$ rpki-client -vvf rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft File: dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft (raw, json) Hash identifier: FUX5Rc8gBQNEwTGsuXrPJNDJnTLc/hPh/QM+sWQpf9w= Subject key identifier: 8C:34:F5:3C:61:99:36:F8:F8:0D:83:80:F8:83:8F:B1:F7:06:C3:6E Authority key identifier: 76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D Certificate issuer: /CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft Manifest number: 03EA Signing time: Thu 03 Apr 2025 00:32:56 +0000 Manifest this update: Thu 03 Apr 2025 00:32:55 +0000 Manifest next update: Thu 10 Apr 2025 00:32:55 +0000 Files and hashes: 1: dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl (hash: zTw9gb6TsJ0q71IMljIA9hyPtq7UD5F2qC33DmPxzb0=) 2: 2F376110652C11EFAEB1C656C4F9AE02.roa (hash: TDsvXPVTUh2c2MCiO7qt4FlDRRZ1fxaO2mLnsBigZ0k=) 3: 81A1363E652B11EF8DDDB555C4F9AE02.roa (hash: PLhk6N75GMzt0LCkeHhTZXOpHSNV9ZRgMrQ7j9F01Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147526 Validity Not Before: Apr 3 00:32:55 2025 GMT Not After : Apr 10 00:32:55 2025 GMT Subject: CN=67edd738-bde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:d6:6b:2b:3c:d9:b5:21:59:e6:c8:9f:0c: 83:6a:b6:e4:1c:60:da:15:38:b3:a5:4c:9e:4d:e3: 2f:56:f5:6d:02:a0:4b:4f:cc:42:c4:54:51:86:7f: 46:3f:19:ac:30:3a:b9:b5:5d:e5:c8:e1:e8:f6:4e: 35:3e:cc:5a:9d:9f:6c:99:a3:c7:76:e9:de:c6:08: cd:ae:f2:d4:2b:dd:da:0a:f7:fd:cf:d0:28:a0:fd: 00:d4:b7:57:1c:fa:2d:45:1b:0c:05:8d:9f:d6:fd: 7c:7c:78:ba:09:73:0a:ed:54:9d:a9:ef:82:e6:2a: 8b:a2:1e:87:f6:0a:e4:c5:9e:f6:f5:69:29:44:f6: 25:67:eb:a5:35:54:8c:b8:26:f8:df:47:da:f5:d4: c7:bd:8e:e0:6f:2f:81:f8:cc:24:1c:e3:57:5f:9f: 7f:81:45:41:26:7c:75:1d:4b:b7:f4:2b:fb:c6:08: 05:90:82:e1:3f:4f:b7:40:e1:25:e4:15:30:e6:40: 57:77:73:c8:bc:53:da:0b:88:5a:20:83:21:66:75: 0b:4b:c3:93:de:00:e0:c3:94:74:d1:9c:e4:5f:65: 59:02:7b:ee:42:8d:fd:46:77:80:91:a3:28:5b:57: 2f:01:02:3d:a4:43:0f:d9:7d:4b:c4:40:55:3a:e0: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:F5:3C:61:99:36:F8:F8:0D:83:80:F8:83:8F:B1:F7:06:C3:6E X509v3 Authority Key Identifier: keyid:76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:51:6e:1e:25:a4:74:ad:b7:54:78:be:a5:b7:32:f5:ce:4b: aa:37:00:1b:f1:d9:cd:d2:25:9f:7b:00:95:1e:75:13:c2:bf: ad:5c:2f:c3:d7:03:40:e7:83:45:87:7e:aa:e2:4d:ac:c0:b4: 35:45:ac:d4:fa:77:68:fa:dc:69:58:d6:8c:e0:0b:89:e7:25: 3d:0c:7a:5c:fa:86:97:7b:df:8d:c1:c7:83:74:6d:a8:6d:87: 3a:d1:7a:cd:54:fd:9c:bf:1e:e7:f3:4d:62:88:0a:90:7b:db: 95:5c:7c:ee:03:06:9e:9e:9e:eb:21:9c:6a:8a:cf:88:c4:70: c3:b0:39:85:1e:89:fb:e0:cc:4f:6e:e3:5d:a4:cc:ab:4f:0a: e8:cc:0e:71:58:bd:0c:7b:cb:0a:d7:fe:4f:69:2a:d0:ee:c9: f1:4d:ee:35:b1:e3:cc:34:45:0d:ce:41:c4:23:d6:f0:c8:79: 17:a9:d9:c8:d2:1e:cb:96:f1:5f:13:08:83:a8:21:5b:0d:37: 62:82:03:39:74:9a:11:ec:a3:26:fd:a2:9c:66:7b:7d:65:ef: 99:fd:99:87:85:8b:f8:95:ba:72:ae:4e:fb:9c:24:4c:8f:ab: 8b:07:af:04:61:59:fa:9f:dc:12:70:d6:c5:99:ed:c8:4d:aa: 9f:04:68:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1MjYxMTAvBgNVBAUTKDc2REY4NDZFNjU1NEM3MENDQUI3OEI4RjhBNUE3NDYz RTkzMEFDMEQwHhcNMjUwNDAzMDAzMjU1WhcNMjUwNDEwMDAzMjU1WjAYMRYwFAYD VQQDEw02N2VkZDczOC1iZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySjWays82bUhWebInwyDarbkHGDaFTizpUyeTeMvVvVtAqBLT8xCxFRRhn9G PxmsMDq5tV3lyOHo9k41PsxanZ9smaPHdunexgjNrvLUK93aCvf9z9AooP0A1LdX HPotRRsMBY2f1v18fHi6CXMK7VSdqe+C5iqLoh6H9grkxZ729WkpRPYlZ+ulNVSM uCb430fa9dTHvY7gby+B+MwkHONXX59/gUVBJnx1HUu39Cv7xggFkILhP0+3QOEl 5BUw5kBXd3PIvFPaC4haIIMhZnULS8OT3gDgw5R00ZzkX2VZAnvuQo39RneAkaMo W1cvAQI9pEMP2X1LxEBVOuCEoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw09Txh mTb4+A2DgPiDj7H3BsNuMB8GA1UdIwQYMBaAFHbfhG5lVMcMyreLj4padGPpMKwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzUyNi80QjE0OTU0ODc0 NEMxMUVDOUI1ODMwN0FDNEY5QUUwMi9kdC1FYm1WVXh3ekt0NHVQaWxwMFkta3dy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0LUVibVZVeHd6S3Q0dVBpbHAwWS1rd3JBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzUyNi80QjE0OTU0ODc0NEMxMUVDOUI1ODMwN0FDNEY5QUUwMi9kdC1FYm1WVXh3 ekt0NHVQaWxwMFkta3dyQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHUW4eJaR0rbdUeL6ltzL1zkuqNwAb8dnN0iWfewCVHnUTwr+tXC/D 1wNA54NFh36q4k2swLQ1RazU+ndo+txpWNaM4AuJ5yU9DHpc+oaXe9+NwceDdG2o bYc60XrNVP2cvx7n801iiAqQe9uVXHzuAwaenp7rIZxqis+IxHDDsDmFHon74MxP buNdpMyrTwrozA5xWL0Me8sK1/5PaSrQ7snxTe41sePMNEUNzkHEI9bwyHkXqdnI 0h7LlvFfEwiDqCFbDTdiggM5dJoR7KMm/aKcZnt9Ze+Z/ZmHhYv4lbpyrk77nCRM j6uLB68EYVn6n9wScNbFme3ITaqfBGg2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:12 2025 by rpki-client