$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft File: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json) Hash identifier: RF2j5r6kn148bAHlaFtjEmuEsZETTOItpYy7/VieR0k= Subject key identifier: 9F:C5:0F:69:DA:FA:FB:C8:D3:0A:F8:44:92:59:5B:66:A3:07:CB:80 Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft Manifest number: 0109 Signing time: Fri 11 Apr 2025 04:14:36 +0000 Manifest this update: Fri 11 Apr 2025 04:14:36 +0000 Manifest next update: Fri 18 Apr 2025 04:14:36 +0000 Files and hashes: 1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: fKL9RMEsLXHmhwTxZ1/ZWwHe0B4rDsZC/SAQ0S5QP3I=) 2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: V4QPgu3zjTh1ZjDu4R2dcCzkveFmbrdSQ5O0sl9cGCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Validity Not Before: Apr 11 04:14:36 2025 GMT Not After : Apr 18 04:14:36 2025 GMT Subject: CN=67f8972c-9650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:75:08:6c:0a:d6:59:90:a9:8d:b9:8d:30: 79:08:24:b7:64:05:23:03:a2:42:1a:9a:72:68:79: cf:13:a1:b2:04:79:ac:e9:58:43:ff:2f:08:ef:80: 54:aa:41:70:6d:b3:52:8a:f3:09:09:79:f2:ae:94: 43:fc:fa:97:32:ba:04:df:e0:92:f5:09:05:f1:f3: fb:b7:0c:3d:82:cc:56:9a:2e:9a:cd:d3:8f:63:56: f9:7f:21:a7:28:24:e3:55:c7:3e:d9:d9:5d:ba:0c: 0f:62:4b:d9:f8:ad:41:2b:d6:0a:78:28:2d:90:88: c1:56:58:07:1e:c1:f5:fa:ab:e9:37:bc:e3:10:d6: dd:8c:e9:9f:f8:53:b6:7f:ca:76:a1:36:c1:21:52: fb:71:5c:df:a4:55:1a:16:b6:e6:b6:81:f2:e3:07: f4:e5:1f:a4:bc:ff:26:e6:c9:16:af:57:34:82:d6: 7c:57:eb:bf:35:9c:c1:05:03:53:6c:88:3b:84:bd: 79:5a:0c:a1:20:04:77:8b:4a:a5:ce:30:b5:93:92: 34:5b:a6:cf:29:f0:f6:31:98:fd:31:94:9b:c4:c4: fa:e0:1a:71:a4:bc:d6:e3:29:e6:c1:5e:c2:9e:58: fe:38:4f:0d:3c:94:27:0e:39:5d:13:7f:b8:2d:69: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:0F:69:DA:FA:FB:C8:D3:0A:F8:44:92:59:5B:66:A3:07:CB:80 X509v3 Authority Key Identifier: keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:90:bc:45:cd:6b:43:e2:7b:ec:58:e0:39:63:5b:3b:b6: 1f:13:91:a3:0d:22:49:50:14:a7:f4:63:91:41:28:1b:53:08: 1e:68:a6:72:5c:78:59:d4:f1:e2:d0:37:84:b0:fa:9f:54:73: e8:4a:dc:92:a5:c3:ad:b7:58:7d:f6:8d:2f:69:eb:ea:b4:24: e4:8c:bc:de:6d:b9:fe:73:e6:e1:04:d4:f9:a0:78:62:1a:58: 63:18:24:37:40:82:97:57:93:79:59:24:1e:04:6d:67:ab:c5: 03:30:9c:cc:dc:a0:00:e8:14:a3:fb:2e:51:cf:3b:e2:df:71: db:01:e7:28:4c:8b:58:84:24:40:26:f4:21:61:c2:d3:6e:65: 3f:1e:c6:2a:20:7f:77:e7:9a:92:fb:97:56:ab:5a:60:fa:db: c9:46:34:63:0c:67:ee:7c:2f:3d:30:b5:4d:e5:27:16:f2:42: 24:77:84:34:a4:d6:10:fc:df:bc:ac:03:09:3e:29:80:ed:ea: 50:fc:c5:ca:0b:e1:e5:5b:04:83:58:53:2e:f7:b1:42:7d:31: 4c:69:aa:e8:21:c7:34:ce:c9:ac:71:a3:34:3b:2b:d8:72:b9: 8e:da:db:0d:8b:26:f1:7b:20:17:12:4b:56:5a:2d:d1:e6:75: 2a:af:59:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwRDIxMTAvBgNVBAUTKDc0MjI3ODlFOEVEMEJGQzIwQzM0RDdCRjY4RjUxOUVF NjVFRkY0QkMwHhcNMjUwNDExMDQxNDM2WhcNMjUwNDE4MDQxNDM2WjAYMRYwFAYD VQQDEw02N2Y4OTcyYy05NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngJ1CGwK1lmQqY25jTB5CCS3ZAUjA6JCGppyaHnPE6GyBHms6VhD/y8I74BU qkFwbbNSivMJCXnyrpRD/PqXMroE3+CS9QkF8fP7tww9gsxWmi6azdOPY1b5fyGn KCTjVcc+2dldugwPYkvZ+K1BK9YKeCgtkIjBVlgHHsH1+qvpN7zjENbdjOmf+FO2 f8p2oTbBIVL7cVzfpFUaFrbmtoHy4wf05R+kvP8m5skWr1c0gtZ8V+u/NZzBBQNT bIg7hL15WgyhIAR3i0qlzjC1k5I0W6bPKfD2MZj9MZSbxMT64BpxpLzW4ynmwV7C nlj+OE8NPJQnDjldE3+4LWlL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/FD2na +vvI0wr4RJJZW2ajB8uAMB8GA1UdIwQYMBaAFHQieJ6O0L/CDDTXv2j1Ge5l7/S8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBEMi84OEY5NzlBMjgy Q0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4SU1OTmVfYVBVWjdtWHY5 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDSjRubzdRdjhJTU5OZV9hUFVaN21YdjlMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBEMi84OEY5NzlBMjgyQ0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4 SU1OTmVfYVBVWjdtWHY5THcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2spC8Rc1rQ+J77FjgOWNbO7YfE5GjDSJJUBSn9GORQSgbUwgeaKZy XHhZ1PHi0DeEsPqfVHPoStySpcOtt1h99o0vaevqtCTkjLzebbn+c+bhBNT5oHhi GlhjGCQ3QIKXV5N5WSQeBG1nq8UDMJzM3KAA6BSj+y5Rzzvi33HbAecoTItYhCRA JvQhYcLTbmU/HsYqIH9355qS+5dWq1pg+tvJRjRjDGfufC89MLVN5ScW8kIkd4Q0 pNYQ/N+8rAMJPimA7epQ/MXKC+HlWwSDWFMu97FCfTFMaaroIcc0zsmscaM0OyvY crmO2tsNiybxeyAXEktWWi3R5nUqr1m2 -----END CERTIFICATE-----Generated at Sun Apr 13 01:48:26 2025 by rpki-client