$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: 51GjRWL/SHhVfzni2Rtgyk5g+LRyCcWaeaXeYWv2ID0= Subject key identifier: 37:D2:F1:97:48:B4:1F:54:9E:58:22:72:9C:9B:26:E2:9C:60:F1:DC Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 11D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 19E7 Signing time: Thu 24 Apr 2025 17:12:10 +0000 Manifest this update: Thu 24 Apr 2025 17:12:10 +0000 Manifest next update: Thu 01 May 2025 17:12:09 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: XS/FWhS2Okf6XWp6gv6gS3LJDp8sXrWVHb0MdXDysUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4566 (0x11d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: Apr 24 17:12:10 2025 GMT Not After : May 1 17:12:09 2025 GMT Subject: CN=680a70ea-882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:2c:28:ce:23:6e:26:e5:ca:c0:bf:27:e6: 4e:bd:05:c3:dd:83:dd:0b:08:9f:f9:97:18:44:7a: d3:58:10:c6:e5:7e:d3:c4:79:60:7d:23:2f:7d:36: c9:ea:24:aa:fa:ce:b5:02:b7:2c:53:90:de:aa:83: a4:b1:87:c6:6d:d4:36:4b:3f:79:90:97:89:5b:ef: 67:fb:8c:f3:15:30:33:41:b1:b1:d7:64:b1:73:5a: 3c:46:a6:73:08:0a:40:c0:dd:92:9e:be:d1:a6:fc: cc:6f:96:7b:8a:19:7f:d5:f8:3f:72:30:fa:09:21: 09:4d:44:c1:35:93:a3:f4:e9:21:45:e7:74:9c:db: ce:a5:8c:f2:01:22:26:9f:df:9c:75:9e:2b:32:40: 6f:b4:9c:aa:de:51:00:3f:a9:d5:aa:0c:2a:0c:a7: 6b:83:25:be:60:d7:2f:4b:ab:60:ed:f6:f5:9e:78: b6:e3:9e:af:ec:b1:11:94:62:0d:38:c6:25:67:84: 7f:93:be:ce:90:14:54:da:c5:85:7a:e6:dc:7f:7e: e2:45:f1:64:fa:46:35:4c:cc:3a:2d:fb:c0:1a:8a: 28:80:fe:aa:3a:25:af:59:64:9d:61:e1:35:65:cf: 36:59:5c:db:e1:86:a8:44:67:24:09:f4:bf:cd:0a: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:F1:97:48:B4:1F:54:9E:58:22:72:9C:9B:26:E2:9C:60:F1:DC X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:36:31:77:a1:cd:20:15:5a:b5:53:d1:c0:cf:f0:b3:c6:27: 83:f9:4d:72:5e:0d:f1:cd:8f:d8:f4:c6:c3:af:6a:51:71:70: b8:fd:5b:c8:4d:fc:00:d0:84:9c:27:22:85:41:af:53:e0:a4: 6c:54:fd:92:46:0d:75:7e:00:31:ac:c9:18:19:f2:4a:fc:d6: b0:b3:4b:c7:ed:ec:05:39:b5:d3:25:51:94:1a:74:4c:2c:6f: d8:d4:58:37:45:a2:00:83:61:da:ee:84:a2:dc:80:41:b0:61: c0:8e:31:d2:a3:f8:b6:e2:06:e9:ad:71:dc:a2:50:14:ec:a5: b9:85:9c:0c:f3:88:85:35:88:4f:82:f8:a7:eb:9f:73:61:29: cd:8a:15:37:f8:b8:26:a9:6d:d7:c0:38:09:e3:5c:a8:87:ef: d4:ad:6a:58:43:78:6f:bc:24:e2:aa:8f:3e:a3:8a:05:d2:d6: 0c:76:c4:5f:70:30:f4:5a:4c:bf:ae:0c:4b:62:3d:63:84:b8: 06:16:e8:52:6b:ac:0e:24:98:e4:8d:63:58:df:16:6a:4b:39: f6:b4:72:0b:25:13:3a:43:9b:53:1a:24:74:1f:b5:80:62:c2: 47:7e:3d:90:d4:e4:1e:eb:3b:e3:6b:be:5a:e9:22:44:20:16: 42:30:bc:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwNDI0MTcxMjEwWhcNMjUwNTAxMTcxMjA5WjAYMRYwFAYD VQQDEw02ODBhNzBlYS04ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o4sKM4jbiblysC/J+ZOvQXD3YPdCwif+ZcYRHrTWBDG5X7TxHlgfSMvfTbJ 6iSq+s61ArcsU5DeqoOksYfGbdQ2Sz95kJeJW+9n+4zzFTAzQbGx12Sxc1o8RqZz CApAwN2Snr7RpvzMb5Z7ihl/1fg/cjD6CSEJTUTBNZOj9OkhRed0nNvOpYzyASIm n9+cdZ4rMkBvtJyq3lEAP6nVqgwqDKdrgyW+YNcvS6tg7fb1nni2456v7LERlGIN OMYlZ4R/k77OkBRU2sWFeubcf37iRfFk+kY1TMw6LfvAGooogP6qOiWvWWSdYeE1 Zc82WVzb4YaoRGckCfS/zQqiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfS8ZdI tB9UnlgicpybJuKcYPHcMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMNjF3oc0gFVq1U9HAz/CzxieD+U1yXg3xzY/Y9MbDr2pRcXC4/VvI TfwA0IScJyKFQa9T4KRsVP2SRg11fgAxrMkYGfJK/Naws0vH7ewFObXTJVGUGnRM LG/Y1Fg3RaIAg2Ha7oSi3IBBsGHAjjHSo/i24gbprXHcolAU7KW5hZwM84iFNYhP gvin659zYSnNihU3+LgmqW3XwDgJ41yoh+/UrWpYQ3hvvCTiqo8+o4oF0tYMdsRf cDD0Wky/rgxLYj1jhLgGFuhSa6wOJJjkjWNY3xZqSzn2tHILJRM6Q5tTGiR0H7WA YsJHfj2Q1OQe6zvja75a6SJEIBZCMLx0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:36 2025 by rpki-client