$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json) Hash identifier: ne8ZpA18Y1W/d28lMqkY9URURQn8+I1avisFyQsqHbQ= Subject key identifier: 8E:B1:AF:E2:FB:B7:60:7B:81:36:57:09:D4:53:EA:8E:6D:E4:EC:74 Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft Manifest number: D6 Signing time: Sat 29 Mar 2025 05:02:56 +0000 Manifest this update: Sat 29 Mar 2025 05:02:55 +0000 Manifest next update: Sat 05 Apr 2025 05:02:55 +0000 Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: 8ColLdF1K5DBySNWs1izoUXCCDjh+g8ETb+/ttjDd7A=) 2: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: cZwVDK29snDD6Xr0iox6qVKQBw89Sanj4Nn6X381ztM=) 3: 79F7221E892911EF896D1145C4F9AE02.roa (hash: CdVHSgSFwVlvO0qZ+589iYkzFfVCO/HTOSZdhmiqYtg=) 4: F278C026892911EFB08D7746C4F9AE02.roa (hash: C5af6g+Lu9mdrwbxySM/XZuzLumGfZMRdOD7/d/Fh8M=) 5: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: h643cI2g+iFcUuenN+s6pHi62OFIxZQfh52pwbMjNbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9 Validity Not Before: Mar 29 05:02:55 2025 GMT Not After : Apr 5 05:02:55 2025 GMT Subject: CN=67e77f00-6e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:1a:94:3a:a7:55:45:fe:2d:f9:82:b1:16: 5a:83:af:37:0f:16:0e:57:bf:fa:10:e1:fb:a0:87: 3d:cb:a8:49:82:a1:b9:8a:df:75:9a:56:bb:ff:4e: a5:92:bc:69:13:38:90:0f:81:aa:a4:d7:81:97:41: 4f:c4:6a:cc:72:eb:48:e1:9b:c9:77:60:1e:7c:d0: 1f:c1:4e:c3:7e:d9:02:49:be:bf:d6:e4:fb:e0:43: 11:9e:2c:51:0c:4a:1f:fe:49:4f:14:6f:50:8e:34: 14:67:89:90:d6:96:a8:12:84:e8:ca:d8:59:0a:7d: ed:6a:72:bb:fe:e2:35:a2:80:b8:13:73:1f:64:1c: 96:1d:78:bf:2e:d8:de:fb:09:1f:61:b8:7d:dc:e4: 5a:54:fb:0e:ce:31:4c:3b:cd:8e:dc:8e:ab:54:4a: 72:a5:57:60:f1:f1:44:58:be:a5:f0:a9:35:5b:ff: a7:e4:69:fc:ab:cf:84:03:79:b0:23:d5:13:82:f5: b5:b1:c5:19:92:79:61:63:5c:04:31:ac:e1:0b:bb: 82:6e:ea:4f:08:30:f7:7f:ad:2c:69:12:2d:38:bf: 8d:a8:ac:62:67:05:8c:41:b6:0c:3a:53:5e:af:00: 70:90:51:03:ce:99:49:5c:2c:4b:32:46:25:6f:bc: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:AF:E2:FB:B7:60:7B:81:36:57:09:D4:53:EA:8E:6D:E4:EC:74 X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:76:67:d2:9b:2f:df:98:08:19:ad:34:ad:89:02:98:ab: ec:1b:0d:56:86:9f:e4:0c:2f:79:7f:7b:55:3f:71:a3:16:6c: 77:ba:4e:44:f8:34:fa:58:8e:6d:03:a1:51:69:42:e4:b6:d9: ed:b0:21:04:1d:96:be:57:26:92:f8:3e:99:94:eb:ff:93:98: 68:ec:96:8d:6c:9f:ca:ad:89:da:ed:4a:29:cb:ad:48:2f:43: 94:21:0b:96:6a:aa:8d:28:cf:08:4a:e5:4e:6f:3c:5c:91:4f: 16:e5:b2:04:e4:05:42:a9:b9:79:b9:e2:81:21:eb:be:cf:d0: d2:d8:10:bd:ee:b0:9f:06:fb:20:29:31:0e:81:0b:fe:08:7f: 16:53:24:d5:9a:77:7b:a0:fb:ec:ed:0f:44:db:7e:e7:46:64: 5a:45:4e:f8:0b:49:1c:dc:62:fd:b9:fa:04:99:66:bf:03:8d: e5:80:94:63:00:28:fb:92:2f:bd:93:f0:66:aa:60:bd:50:9c: b9:f1:ed:00:63:64:49:84:ef:54:ed:f9:e0:51:59:be:58:ee: 6f:5a:01:ec:51:ce:50:8e:5b:47:8a:4e:27:36:c4:2f:46:ea: b7:51:01:cb:5e:b6:d9:b8:95:30:26:a6:cc:cd:a2:bd:2e:1b: d8:4f:71:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwMzI5MDUwMjU1WhcNMjUwNDA1MDUwMjU1WjAYMRYwFAYD VQQDEw02N2U3N2YwMC02ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycQalDqnVUX+LfmCsRZag683DxYOV7/6EOH7oIc9y6hJgqG5it91mla7/06l krxpEziQD4GqpNeBl0FPxGrMcutI4ZvJd2AefNAfwU7DftkCSb6/1uT74EMRnixR DEof/klPFG9QjjQUZ4mQ1paoEoToythZCn3tanK7/uI1ooC4E3MfZByWHXi/Ltje +wkfYbh93ORaVPsOzjFMO82O3I6rVEpypVdg8fFEWL6l8Kk1W/+n5Gn8q8+EA3mw I9UTgvW1scUZknlhY1wEMazhC7uCbupPCDD3f60saRItOL+NqKxiZwWMQbYMOlNe rwBwkFEDzplJXCxLMkYlb7yfUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6xr+L7 t2B7gTZXCdRT6o5t5Ox0MB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChXZn0psv35gIGa00rYkCmKvsGw1Whp/kDC95f3tVP3GjFmx3uk5E +DT6WI5tA6FRaULkttntsCEEHZa+VyaS+D6ZlOv/k5ho7JaNbJ/KrYna7Uopy61I L0OUIQuWaqqNKM8ISuVObzxckU8W5bIE5AVCqbl5ueKBIeu+z9DS2BC97rCfBvsg KTEOgQv+CH8WUyTVmnd7oPvs7Q9E237nRmRaRU74C0kc3GL9ufoEmWa/A43lgJRj ACj7ki+9k/BmqmC9UJy58e0AY2RJhO9U7fngUVm+WO5vWgHsUc5QjltHik4nNsQv Ruq3UQHLXrbZuJUwJqbMzaK9LhvYT3F9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:59 2025 by rpki-client