$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: q2ESHlVJlKgrENvP3aFKS4wJ21ew7aRTitfpdYfAwQo= Subject key identifier: 05:33:4D:FE:0C:A5:41:8A:15:7F:95:03:67:E1:E1:45:DB:41:93:26 Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: E8 Signing time: Thu 03 Apr 2025 04:39:40 +0000 Manifest this update: Thu 03 Apr 2025 04:39:39 +0000 Manifest next update: Thu 10 Apr 2025 04:39:39 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: kXP7cc3sBHvAaqrzYW6o1W+LTwOc7jMubno+476/0IY=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A Validity Not Before: Apr 3 04:39:39 2025 GMT Not After : Apr 10 04:39:39 2025 GMT Subject: CN=67ee110c-c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:56:dc:e6:26:1b:03:cb:ca:c0:08:41:74: f6:a0:53:de:70:41:db:66:f2:e0:e6:45:03:46:44: 48:38:1a:fb:a3:27:8a:ce:d3:70:ef:76:35:88:09: 94:b3:60:88:22:ca:5d:09:c2:be:99:50:2e:b7:ab: 4b:74:2c:b7:97:f4:38:e6:85:2b:2a:b6:b7:ca:bc: e3:13:6a:93:e4:e3:b1:a1:27:89:c7:e2:62:51:92: 74:5d:cf:4c:8e:f7:70:7d:cd:18:3a:21:0d:fa:50: 0a:4d:42:bd:c4:58:bb:39:71:49:8d:62:53:76:50: 9f:61:19:ab:81:27:d3:3e:5c:9c:c9:39:5f:68:55: 05:dc:7f:be:a2:b2:2a:19:73:4c:72:da:a6:22:86: 12:3b:b0:0c:17:36:0c:02:8b:df:8e:dd:cc:2b:6b: b5:c5:45:2f:3a:7e:8e:41:42:e1:ad:5a:1f:f0:48: 15:dc:ba:b5:6a:34:8e:dc:03:91:14:fc:dc:58:90: e2:74:a2:4a:93:06:aa:59:7f:2d:8d:fb:26:29:05: 1f:99:9b:81:10:35:1e:4b:f0:05:47:f8:de:9d:85: bc:00:2b:7d:3b:b0:79:03:8c:db:67:2e:2e:1e:f5: 69:23:2d:30:7a:5d:75:60:a2:9f:19:54:f0:11:26: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:33:4D:FE:0C:A5:41:8A:15:7F:95:03:67:E1:E1:45:DB:41:93:26 X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0e:9c:6a:b4:1c:11:d9:8c:b2:1e:81:2a:5f:da:03:b3:ad: 98:69:c4:12:a7:cb:73:fa:b6:bc:e5:6d:47:7b:a7:a8:a5:e4: 91:dd:b4:2f:42:28:e0:45:36:95:da:28:cc:1e:18:e4:98:bf: f8:5a:8f:32:1b:6b:cc:15:7b:fe:30:1f:c8:e9:78:50:1c:5c: ac:8f:32:6d:05:7b:cf:96:69:ea:26:c0:20:b5:14:33:d4:70: 41:2f:49:28:5b:55:46:ae:5d:6a:ca:34:5d:53:a6:9d:c5:62: 27:e9:da:ed:40:32:1e:bc:69:0a:41:71:d3:d3:b7:fe:9a:fb: 22:36:30:7c:ea:80:d4:ac:06:d1:56:98:76:f9:39:b2:5f:c8: 59:d1:8a:bd:7d:96:3d:0f:87:42:6a:1a:43:19:9e:6e:71:b4: 3a:62:5d:88:d8:05:3c:02:89:60:aa:11:f8:0a:5f:8f:5a:56: 62:a1:8a:b9:ed:ad:7e:5b:e9:df:4b:09:93:2a:1b:67:13:43: 59:9f:6e:8a:e6:1e:10:c6:8a:62:67:9f:f0:49:7b:ee:d0:7c: 63:e7:e5:85:20:37:f2:7e:f7:78:c6:98:6c:19:25:12:f5:fb: 8a:19:2f:2b:f1:c1:6b:18:98:dc:f3:71:a2:b4:6a:cd:1e:14: dd:f9:21:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1 RTZEQjJCRDEwHhcNMjUwNDAzMDQzOTM5WhcNMjUwNDEwMDQzOTM5WjAYMRYwFAYD VQQDEw02N2VlMTEwYy1jMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6tW3OYmGwPLysAIQXT2oFPecEHbZvLg5kUDRkRIOBr7oyeKztNw73Y1iAmU s2CIIspdCcK+mVAut6tLdCy3l/Q45oUrKra3yrzjE2qT5OOxoSeJx+JiUZJ0Xc9M jvdwfc0YOiEN+lAKTUK9xFi7OXFJjWJTdlCfYRmrgSfTPlycyTlfaFUF3H++orIq GXNMctqmIoYSO7AMFzYMAovfjt3MK2u1xUUvOn6OQULhrVof8EgV3Lq1ajSO3AOR FPzcWJDidKJKkwaqWX8tjfsmKQUfmZuBEDUeS/AFR/jenYW8ACt9O7B5A4zbZy4u HvVpIy0wel11YKKfGVTwESaFKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUzTf4M pUGKFX+VA2fh4UXbQZMmMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1 QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlDpxqtBwR2YyyHoEqX9oDs62YacQSp8tz+ra85W1He6eopeSR3bQv QijgRTaV2ijMHhjkmL/4Wo8yG2vMFXv+MB/I6XhQHFysjzJtBXvPlmnqJsAgtRQz 1HBBL0koW1VGrl1qyjRdU6adxWIn6drtQDIevGkKQXHT07f+mvsiNjB86oDUrAbR Vph2+TmyX8hZ0Yq9fZY9D4dCahpDGZ5ucbQ6Yl2I2AU8AolgqhH4Cl+PWlZioYq5 7a1+W+nfSwmTKhtnE0NZn26K5h4QxopiZ5/wSXvu0Hxj5+WFIDfyfvd4xphsGSUS 9fuKGS8r8cFrGJjc83GitGrNHhTd+SGz -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:53 2025 by rpki-client