$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: zNJUKwwyXp3/JFtZETmArTkSadTS4VEd91xMRXtCOrE= Subject key identifier: 44:88:AF:66:53:97:6D:63:31:2C:07:33:5A:55:C6:8E:65:42:DA:AF Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 77 Signing time: Fri 25 Apr 2025 05:47:02 +0000 Manifest this update: Fri 25 Apr 2025 05:47:01 +0000 Manifest next update: Fri 02 May 2025 05:47:01 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: Nr3JcLb717axcu2Oq8gJA87eb7lrDzsQKsef+q5gBDY=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Apr 25 05:47:01 2025 GMT Not After : May 2 05:47:01 2025 GMT Subject: CN=680b21d6-8fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:bf:51:5d:db:fc:69:ce:74:78:27:e3:03: 7f:4a:94:c1:3c:07:38:cc:01:25:c3:21:81:99:f6: 82:5f:09:b6:f3:f2:f6:fa:08:f9:20:0f:33:a4:9e: 11:c1:47:8d:fc:a2:cd:c3:f2:84:42:30:d5:de:34: 58:ba:0c:8d:35:3d:f0:ad:77:95:de:e3:a9:b8:cf: 93:df:8c:d4:fd:1e:c6:43:6b:32:8d:b1:12:7c:43: f9:81:b8:3f:6d:52:61:0b:05:be:e7:2c:b5:85:93: 8e:6a:4f:de:ec:10:cb:08:2b:8c:1b:b9:15:f0:13: 0c:c2:2b:6b:d0:46:61:35:94:bb:e6:88:fe:fd:92: a9:d1:f1:d1:c2:bd:8e:d5:1e:55:93:93:4f:0a:31: 6b:74:b2:dc:ba:1c:af:10:5b:7e:2c:b5:69:b6:d8: 27:25:15:52:48:ae:3b:99:2c:f8:03:0b:d5:5a:0a: 37:7a:72:e9:a5:04:17:63:0f:ed:b7:f8:80:22:49: 90:2c:dc:60:06:24:5d:63:5d:99:aa:ea:29:cc:0f: 56:f0:21:f9:3f:44:12:90:1a:30:28:34:76:23:02: 15:47:8a:df:be:5c:bc:19:d5:9c:b7:1e:d6:d3:01: 2c:95:19:07:e0:f6:16:02:cc:df:3c:76:b0:64:c8: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:AF:66:53:97:6D:63:31:2C:07:33:5A:55:C6:8E:65:42:DA:AF X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:a7:7b:ac:3f:6e:35:41:71:b6:ba:ae:cd:98:2e:45:1a: 51:37:4a:20:84:cf:8f:bc:5b:b6:5a:bc:e2:be:3f:fc:6f:5a: 7c:3b:76:a5:06:9e:dd:0b:97:bd:be:dd:7d:05:ec:34:66:1d: 3f:51:56:1c:97:f5:99:64:1c:eb:c3:76:97:c3:6d:52:64:ea: 8c:45:7a:e6:de:39:c6:14:e6:e1:f3:e6:65:e3:47:5a:91:77: 2b:52:32:ef:1d:57:2f:d5:ff:85:5a:bd:b8:79:b8:7d:0d:1b: df:8e:f2:fb:8a:83:fa:1d:45:13:1e:88:ef:59:4b:b0:9b:ca: 5d:78:ed:d4:f6:d3:f3:e2:fa:93:84:be:39:03:6b:4f:36:9d: c0:bb:50:a2:1d:f4:0b:cd:cc:fd:fb:9a:09:da:24:50:9f:6c: 52:e5:54:78:d4:00:3d:bd:c3:00:7a:06:16:0f:b1:b7:d2:f5: 2c:d9:d0:24:dd:b6:4e:b9:e0:29:7a:e1:b8:c1:50:d8:2c:9e: b1:b6:6d:96:55:3e:ec:4c:bf:9c:b1:a9:b8:04:3a:28:28:0f: 99:77:76:0a:d9:d9:38:46:f4:f9:11:4a:5f:ef:97:be:f9:fd: 5e:48:11:e1:b3:5b:1d:29:52:e8:75:56:6d:97:af:da:fa:d4: 2f:73:e8:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Njc5OTExMC8GA1UEBRMoNzYzNTEzMkU3RDQwNUE1NDY0NUIzQjJERkIyRTBBMDNE RkY0NTZDMzAeFw0yNTA0MjUwNTQ3MDFaFw0yNTA1MDIwNTQ3MDFaMBgxFjAUBgNV BAMTDTY4MGIyMWQ2LThmZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQAr9RXdv8ac50eCfjA39KlME8BzjMASXDIYGZ9oJfCbbz8vb6CPkgDzOknhHB R438os3D8oRCMNXeNFi6DI01PfCtd5Xe46m4z5PfjNT9HsZDazKNsRJ8Q/mBuD9t UmELBb7nLLWFk45qT97sEMsIK4wbuRXwEwzCK2vQRmE1lLvmiP79kqnR8dHCvY7V HlWTk08KMWt0sty6HK8QW34stWm22CclFVJIrjuZLPgDC9VaCjd6cumlBBdjD+23 +IAiSZAs3GAGJF1jXZmq6inMD1bwIfk/RBKQGjAoNHYjAhVHit++XLwZ1Zy3HtbT ASyVGQfg9hYCzN88drBkyIQHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURIivZlOX bWMxLAczWlXGjmVC2q8wHwYDVR0jBBgwFoAUdjUTLn1AWlRkWzst+y4KA9/0VsMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Nzk5L0VEOUU2MEIyNzA5 RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZz TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpVVExuMUFXbFJrV3pzdC15NEtBOV8wVnNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 Nzk5L0VEOUU2MEIyNzA5RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xS a1d6c3QteTRLQTlfMFZzTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOHp3usP241QXG2uq7NmC5FGlE3SiCEz4+8W7ZavOK+P/xvWnw7dqUG nt0Ll72+3X0F7DRmHT9RVhyX9ZlkHOvDdpfDbVJk6oxFeubeOcYU5uHz5mXjR1qR dytSMu8dVy/V/4Vavbh5uH0NG9+O8vuKg/odRRMeiO9ZS7Cbyl147dT20/Pi+pOE vjkDa082ncC7UKId9AvNzP37mgnaJFCfbFLlVHjUAD29wwB6BhYPsbfS9SzZ0CTd tk654Cl64bjBUNgsnrG2bZZVPuxMv5yxqbgEOigoD5l3dgrZ2ThG9PkRSl/vl775 /V5IEeGzWx0pUuh1Vm2Xr9r61C9z6D0= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:42 2025 by rpki-client