$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: 1lR1ONDZOclaRveyTxGp3gOh3w6/bM7dvE/JFP61uPM= Subject key identifier: 2C:3C:D5:A1:CB:BF:51:95:E8:E4:07:FB:D1:A5:21:80:3D:BA:B0:76 Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 0784 Signing time: Wed 02 Apr 2025 21:19:37 +0000 Manifest this update: Wed 02 Apr 2025 21:19:36 +0000 Manifest next update: Wed 09 Apr 2025 21:19:36 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: aDrWm4fheixQLLNwALGl1ptUCGWIgATlefLAW41DxsM=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 0iyvzLFIUAJQiOyEvH+MRt0xVeTfFziku8Yy3Ho4c+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1 Validity Not Before: Apr 2 21:19:36 2025 GMT Not After : Apr 9 21:19:36 2025 GMT Subject: CN=67eda9e9-8700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:fb:04:d8:1c:eb:59:01:81:74:e5:1f:6a: 8c:31:80:22:e9:a6:73:85:32:89:47:19:a0:75:d9: f3:3a:00:86:e9:c7:87:5b:bc:3c:b4:3d:13:23:ac: c0:4f:04:c9:3f:f5:7c:f5:b1:97:93:7b:40:7a:4b: b9:58:88:92:95:87:f8:92:fe:7c:8b:45:52:2f:a1: a5:58:7e:56:cc:7a:41:43:47:96:eb:ac:06:05:00: 1c:62:fa:e1:14:57:7a:26:e9:eb:0c:c9:59:5d:a2: 29:8c:af:6a:d9:65:cf:b2:25:bb:50:7c:dc:3a:45: ed:9b:5a:4d:c9:2a:5b:a9:b8:ff:de:0e:4b:0b:18: 14:60:d7:a3:89:38:45:2c:73:be:de:5d:48:0f:87: 27:c8:12:a2:6c:e0:5c:86:aa:d5:1f:a4:78:75:b1: c2:da:f9:c4:55:48:09:6f:b6:01:3f:ed:57:a1:45: f6:63:3a:fa:af:89:b7:6a:b2:d2:01:20:69:be:23: 6e:9d:09:6b:6d:03:9a:ca:76:86:e6:e0:2b:96:fb: 57:04:06:c9:a6:12:df:cf:fa:cb:17:c4:48:9b:8f: c2:da:c7:d3:d8:4b:bd:ae:67:51:8d:39:b0:a7:fd: f0:48:25:cd:20:13:ba:dc:a8:17:2a:b8:1b:e9:67: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:D5:A1:CB:BF:51:95:E8:E4:07:FB:D1:A5:21:80:3D:BA:B0:76 X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:af:36:eb:7e:a5:0c:51:00:6d:5a:d9:10:2c:b7:25:80:e2: e3:20:c6:85:15:c4:6c:2d:5e:91:2f:cb:3e:34:52:4d:f8:10: 46:bc:cc:06:30:b5:39:0f:01:01:5e:d2:f5:21:cc:43:4a:3e: 94:b2:a7:40:dd:0c:e3:df:35:38:c8:5f:76:d8:f3:f3:78:e7: 25:2d:17:8a:27:3a:0c:12:cd:cc:27:0a:37:df:b2:17:5e:a7: 9a:44:1e:af:9e:34:2f:c3:81:4f:fd:42:01:a2:a7:43:7f:2e: a8:7b:b0:6f:f7:f4:4a:ea:e2:38:41:9c:66:bf:f9:59:95:79: ba:d0:02:49:00:42:62:d4:c9:76:f4:15:d7:ea:fb:f7:a4:88: 93:be:2e:0e:ae:73:b1:83:3a:90:24:b0:e4:af:11:09:97:06: 87:b4:b7:af:2b:ba:68:93:81:cb:1d:48:6c:41:96:99:1d:44: 97:83:91:e0:88:66:9a:56:4e:b3:df:d0:c3:f3:92:6a:8c:f1: 3c:c9:3d:dd:18:56:67:20:5a:85:28:4f:d0:bf:69:5d:4a:79: 0d:b6:6f:f5:fd:33:da:89:01:c3:b7:80:7d:26:4d:eb:18:da: e5:99:02:e9:6f:1c:60:4d:34:f6:82:cd:b0:06:ea:1a:c6:d4: df:8c:a8:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjUwNDAyMjExOTM2WhcNMjUwNDA5MjExOTM2WjAYMRYwFAYD VQQDEw02N2VkYTllOS04NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi77BNgc61kBgXTlH2qMMYAi6aZzhTKJRxmgddnzOgCG6ceHW7w8tD0TI6zA TwTJP/V89bGXk3tAeku5WIiSlYf4kv58i0VSL6GlWH5WzHpBQ0eW66wGBQAcYvrh FFd6JunrDMlZXaIpjK9q2WXPsiW7UHzcOkXtm1pNySpbqbj/3g5LCxgUYNejiThF LHO+3l1ID4cnyBKibOBchqrVH6R4dbHC2vnEVUgJb7YBP+1XoUX2Yzr6r4m3arLS ASBpviNunQlrbQOaynaG5uArlvtXBAbJphLfz/rLF8RIm4/C2sfT2Eu9rmdRjTmw p/3wSCXNIBO63KgXKrgb6WfgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw81aHL v1GV6OQH+9GlIYA9urB2MB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+rzbrfqUMUQBtWtkQLLclgOLjIMaFFcRsLV6RL8s+NFJN+BBGvMwG MLU5DwEBXtL1IcxDSj6UsqdA3Qzj3zU4yF922PPzeOclLReKJzoMEs3MJwo337IX XqeaRB6vnjQvw4FP/UIBoqdDfy6oe7Bv9/RK6uI4QZxmv/lZlXm60AJJAEJi1Ml2 9BXX6vv3pIiTvi4OrnOxgzqQJLDkrxEJlwaHtLevK7pok4HLHUhsQZaZHUSXg5Hg iGaaVk6z39DD85JqjPE8yT3dGFZnIFqFKE/Qv2ldSnkNtm/1/TPaiQHDt4B9Jk3r GNrlmQLpbxxgTTT2gs2wBuoaxtTfjKgY -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:07 2025 by rpki-client