:c2:22:80:60:68:a6:ab:d7:45:62:87:48:8a:94:32:bf:c7: df:5c:3d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUwNDI1MDAyMDU2WhcNMjUwNTAyMDAyMDU2WjAYMRYwFAYD VQQDEw02ODBhZDU2OS0wMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoHoXdUysMMekUjoyBkJ+CTPTil0dlN/Usrf5dxze0RZDjv46nRCJ3MeskRX ipiiwwSLZ7h15kkxPLHRGinWwKrnemI/cukQrrfAxQWPhzUBSQh9TW+DE8HiPS8A Sch7LrMaPeLbmCKAiKlww0zzqZQIT9SbCuGO/q5veDbUpqmj/ZVLYMyNaZmOWP0n Y636vhxRfmEFayyQpK545++1Oo0g7nihBnQpIy7MQVAt3UVD9865DVOEDyOWdXuC HNpBXc8stMqRwLkbb19RpeVXV98rr9onPH3pJOfSpj8IZFyK4sasDtfuBX13LkG0 fRxJmVMeA1aKoUM7cEBcoxC9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkFW0hs Y8c068M7otfD88bekxpDMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLc5zQBSuSXoZo9x33MT6LGRMXhd4uaX8KVRHvUX6VqJuNxDbsi2MR LfxEh5cmpIy8QFvnpzw07KJ3xbA9jG9tVlCnferILzFVmAYKk828KMtuXbu1dUm7 sk/QMItvuplwVPxLNMVVpImpkTXH66MDX9wDA9tu5BXo2qsWpUXv06C9O2a/YLoo GGpQB3OnmOARsQ58XP1nJGr9aNmKsUvRhrIJV2ND0DK1jOSanIY6BwUH4sHB/sop fxAyXwjO/EHL37IXQzxmhTIEvRJ3CkQxyBeMaUNYk1Q51/8pbB+WWmnmsAzCxAlE UDaRwiKAYGimq9dFYodIipQyv8ffXD2e -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:57 2025 by rpki-client