$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft File: DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json) Hash identifier: wq5RtA/Bn/G5kf1aFpn2lrHPztyPAVp72bu04fnaqUg= Subject key identifier: 55:A7:C0:0E:A7:4A:9F:BF:11:CC:69:44:22:D1:EE:FC:D2:F3:79:2E Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft Manifest number: 029C Signing time: Fri 11 Apr 2025 01:29:42 +0000 Manifest this update: Fri 11 Apr 2025 01:29:42 +0000 Manifest next update: Fri 18 Apr 2025 01:29:42 +0000 Files and hashes: 1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: 4UjUJWTUDpkDbZH70OTrtPbrck5InaRNdxZzU7xtpSg=) 2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: ntNrGSdhnaByUlcvhB2CTz3FfTnIbbsFAC6yftD7WM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Validity Not Before: Apr 11 01:29:42 2025 GMT Not After : Apr 18 01:29:42 2025 GMT Subject: CN=67f87086-29f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:81:ba:b7:04:c6:72:5f:ec:3a:59:54:a7: bc:23:7b:db:11:21:18:c3:56:2c:64:dc:45:a0:9c: 0e:65:12:18:57:ac:d6:6b:d5:8e:d4:33:87:d1:10: 8d:de:d8:10:0f:26:b4:fb:00:98:47:b9:be:52:0b: 82:13:4c:34:70:24:b2:ba:87:86:fd:f0:32:eb:52: 53:bf:f1:94:00:55:9d:1a:98:30:e5:b4:3d:e4:80: 0f:a4:03:29:a4:20:00:c2:6e:88:6e:63:35:3b:7c: 89:ac:a5:35:ae:ba:29:82:d8:8a:93:ce:20:30:e0: 71:bd:76:a5:f3:3e:a2:6b:20:a8:e2:af:c7:a8:6c: 95:4c:89:6f:03:71:35:2f:de:90:06:16:df:3f:db: b2:3f:6e:ac:f4:89:ec:da:84:ec:90:ef:f4:85:84: 7e:f9:22:45:ee:40:b6:1d:a1:fc:74:85:c6:b4:9f: 4e:d6:1e:2e:05:93:97:a5:b8:b8:53:1b:09:c2:27: 51:39:a3:65:15:55:fd:71:76:5e:51:d1:4e:30:5f: d1:60:0e:7f:93:3b:f6:55:2c:ac:cd:35:38:9d:4a: 78:fe:b2:40:eb:c5:4a:ec:68:1a:ee:98:a3:31:bd: 46:2d:5f:df:a1:09:81:52:42:a9:5a:b3:d7:fe:a5: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A7:C0:0E:A7:4A:9F:BF:11:CC:69:44:22:D1:EE:FC:D2:F3:79:2E X509v3 Authority Key Identifier: keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:f5:d5:1d:59:92:81:55:9a:5d:eb:bd:6c:6c:a9:76:88: 20:59:3c:66:eb:14:00:ea:98:84:9a:e3:5d:1c:d3:c3:5e:f7: 1d:d2:36:1a:2c:64:5f:4c:a1:a1:8f:79:d2:59:67:57:f0:0b: b5:22:3e:cc:fd:4d:6a:87:ef:df:06:39:61:83:ba:1c:54:48: fb:fa:18:ac:94:b3:04:ce:4a:60:5b:c1:e4:7d:72:a0:4e:55: 5a:6f:91:a0:a3:b9:7c:ea:f2:03:8c:37:22:80:a0:ea:19:68: 6f:87:c8:d0:70:dc:26:a4:aa:02:8c:0b:da:88:e0:d8:36:00: b9:9a:fa:94:7c:de:cd:90:76:0c:14:5f:01:39:fe:5c:d6:dd: 47:54:40:5c:81:01:0b:31:f3:8e:67:13:00:0a:f5:c7:7e:9c: 59:24:06:f6:15:e0:2c:29:29:bd:ad:40:43:a0:ba:eb:ea:a6: 5b:e4:47:4e:f9:e8:25:2b:84:5e:b4:47:11:65:c7:7c:f8:0e: f4:ab:53:f8:8d:4f:c2:0f:c1:4d:c5:53:85:07:bf:eb:04:d0: e5:7b:7c:4e:df:2f:95:e0:d8:18:c8:49:38:ab:03:c0:64:c2: 47:2e:ca:59:bb:0d:a5:df:70:0d:26:60:5b:1c:bc:20:d3:5e: a8:13:a6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1 QkU2MzVDRUEwHhcNMjUwNDExMDEyOTQyWhcNMjUwNDE4MDEyOTQyWjAYMRYwFAYD VQQDEw02N2Y4NzA4Ni0yOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPyBurcExnJf7DpZVKe8I3vbESEYw1YsZNxFoJwOZRIYV6zWa9WO1DOH0RCN 3tgQDya0+wCYR7m+UguCE0w0cCSyuoeG/fAy61JTv/GUAFWdGpgw5bQ95IAPpAMp pCAAwm6IbmM1O3yJrKU1rropgtiKk84gMOBxvXal8z6iayCo4q/HqGyVTIlvA3E1 L96QBhbfP9uyP26s9Ins2oTskO/0hYR++SJF7kC2HaH8dIXGtJ9O1h4uBZOXpbi4 UxsJwidROaNlFVX9cXZeUdFOMF/RYA5/kzv2VSyszTU4nUp4/rJA68VK7Gga7pij Mb1GLV/foQmBUkKpWrPX/qWqHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWnwA6n Sp+/EcxpRCLR7vzS83kuMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4 OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZ MnU0bUVNR24yb2RiNWpYT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuK/XVHVmSgVWaXeu9bGypdoggWTxm6xQA6piEmuNdHNPDXvcd0jYa LGRfTKGhj3nSWWdX8Au1Ij7M/U1qh+/fBjlhg7ocVEj7+hislLMEzkpgW8HkfXKg TlVab5Ggo7l86vIDjDcigKDqGWhvh8jQcNwmpKoCjAvaiODYNgC5mvqUfN7NkHYM FF8BOf5c1t1HVEBcgQELMfOOZxMACvXHfpxZJAb2FeAsKSm9rUBDoLrr6qZb5EdO +eglK4RetEcRZcd8+A70q1P4jU/CD8FNxVOFB7/rBNDle3xO3y+V4NgYyEk4qwPA ZMJHLspZuw2l33ANJmBbHLwg016oE6Yh -----END CERTIFICATE-----Generated at Sat Apr 12 17:40:57 2025 by rpki-client