$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft File: DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft (raw, json) Hash identifier: rmhpFpzSCvlOpK8+FqVGmmoL5zxGP2mLBfStlbOl8jc= Subject key identifier: 03:AB:4B:38:83:40:B0:54:28:0E:5E:A8:C2:04:B8:E0:FA:9B:9A:BE Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 Certificate issuer: /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15 Certificate serial: 036A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft Manifest number: 0364 Signing time: Thu 03 Apr 2025 00:59:23 +0000 Manifest this update: Thu 03 Apr 2025 00:59:23 +0000 Manifest next update: Thu 10 Apr 2025 00:59:23 +0000 Files and hashes: 1: DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl (hash: AbymOZtJMlwksy2u4amFndrzalNLSkU24DUqyV3UXRg=) 2: E747F80C6AA411EDB76B7A36C4F9AE02.roa (hash: dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153838 Validity Not Before: Apr 3 00:59:23 2025 GMT Not After : Apr 10 00:59:23 2025 GMT Subject: CN=67eddd6b-bc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:f9:09:64:80:44:d8:17:ef:ee:f5:6f:45: 05:6a:d6:60:8b:83:6f:c5:1e:b1:cf:e3:3f:55:58: eb:3a:73:ff:c9:57:87:08:ab:3a:4d:6a:eb:2e:de: d4:a1:75:83:19:93:29:74:67:c8:2d:e9:75:4b:18: 1f:5a:0e:e2:3e:bd:8c:e6:fe:67:72:e0:01:e0:41: 78:8c:e3:bd:2f:60:90:04:4c:6e:d5:87:8e:06:43: e9:45:a2:f0:a8:c6:10:fd:0c:ac:2d:ea:9d:8a:3b: fc:9d:53:3d:8d:67:8e:04:2c:44:27:50:27:f5:6b: dc:29:f1:71:41:09:d2:6c:20:10:4a:cc:c8:22:8a: 41:cc:87:68:0f:40:59:ab:11:63:5a:b3:64:ac:17: 47:e5:1c:5c:9e:c1:4f:9a:bf:d8:5c:c4:1d:1f:af: 94:0e:b5:74:51:e1:7d:0a:ea:50:a4:9d:c4:84:c1: fa:2b:fa:ce:1f:d5:2d:62:b2:34:a3:71:98:51:a9: 64:4f:34:4e:3c:bd:ce:70:5b:a5:c1:73:e5:fc:34: 2f:72:6b:53:be:e2:8c:92:96:cc:27:13:aa:10:53: 5a:39:98:dd:78:82:3f:c5:93:3d:1a:e5:fa:c1:db: 9d:38:93:7f:89:b9:9d:5d:a2:6a:5b:1f:c6:e9:c7: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AB:4B:38:83:40:B0:54:28:0E:5E:A8:C2:04:B8:E0:FA:9B:9A:BE X509v3 Authority Key Identifier: keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:17:9a:cc:90:f1:6b:29:11:66:ea:53:a0:48:22:79:b4:2d: 5d:53:01:be:0c:40:b4:7f:27:2c:8c:85:80:d8:8b:49:79:ff: ce:f7:21:26:08:a9:7e:1c:bc:a7:59:ef:58:97:31:5d:19:83: 28:62:76:eb:57:57:1a:52:43:64:67:15:f9:01:15:67:0e:54: 6a:ff:3a:37:21:98:6e:e4:46:91:ad:05:d5:d3:0b:17:c3:f7: c1:db:76:82:b9:06:4a:e6:57:c0:95:a6:bc:62:6d:a7:4a:29: 82:46:b2:76:39:57:4a:d8:9f:a9:aa:8e:2c:61:78:e1:aa:90: df:82:2d:83:7e:a0:8c:6e:b7:07:8d:19:53:9f:9b:06:23:25: 21:c6:21:39:e7:c9:23:a6:ab:6b:6e:25:b2:3d:74:63:43:d9: 5e:f5:27:fd:e8:b0:3d:3c:75:6b:3b:91:39:d7:7e:89:87:05: 6a:e1:9b:12:92:08:1a:c0:e7:f9:d9:39:1f:3d:77:43:3c:be: 34:04:96:ee:a7:ea:ce:e3:ef:03:1c:eb:6d:74:74:32:1b:44: e6:7f:41:db:9e:07:8b:80:a9:63:9a:eb:81:56:f0:46:64:db: 07:cc:af:f3:40:3c:43:64:cc:8a:8a:55:18:75:2c:a6:05:4b: 20:c3:60:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4MzgxMTAvBgNVBAUTKDBDOUE0Njk5ODg5NjE3NzhFMkQxMUU4QUU4QTQzRTQ4 Mjk2REFEMTUwHhcNMjUwNDAzMDA1OTIzWhcNMjUwNDEwMDA1OTIzWjAYMRYwFAYD VQQDEw02N2VkZGQ2Yi1iYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a75CWSARNgX7+71b0UFatZgi4NvxR6xz+M/VVjrOnP/yVeHCKs6TWrrLt7U oXWDGZMpdGfILel1SxgfWg7iPr2M5v5ncuAB4EF4jOO9L2CQBExu1YeOBkPpRaLw qMYQ/QysLeqdijv8nVM9jWeOBCxEJ1An9WvcKfFxQQnSbCAQSszIIopBzIdoD0BZ qxFjWrNkrBdH5RxcnsFPmr/YXMQdH6+UDrV0UeF9CupQpJ3EhMH6K/rOH9UtYrI0 o3GYUalkTzROPL3OcFulwXPl/DQvcmtTvuKMkpbMJxOqEFNaOZjdeII/xZM9GuX6 wdudOJN/ibmdXaJqWx/G6ccfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOrSziD QLBUKA5eqMIEuOD6m5q+MB8GA1UdIwQYMBaAFAyaRpmIlhd44tEeiuikPkgpba0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzgzOC85RUNBNDU1NkE2 N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0YzamkwUjZLNktRLVNDbHRy UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RKcEdtWWlXRjNqaTBSNks2S1EtU0NsdHJSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzgzOC85RUNBNDU1NkE2N0ExMUVDQkMyRUIxNEVDNEY5QUUwMi9ESnBHbVlpV0Yz amkwUjZLNktRLVNDbHRyUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASF5rMkPFrKRFm6lOgSCJ5tC1dUwG+DEC0fycsjIWA2ItJef/O9yEm CKl+HLynWe9YlzFdGYMoYnbrV1caUkNkZxX5ARVnDlRq/zo3IZhu5EaRrQXV0wsX w/fB23aCuQZK5lfAlaa8Ym2nSimCRrJ2OVdK2J+pqo4sYXjhqpDfgi2DfqCMbrcH jRlTn5sGIyUhxiE558kjpqtrbiWyPXRjQ9le9Sf96LA9PHVrO5E5136JhwVq4ZsS kggawOf52TkfPXdDPL40BJbup+rO4+8DHOttdHQyG0Tmf0HbngeLgKljmuuBVvBG ZNsHzK/zQDxDZMyKilUYdSymBUsgw2AU -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client