$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft File: dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json) Hash identifier: RnP7tc99/C5xABNfyrr/nDAGmuDsb8m0ozdWvDV6KLI= Subject key identifier: 53:AD:80:3F:44:49:FA:01:8D:58:D0:BB:F3:04:46:4A:4D:65:95:7B Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E Certificate issuer: /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft Manifest number: 0C23 Signing time: Sun 20 Apr 2025 18:30:38 +0000 Manifest this update: Sun 20 Apr 2025 18:30:38 +0000 Manifest next update: Sun 27 Apr 2025 18:30:38 +0000 Files and hashes: 1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: Uy2rw346WfzfpbgBieQcFYX6mYtWMM5EykkUXQTuRns=) 2: 554FA970134B11F086B29E87C4F9AE02.roa (hash: lElr8UuU72HaGdKc4l83MtravhdES9u5a7CA+J7QNtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E Validity Not Before: Apr 20 18:30:38 2025 GMT Not After : Apr 27 18:30:38 2025 GMT Subject: CN=68053d4e-56c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:cd:af:6a:a5:ae:8b:c4:3d:57:1e:5c:c3: 3d:d0:51:d6:c2:7c:a5:1a:04:5a:b0:c2:08:bc:4e: 1b:0b:be:1b:32:95:d0:23:00:96:4c:e0:9d:0f:ff: 16:33:e2:01:3a:0e:53:fd:0f:8c:62:bd:f6:06:c0: e1:1f:2d:c7:d5:43:40:dd:48:96:35:61:9b:4f:3a: 66:90:f9:93:2f:8c:96:61:08:04:f5:05:00:a6:bc: 19:ac:60:7f:85:79:42:d7:55:71:f6:6d:6b:c6:54: 1b:77:99:21:33:56:77:1a:d1:d5:5f:4d:b4:3b:53: f9:6c:ce:6b:6e:c5:fa:41:fb:8a:73:a8:09:7a:cb: d2:75:ff:d9:9e:25:5a:ec:e0:e7:c2:ad:2c:47:d3: 8b:06:18:0c:88:0c:d5:45:41:d4:06:b4:67:24:a8: c8:ce:13:46:39:e4:e2:d3:93:12:55:7b:3e:2f:1b: 97:91:5b:66:76:d0:58:68:f7:8f:27:b2:d2:3b:72: a0:37:0b:06:e3:cf:a8:f4:1c:d9:48:d8:15:75:1a: 99:79:22:53:3e:3e:f5:5d:b1:28:c0:d0:08:bb:1f: 26:f2:b3:b1:38:ba:e0:85:f3:2b:82:95:e6:e0:7c: 3f:43:5f:a1:ed:91:86:34:bf:9f:28:a4:49:b8:14: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AD:80:3F:44:49:FA:01:8D:58:D0:BB:F3:04:46:4A:4D:65:95:7B X509v3 Authority Key Identifier: keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b0:df:fc:55:78:3b:6d:21:78:fd:ce:bc:c3:c3:bf:e1:06: ff:b1:3c:b9:42:c8:6b:64:a3:f5:1b:24:dd:23:92:71:3e:83: bc:17:2b:31:54:34:ea:fb:d3:7e:b4:db:90:92:f1:bb:cf:36: 22:51:1e:de:62:14:3a:d8:39:2f:e9:76:d2:5d:38:c1:33:24: 2b:ad:56:ec:9d:75:83:7a:a0:64:d0:09:99:a7:94:60:e9:a9: ee:85:df:f9:10:4a:9d:02:23:2a:30:44:e1:99:45:84:fd:3d: ce:01:87:38:bb:0d:6c:5a:fd:c3:4f:46:3d:03:d2:ac:11:2d: cf:37:ad:02:44:84:c5:37:b5:59:36:62:4d:a9:ca:97:6f:3d: 58:2e:36:96:61:a2:2b:c2:b3:91:3c:71:d8:85:4a:33:79:d0: 8a:f7:cf:e2:5e:62:5a:16:63:58:36:bc:14:31:d6:cb:f7:c4: 50:27:c0:56:7e:6b:c0:30:00:28:34:3e:7f:5f:25:68:b2:27: e0:e3:5d:3c:76:d5:cc:3e:7c:b9:62:89:9c:e0:f1:96:b5:c0: c1:bf:34:da:76:0e:45:25:ca:c6:40:7a:33:bc:a8:21:76:3e: 53:d5:9e:0f:42:e3:6c:6c:11:32:23:d1:31:4b:45:23:9d:2e: 3a:0b:44:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTAxMDExMC8GA1UEBRMoNzUxQThCM0Q1QjYyRTgxRjQ2QTRDN0JENDY5NUJGM0E4 MDY5Q0EzRTAeFw0yNTA0MjAxODMwMzhaFw0yNTA0MjcxODMwMzhaMBgxFjAUBgNV BAMTDTY4MDUzZDRlLTU2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwcs2vaqWui8Q9Vx5cwz3QUdbCfKUaBFqwwgi8ThsLvhsyldAjAJZM4J0P/xYz 4gE6DlP9D4xivfYGwOEfLcfVQ0DdSJY1YZtPOmaQ+ZMvjJZhCAT1BQCmvBmsYH+F eULXVXH2bWvGVBt3mSEzVnca0dVfTbQ7U/lszmtuxfpB+4pzqAl6y9J1/9meJVrs 4OfCrSxH04sGGAyIDNVFQdQGtGckqMjOE0Y55OLTkxJVez4vG5eRW2Z20Fho948n stI7cqA3Cwbjz6j0HNlI2BV1Gpl5IlM+PvVdsSjA0Ai7Hybys7E4uuCF8yuClebg fD9DX6HtkYY0v58opEm4FOwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU62AP0RJ +gGNWNC78wRGSk1llXswHwYDVR0jBBgwFoAUdRqLPVti6B9GpMe9RpW/OoBpyj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MDEwLzZBN0U5NDBBMEMz QTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5R3BNZTlScFdfT29CcHlq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFJxTFBWdGk2QjlHcE1lOVJwV19Pb0JweWo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MDEwLzZBN0U5NDBBMEMzQTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5 R3BNZTlScFdfT29CcHlqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWw3/xVeDttIXj9zrzDw7/hBv+xPLlCyGtko/UbJN0jknE+g7wXKzFU NOr7036025CS8bvPNiJRHt5iFDrYOS/pdtJdOMEzJCutVuyddYN6oGTQCZmnlGDp qe6F3/kQSp0CIyowROGZRYT9Pc4Bhzi7DWxa/cNPRj0D0qwRLc83rQJEhMU3tVk2 Yk2pypdvPVguNpZhoivCs5E8cdiFSjN50Ir3z+JeYloWY1g2vBQx1sv3xFAnwFZ+ a8AwACg0Pn9fJWiyJ+DjXTx21cw+fLliiZzg8Za1wMG/NNp2DkUlysZAejO8qCF2 PlPVng9C42xsETIj0TFLRSOdLjoLREY= -----END CERTIFICATE-----Generated at Mon Apr 21 21:25:24 2025 by rpki-client