$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: QJ/jNBKZQsuLRpQhEdD6dhtnEO/TY4z6oHCfZpa/oLk= Subject key identifier: BC:A0:01:FB:DA:4E:CB:0A:18:BA:6F:CC:0E:56:EF:61:3B:E1:2B:AF Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 0523 Signing time: Fri 04 Apr 2025 23:37:50 +0000 Manifest this update: Fri 04 Apr 2025 23:37:50 +0000 Manifest next update: Fri 11 Apr 2025 23:37:50 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: yUa4+13bSZZGI7Wb7/GaHpQ7/UgrsnASJW/JQw97HHs=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E Validity Not Before: Apr 4 23:37:50 2025 GMT Not After : Apr 11 23:37:50 2025 GMT Subject: CN=67f06d4e-7f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:fc:2b:1d:6e:b1:59:db:4d:95:57:f5:dd: 51:04:97:a3:95:f9:ac:4d:76:22:89:7f:bb:41:46: a5:e3:de:0d:00:92:df:69:bc:a6:76:fd:71:3d:2a: 90:de:9d:27:21:90:2b:cb:ca:8c:b2:f7:70:27:8b: 80:9a:1b:57:d0:0c:fc:b9:ca:81:8b:4f:36:80:83: e0:e9:85:d1:39:25:43:0b:a4:00:a0:4f:36:b3:70: 76:f6:5c:57:c0:af:61:38:6e:3f:88:1b:7b:7a:fa: 7a:d1:30:b8:54:d9:dd:2d:b6:54:b3:c7:98:69:f0: b4:c0:10:a8:cd:d1:ca:d2:cf:21:8f:2f:72:43:97: 38:8d:39:e2:e8:20:83:b1:0c:ad:42:c6:77:a2:7e: 51:fe:f7:09:92:3e:60:d3:9e:91:2f:86:09:31:cc: bd:ef:f5:0e:1e:7e:97:2f:7a:17:c3:18:23:a3:ae: 5a:79:a5:a4:09:6c:20:a8:85:ad:3c:5c:b3:f1:ba: 6b:66:af:f2:68:e0:0b:d1:8b:4f:f9:01:9e:b4:17: 0e:bd:fa:ab:5e:1b:27:41:80:d7:eb:95:6c:68:7d: 11:fb:5c:ce:79:44:d3:9a:5c:1a:0d:8a:d3:04:00: e1:4c:0e:f0:f5:09:d3:05:bc:64:17:7a:57:0d:0a: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A0:01:FB:DA:4E:CB:0A:18:BA:6F:CC:0E:56:EF:61:3B:E1:2B:AF X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d1:dd:fb:6c:d3:b4:dc:f1:f4:89:21:79:45:c2:a3:ec:ff: a9:3a:55:71:15:e9:81:a9:d8:bb:88:16:17:b2:74:00:73:11: bb:cf:06:55:b9:1e:e6:e6:3b:26:25:cb:f4:d8:3a:83:87:42: 42:64:36:6d:47:8d:5e:34:c9:4d:e6:8c:df:94:85:51:c0:1a: 2e:92:c2:6a:c0:96:dc:7e:70:a3:08:91:05:43:4d:97:ff:9d: 22:ca:97:e9:74:bf:f8:c0:85:48:20:f1:9f:9f:e4:58:40:f1: 45:59:b2:8c:ea:3f:c3:75:52:e8:ec:9d:9e:70:27:17:d1:cf: 26:df:de:ed:91:54:83:ea:80:72:0c:8a:14:15:da:98:2c:87: 3b:47:13:8d:9b:18:64:9b:06:d9:bf:a1:91:d5:0c:07:e4:d3: f3:1b:10:36:99:18:f0:27:56:3f:48:a7:08:1d:08:07:b7:07: eb:73:93:68:e7:df:39:09:0e:b9:11:71:f6:0a:4c:cd:5c:51: 01:73:f8:16:76:47:ea:54:40:f6:ca:60:ad:06:79:e0:63:bb: ef:b7:c9:38:4b:4a:ea:ff:a3:a7:c8:1d:04:7f:c9:a4:12:a7: 5c:bf:bd:6a:e9:26:c3:4a:c0:b5:9a:c7:06:dc:4c:e9:bd:b6: 2f:c5:6e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUwNDA0MjMzNzUwWhcNMjUwNDExMjMzNzUwWjAYMRYwFAYD VQQDEw02N2YwNmQ0ZS03ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHb8Kx1usVnbTZVX9d1RBJejlfmsTXYiiX+7QUal494NAJLfabymdv1xPSqQ 3p0nIZAry8qMsvdwJ4uAmhtX0Az8ucqBi082gIPg6YXROSVDC6QAoE82s3B29lxX wK9hOG4/iBt7evp60TC4VNndLbZUs8eYafC0wBCozdHK0s8hjy9yQ5c4jTni6CCD sQytQsZ3on5R/vcJkj5g056RL4YJMcy97/UOHn6XL3oXwxgjo65aeaWkCWwgqIWt PFyz8bprZq/yaOAL0YtP+QGetBcOvfqrXhsnQYDX65VsaH0R+1zOeUTTmlwaDYrT BADhTA7w9QnTBbxkF3pXDQpxzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLygAfva TssKGLpvzA5W72E74SuvMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC60d37bNO03PH0iSF5RcKj7P+pOlVxFemBqdi7iBYXsnQAcxG7zwZV uR7m5jsmJcv02DqDh0JCZDZtR41eNMlN5ozflIVRwBouksJqwJbcfnCjCJEFQ02X /50iypfpdL/4wIVIIPGfn+RYQPFFWbKM6j/DdVLo7J2ecCcX0c8m397tkVSD6oBy DIoUFdqYLIc7RxONmxhkmwbZv6GR1QwH5NPzGxA2mRjwJ1Y/SKcIHQgHtwfrc5No 5985CQ65EXH2CkzNXFEBc/gWdkfqVED2ymCtBnngY7vvt8k4S0rq/6OnyB0Ef8mk Eqdcv71q6SbDSsC1mscG3EzpvbYvxW7i -----END CERTIFICATE-----Generated at Sat Apr 5 23:42:14 2025 by rpki-client