$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: 5dfS0sEGxi6TrAv+RwqoJrFfPBb0lJlWvqdshpSvT+Y= Subject key identifier: 3D:F1:7A:BD:88:FE:A1:10:9A:C2:13:C5:55:93:FE:9A:85:C7:9C:72 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: B5 Signing time: Thu 03 Apr 2025 05:16:26 +0000 Manifest this update: Thu 03 Apr 2025 05:16:26 +0000 Manifest next update: Thu 10 Apr 2025 05:16:26 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: wbKXQ1wDhND0HIUMUUhZTzmNHL2+mk3d6wTEAbTw9ng=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2 Validity Not Before: Apr 3 05:16:26 2025 GMT Not After : Apr 10 05:16:26 2025 GMT Subject: CN=67ee19aa-e465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:2e:c1:4f:e4:10:c5:f4:b3:7f:20:17:d7: f1:c1:fe:51:47:f0:fd:00:d6:f5:3d:7f:bd:8b:9f: ec:53:ce:61:62:d4:01:9a:35:82:23:da:13:69:d8: cb:08:e1:51:59:06:de:46:f1:89:6b:dd:5f:26:ea: 8b:c0:27:f8:c6:58:93:5d:1d:ec:53:94:75:8c:b1: 48:2f:18:d6:18:e2:2e:39:e0:6a:d2:0c:00:52:47: b8:22:ae:ed:df:71:7f:08:bd:f8:39:5f:d2:da:0a: 1e:80:a3:1c:8b:39:5a:10:5c:01:14:bb:17:c8:4c: ac:eb:2b:9a:80:68:53:c5:3e:26:33:14:08:c4:90: 95:cb:e7:7b:fe:27:d2:27:95:31:c4:62:cb:ed:2f: bf:e3:01:1e:f7:00:de:8a:cc:0a:d3:bd:df:29:9a: 9f:8d:2f:a3:50:0f:f8:84:57:61:33:46:31:77:c2: a1:cc:9b:1a:90:63:93:8e:0a:82:79:db:0d:5d:2e: cf:17:2d:18:f5:de:19:e8:db:af:bd:06:bb:ec:f2: 4a:e7:50:8f:12:3c:73:06:c2:e3:02:00:4f:40:36: 42:32:2b:37:8e:ab:85:45:8a:f7:6d:0b:3c:55:6b: 2a:66:86:e0:57:75:ff:9d:f4:38:9f:63:91:3b:6e: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F1:7A:BD:88:FE:A1:10:9A:C2:13:C5:55:93:FE:9A:85:C7:9C:72 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:91:f3:7c:95:0a:2f:e5:1b:c7:e9:e1:89:6b:58:df:2c:09: b6:2f:3e:19:08:68:35:a8:1d:e7:f1:56:a1:71:53:00:64:a0: 30:c9:09:21:bf:e1:48:40:b2:72:69:32:8f:88:2e:58:a1:be: b4:2c:22:79:32:91:a9:67:6f:02:d0:34:d7:3a:8a:e3:3e:37: 32:69:8a:8c:33:2f:28:50:64:75:cd:9f:43:41:af:ee:e5:2f: 36:5e:cc:bb:3a:36:3b:72:b5:62:dd:3d:3d:e9:7e:42:33:d3: 73:7a:cc:27:38:54:6c:51:97:c4:89:96:b2:c3:7a:5d:c2:e5: 63:eb:93:51:5e:a5:9b:e2:82:67:ea:51:4d:64:af:81:71:dd: 32:f6:40:5c:24:13:32:9b:3d:95:b8:6f:13:89:25:97:e3:62: 46:1f:ab:49:07:f4:7a:7a:c4:a1:ef:94:65:2f:aa:a7:eb:b1: 98:48:a9:ce:01:b5:b6:a6:8f:c7:5b:69:5e:5e:19:91:3a:80: b0:82:4d:e7:67:38:81:1b:89:71:c5:b1:42:5f:bf:f2:31:a8: 72:f2:ec:9f:42:78:92:55:f5:ff:fd:2c:97:1d:7f:e8:ce:f1: 44:c0:9a:79:7f:b5:3b:c4:04:28:be:7a:b7:9f:60:a4:8f:90: 7f:60:42:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNDAzMDUxNjI2WhcNMjUwNDEwMDUxNjI2WjAYMRYwFAYD VQQDEw02N2VlMTlhYS1lNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk4uwU/kEMX0s38gF9fxwf5RR/D9ANb1PX+9i5/sU85hYtQBmjWCI9oTadjL COFRWQbeRvGJa91fJuqLwCf4xliTXR3sU5R1jLFILxjWGOIuOeBq0gwAUke4Iq7t 33F/CL34OV/S2goegKMcizlaEFwBFLsXyEys6yuagGhTxT4mMxQIxJCVy+d7/ifS J5UxxGLL7S+/4wEe9wDeiswK073fKZqfjS+jUA/4hFdhM0Yxd8KhzJsakGOTjgqC edsNXS7PFy0Y9d4Z6NuvvQa77PJK51CPEjxzBsLjAgBPQDZCMis3jquFRYr3bQs8 VWsqZobgV3X/nfQ4n2ORO25U5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3xer2I /qEQmsITxVWT/pqFx5xyMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWkfN8lQov5RvH6eGJa1jfLAm2Lz4ZCGg1qB3n8VahcVMAZKAwyQkh v+FIQLJyaTKPiC5Yob60LCJ5MpGpZ28C0DTXOorjPjcyaYqMMy8oUGR1zZ9DQa/u 5S82Xsy7OjY7crVi3T096X5CM9NzeswnOFRsUZfEiZayw3pdwuVj65NRXqWb4oJn 6lFNZK+Bcd0y9kBcJBMymz2VuG8TiSWX42JGH6tJB/R6esSh75RlL6qn67GYSKnO AbW2po/HW2leXhmROoCwgk3nZziBG4lxxbFCX7/yMahy8uyfQniSVfX//SyXHX/o zvFEwJp5f7U7xAQovnq3n2Ckj5B/YEJC -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:24 2025 by rpki-client