$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: gtVpzT5SDCHw9vfhrmcrCrSqtYrZDCud902EJdtBFvA= Subject key identifier: 76:49:94:D5:C0:BC:EE:91:55:2A:3B:98:AF:57:87:25:47:2B:61:9D Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 01E2 Signing time: Tue 15 Apr 2025 01:54:52 +0000 Manifest this update: Tue 15 Apr 2025 01:54:52 +0000 Manifest next update: Tue 22 Apr 2025 01:54:52 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: UU0y/5UoJMMTZghEqP9XTAuazoix39Y7lBnbCaU5tzE=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: MYK+90f38qq09MaAriFmkTSiCYzdZCdhPOebzwsp0Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Apr 15 01:54:52 2025 GMT Not After : Apr 22 01:54:52 2025 GMT Subject: CN=67fdbc6c-d9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:fe:1f:04:cb:f3:f6:fe:dc:84:19:e3:81: 49:2a:97:84:88:b0:cf:0d:41:10:d9:53:5d:08:06: ac:d6:7d:ce:f1:4f:51:72:7f:7b:1b:df:68:35:2d: 3d:2d:44:5b:a0:4c:d8:48:c3:35:4c:b7:d1:a6:6b: 6f:dc:47:43:d2:b5:d3:7a:d2:7f:cb:30:66:c4:5b: 8b:58:e6:93:b2:9d:e9:88:ce:dc:b8:ef:7e:86:ed: 6e:38:6c:b8:70:4b:8a:2b:59:0f:2b:58:94:a2:64: d9:e4:e0:f0:70:81:36:fd:9a:ec:eb:8a:86:df:0c: 5a:b6:07:b5:ef:3c:30:2d:fa:6f:38:d4:c8:14:3b: 31:ff:ba:c1:97:43:12:82:b5:02:dd:12:d7:f9:b2: 76:f3:58:18:ca:ff:7d:ad:c2:b3:6a:93:93:63:44: 52:fd:a2:e1:d6:9e:2a:2f:f9:a8:a3:21:fa:8c:6f: 15:d2:54:bb:ee:3f:9c:01:74:50:1e:56:51:0e:13: 13:85:43:1e:1f:b6:51:ae:a8:cb:67:2a:e9:73:d2: 49:8d:37:94:79:ed:6f:0f:a4:b8:06:f6:13:cd:38: a7:dd:fe:80:e0:5d:4e:28:55:ab:27:c8:0e:1c:90: 3c:0a:cc:5f:52:d4:8a:f3:c3:84:a4:ef:95:e3:20: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:94:D5:C0:BC:EE:91:55:2A:3B:98:AF:57:87:25:47:2B:61:9D X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3f:b1:f3:db:a2:04:d0:23:37:65:71:32:a8:31:46:21:8a: a2:0b:42:93:fe:a8:60:b5:44:9c:df:77:b1:d8:46:f3:62:b7: a1:45:7a:e7:ea:e2:be:d4:ec:7f:d7:ea:f7:bb:61:50:31:63: f7:8f:68:40:ec:74:3b:31:30:d8:b2:4f:9d:f2:22:dd:f6:b3: 8a:3e:0b:f3:85:8d:69:84:3e:64:f5:eb:e8:55:00:8c:68:1c: 3c:cc:d2:b8:74:77:18:75:c2:1d:91:a1:35:9c:29:38:50:7c: e9:2a:06:71:bb:3e:a7:1f:0b:90:87:1f:fe:59:ee:6b:62:8d: ba:1b:8f:01:a7:d9:0f:46:29:de:f1:32:e7:97:bb:12:00:ca: bb:33:0e:3b:5b:b7:37:cb:a0:51:f4:d4:50:78:33:b7:09:9c: 70:3b:ff:6e:09:95:35:c8:2e:86:5c:5b:30:d7:b2:2a:62:95: a4:78:e9:64:d6:26:bc:0e:4b:32:39:db:17:39:97:a2:47:b1: 64:57:ca:9f:8e:d8:57:5d:12:6f:08:86:0c:d4:1d:f6:22:2a: d1:5e:ce:c8:59:ec:e8:d7:91:35:e3:8f:b3:ac:3b:e2:73:86: cc:6c:12:cc:8c:aa:2a:e9:d1:a6:94:fc:05:e0:47:2f:ff:23: 26:71:e3:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUwNDE1MDE1NDUyWhcNMjUwNDIyMDE1NDUyWjAYMRYwFAYD VQQDEw02N2ZkYmM2Yy1kOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZD+HwTL8/b+3IQZ44FJKpeEiLDPDUEQ2VNdCAas1n3O8U9Rcn97G99oNS09 LURboEzYSMM1TLfRpmtv3EdD0rXTetJ/yzBmxFuLWOaTsp3piM7cuO9+hu1uOGy4 cEuKK1kPK1iUomTZ5ODwcIE2/Zrs64qG3wxatge17zwwLfpvONTIFDsx/7rBl0MS grUC3RLX+bJ281gYyv99rcKzapOTY0RS/aLh1p4qL/mooyH6jG8V0lS77j+cAXRQ HlZRDhMThUMeH7ZRrqjLZyrpc9JJjTeUee1vD6S4BvYTzTin3f6A4F1OKFWrJ8gO HJA8CsxfUtSK88OEpO+V4yBaoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZJlNXA vO6RVSo7mK9XhyVHK2GdMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYP7Hz26IE0CM3ZXEyqDFGIYqiC0KT/qhgtUSc33ex2EbzYrehRXrn 6uK+1Ox/1+r3u2FQMWP3j2hA7HQ7MTDYsk+d8iLd9rOKPgvzhY1phD5k9evoVQCM aBw8zNK4dHcYdcIdkaE1nCk4UHzpKgZxuz6nHwuQhx/+We5rYo26G48Bp9kPRine 8TLnl7sSAMq7Mw47W7c3y6BR9NRQeDO3CZxwO/9uCZU1yC6GXFsw17IqYpWkeOlk 1ia8DksyOdsXOZeiR7FkV8qfjthXXRJvCIYM1B32IirRXs7IWezo15E144+zrDvi c4bMbBLMjKoq6dGmlPwF4Ecv/yMmcePz -----END CERTIFICATE-----Generated at Wed Apr 16 17:04:54 2025 by rpki-client