$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft File: DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json) Hash identifier: F73TnowlIohc4MxAGnB4EcdClcPL1FL6JQZ0rU0PVoc= Subject key identifier: 43:D8:13:5E:43:1E:BC:87:94:D1:B8:C1:66:DA:79:A5:71:19:E3:28 Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft Manifest number: 30 Signing time: Thu 03 Apr 2025 06:55:55 +0000 Manifest this update: Thu 03 Apr 2025 06:55:54 +0000 Manifest next update: Thu 10 Apr 2025 06:55:54 +0000 Files and hashes: 1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: 9HJH/ofDlFaHLyDliSUBj3egQktytsy7KReWkTTvSk4=) 2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138959 Validity Not Before: Apr 3 06:55:54 2025 GMT Not After : Apr 10 06:55:54 2025 GMT Subject: CN=67ee30fb-3721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:de:ad:ab:05:5a:5c:1f:f2:87:c9:c6:a4:53: 50:c2:ea:72:ee:01:d3:9b:47:63:b5:5f:b8:8b:b6: 23:7a:7e:e2:cb:2e:66:31:eb:d3:3c:b8:54:3a:56: 85:f1:86:ef:2e:2e:f5:fd:bb:04:df:d8:c5:b6:6d: e8:ae:b1:a8:b8:af:3d:4a:4d:da:70:1f:38:be:b4: 89:61:68:b8:f6:9b:01:12:e4:06:d6:8d:52:99:36: fd:7d:d7:5e:9d:07:ec:62:18:bf:99:71:88:ce:cb: 25:38:7e:54:1f:84:2a:2b:96:74:92:0b:8b:88:21: c6:0d:d4:38:0d:09:c6:a1:e9:7c:4a:6c:23:1e:26: e6:8b:b6:38:81:95:f3:43:94:74:bf:7f:4c:5d:6e: 8f:b9:eb:cf:f3:dc:99:59:32:11:96:c6:c9:7a:4a: 8c:4d:88:3a:5c:90:a2:26:4f:16:ec:2d:2a:e2:0b: 69:6d:f6:4f:a5:76:43:e7:30:fc:76:aa:37:a0:5d: 44:8b:78:4f:22:39:91:74:ad:1b:1a:96:d5:41:df: e5:0f:96:f2:68:40:36:27:80:b7:7c:21:ed:2a:cc: b0:a7:24:aa:86:b3:4f:16:7e:0f:59:67:04:bf:06: 90:70:f4:a0:84:d0:95:b2:79:60:5c:53:22:8f:a6: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:13:5E:43:1E:BC:87:94:D1:B8:C1:66:DA:79:A5:71:19:E3:28 X509v3 Authority Key Identifier: keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7d:b1:a3:75:46:c9:6f:e3:0b:da:e7:43:d8:3f:11:70:e0: f0:72:ce:f4:f3:93:34:dd:fa:19:7d:d9:d7:2d:b6:d7:14:e8: a4:85:0e:e1:4b:8f:c8:cc:04:70:fc:21:9d:7c:f0:8c:80:a6: 54:66:de:21:6b:55:6d:99:68:ee:bd:7e:d9:c7:29:c3:fc:2e: b9:b7:6f:51:d8:1d:1c:6b:7c:58:a4:ac:a7:5b:be:40:8f:37: 9c:15:bc:15:a0:e5:b5:96:63:be:9b:f8:e4:4b:63:55:eb:54: 28:92:a4:b8:e1:7d:e0:ec:ea:27:92:10:be:93:2c:a3:d4:c1: ff:2c:ed:d7:3a:52:66:11:38:7a:dd:bc:7f:7e:7d:cf:13:b2: c7:99:24:32:61:e8:ba:d1:fa:c4:f3:b0:eb:18:37:54:2f:7e: 88:63:87:f6:e5:3b:f7:26:93:5f:10:6c:cc:e7:58:5d:d7:43: 09:28:91:7f:75:5d:40:85:ff:d5:b5:0d:a2:4f:05:53:90:31: 39:ee:ff:14:23:ff:f6:2b:42:85:6b:c7:8a:28:f3:f0:f7:1a: 0c:dc:f6:dd:2d:70:f8:14:1b:92:3b:6c:5f:56:e1:9b:d6:83: 1b:9a:d8:9a:61:3b:17:76:d1:7f:12:b3:3e:36:99:1d:54:c2: 55:f9:88:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODk1OTExMC8GA1UEBRMoMEU5MzY2MUFDMTYxNTRGNjVEMkEyRjc4MUEwMzFGMzVD OTMxMDEwMzAeFw0yNTA0MDMwNjU1NTRaFw0yNTA0MTAwNjU1NTRaMBgxFjAUBgNV BAMTDTY3ZWUzMGZiLTM3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp3q2rBVpcH/KHycakU1DC6nLuAdObR2O1X7iLtiN6fuLLLmYx69M8uFQ6VoXx hu8uLvX9uwTf2MW2beiusai4rz1KTdpwHzi+tIlhaLj2mwES5AbWjVKZNv19116d B+xiGL+ZcYjOyyU4flQfhCorlnSSC4uIIcYN1DgNCcah6XxKbCMeJuaLtjiBlfND lHS/f0xdbo+568/z3JlZMhGWxsl6SoxNiDpckKImTxbsLSriC2lt9k+ldkPnMPx2 qjegXUSLeE8iOZF0rRsaltVB3+UPlvJoQDYngLd8Ie0qzLCnJKqGs08Wfg9ZZwS/ BpBw9KCE0JWyeWBcUyKPphcPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ9gTXkMe vIeU0bjBZtp5pXEZ4ygwHwYDVR0jBBgwFoAUDpNmGsFhVPZdKi94GgMfNckxAQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OTU5L0JCRDE0MDhDQ0RF QjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBaZEtpOTRHZ01mTmNreEFR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHBObUdzRmhWUFpkS2k5NEdnTWZOY2t4QVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OTU5L0JCRDE0MDhDQ0RFQjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBa ZEtpOTRHZ01mTmNreEFRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJh9saN1Rslv4wva50PYPxFw4PByzvTzkzTd+hl92dctttcU6KSFDuFL j8jMBHD8IZ188IyAplRm3iFrVW2ZaO69ftnHKcP8Lrm3b1HYHRxrfFikrKdbvkCP N5wVvBWg5bWWY76b+ORLY1XrVCiSpLjhfeDs6ieSEL6TLKPUwf8s7dc6UmYROHrd vH9+fc8TsseZJDJh6LrR+sTzsOsYN1Qvfohjh/blO/cmk18QbMznWF3XQwkokX91 XUCF/9W1DaJPBVOQMTnu/xQj//YrQoVrx4oo8/D3Ggzc9t0tcPgUG5I7bF9W4ZvW gxua2JphOxd20X8Ssz42mR1UwlX5iCQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:10 2025 by rpki-client