$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: URnalOs5ApD18TG+4JWdJMSkMGLdlGmbvdFKqNH1qss= Subject key identifier: 2D:9B:66:EB:12:92:29:FC:5D:5A:EE:2F:DA:A3:C3:C6:BD:6C:D7:90 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0C2A Signing time: Thu 24 Apr 2025 18:29:15 +0000 Manifest this update: Thu 24 Apr 2025 18:29:15 +0000 Manifest next update: Thu 01 May 2025 18:29:15 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: Wn25Kssae7IjRy3RGN8Jcv9eK777NtWTwerGmPwJpE4=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Apr 24 18:29:15 2025 GMT Not After : May 1 18:29:15 2025 GMT Subject: CN=680a82fb-f1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:22:b1:40:0d:a8:d4:3f:8d:b7:fd:26:39: d6:36:63:7e:04:3f:ba:ec:a3:bc:93:e5:9f:ae:6c: 27:be:08:a5:ab:b4:02:8d:cf:d2:2a:1d:f2:c5:f1: fc:ef:14:57:08:3c:28:ac:45:c5:9a:af:58:5a:bd: fb:98:2f:9a:f3:00:f5:23:b6:fe:ff:45:da:85:cf: 11:a1:7c:d6:bb:82:e1:9a:a5:0c:34:ea:c9:61:dc: 2c:b0:54:de:77:4e:fa:27:01:6b:7a:88:38:20:13: 87:52:22:dd:47:0e:d9:58:e0:e0:87:8a:d0:9c:44: 74:e0:15:68:42:1f:c7:99:26:01:e7:0f:83:d1:06: 9d:da:bb:a6:fe:92:0a:35:87:a4:a8:63:18:9e:51: da:f5:9b:d3:cd:a3:a2:31:7f:12:df:d7:e8:f6:3f: 61:17:b4:11:1e:cf:94:7f:a2:62:41:bd:1e:b2:86: f6:82:a8:9c:b5:90:2b:13:c3:1b:05:43:02:66:8e: 60:bc:89:11:ac:d8:2b:72:f5:95:a9:e5:10:3c:c5: 2f:25:9c:4c:b5:62:5d:ee:36:5b:13:76:fb:35:6c: d6:5f:1a:f5:a6:1c:0c:08:cf:0b:78:6b:8a:b8:d8: df:7f:b0:53:27:6f:b5:56:50:27:cb:d2:85:5e:3c: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:66:EB:12:92:29:FC:5D:5A:EE:2F:DA:A3:C3:C6:BD:6C:D7:90 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b3:c8:4c:3d:fc:3e:de:5d:fe:2a:9e:ab:92:2a:e1:c6:ea: 46:ad:f6:d3:5f:4e:76:9d:2b:56:a7:28:40:8b:af:0b:8a:be: d3:d6:fe:4d:cd:47:52:7c:bf:a0:7c:4b:02:ce:ec:38:72:c0: a9:b4:b0:2a:90:4c:47:f4:23:50:c0:ac:01:e0:b4:f2:b7:c1: ac:94:65:6e:a5:9f:a7:24:18:1a:26:b3:66:e5:83:9d:ec:e2: 62:38:13:4f:9a:cc:8b:4c:2e:4e:00:d3:d1:5b:fe:93:4a:4c: 14:2b:ce:fa:35:d8:97:59:5f:97:cd:71:ec:a6:e2:27:d3:d8: 84:99:82:47:29:24:d0:75:e9:2b:a4:c6:29:03:ac:ef:b3:58: cf:9e:dc:f2:7a:ce:62:56:7b:de:23:4a:41:ab:a0:25:0d:66: 12:a7:4e:b6:c0:53:73:47:aa:7d:f1:a9:9d:ac:9e:02:2b:cb: 4b:a5:84:7d:b6:ac:8b:db:ae:08:a9:a1:a9:73:ed:91:f0:ba: a7:04:6a:60:40:f4:9e:1a:63:b8:a9:80:d3:6b:93:85:38:8e: aa:2e:85:39:fc:78:7f:7f:9c:82:89:5e:e1:48:5b:60:21:d5: 87:d8:4d:a7:12:2f:ed:75:cf:5a:1a:ca:4d:dc:ad:f2:ca:9a: 4c:63:29:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUwNDI0MTgyOTE1WhcNMjUwNTAxMTgyOTE1WjAYMRYwFAYD VQQDEw02ODBhODJmYi1mMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuUisUANqNQ/jbf9JjnWNmN+BD+67KO8k+Wfrmwnvgilq7QCjc/SKh3yxfH8 7xRXCDworEXFmq9YWr37mC+a8wD1I7b+/0Xahc8RoXzWu4LhmqUMNOrJYdwssFTe d076JwFreog4IBOHUiLdRw7ZWODgh4rQnER04BVoQh/HmSYB5w+D0Qad2rum/pIK NYekqGMYnlHa9ZvTzaOiMX8S39fo9j9hF7QRHs+Uf6JiQb0esob2gqictZArE8Mb BUMCZo5gvIkRrNgrcvWVqeUQPMUvJZxMtWJd7jZbE3b7NWzWXxr1phwMCM8LeGuK uNjff7BTJ2+1VlAny9KFXjyOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2bZusS kin8XVruL9qjw8a9bNeQMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQs8hMPfw+3l3+Kp6rkirhxupGrfbTX052nStWpyhAi68Lir7T1v5N zUdSfL+gfEsCzuw4csCptLAqkExH9CNQwKwB4LTyt8GslGVupZ+nJBgaJrNm5YOd 7OJiOBNPmsyLTC5OANPRW/6TSkwUK876NdiXWV+XzXHspuIn09iEmYJHKSTQdekr pMYpA6zvs1jPntzyes5iVnveI0pBq6AlDWYSp062wFNzR6p98amdrJ4CK8tLpYR9 tqyL264IqaGpc+2R8LqnBGpgQPSeGmO4qYDTa5OFOI6qLoU5/Hh/f5yCiV7hSFtg IdWH2E2nEi/tdc9aGspN3K3yyppMYykj -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:42 2025 by rpki-client