$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json) Hash identifier: VvckG6nPprJSZblKDAtb4bw+WZfx+dTswFWeIBiV3Nc= Subject key identifier: C2:61:B7:FE:57:74:91:CD:01:E0:05:56:2F:7D:D8:1D:CC:04:77:59 Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft Manifest number: 01F1 Signing time: Thu 17 Apr 2025 01:42:35 +0000 Manifest this update: Thu 17 Apr 2025 01:42:34 +0000 Manifest next update: Thu 24 Apr 2025 01:42:34 +0000 Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: UwL8Bv9ICmBd4lF4a7rVuaChE008lTNcu5UHCUxVlvE=) 2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: 7kPM/sKB4i8QHNZmGczzwn2v095e3qO6G9fcsHz4xRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Validity Not Before: Apr 17 01:42:34 2025 GMT Not After : Apr 24 01:42:34 2025 GMT Subject: CN=68005c8b-c8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:10:7a:84:c7:9b:31:49:78:ce:3b:10:f3: ae:01:0e:43:17:8f:8d:06:2e:ee:6d:07:d1:2b:81: e7:77:fd:2f:10:e1:bc:f6:82:68:0d:82:fc:69:5f: 18:e6:72:92:fb:1d:6c:35:35:90:2c:7d:6a:42:13: e8:30:bb:60:70:3c:14:15:10:c7:58:e1:59:55:6b: e3:17:8a:3c:4e:71:ea:02:ee:8f:bf:b0:a3:5a:bc: 12:e3:f9:6b:c8:08:2e:66:ef:18:46:c2:0c:d9:21: d4:9a:27:ae:04:aa:61:69:73:70:e8:be:c4:3c:d0: c5:49:2b:8e:85:6c:be:f9:3e:d2:d0:be:38:ef:6e: d2:c6:12:7e:11:05:2b:9b:df:e5:8f:4d:24:9d:4b: 49:83:02:d5:d3:57:37:bd:82:83:05:a3:28:53:b5: d2:f1:5a:08:41:10:48:cf:d0:19:37:d7:e6:f7:f5: ee:0c:66:13:10:c1:33:ca:fb:32:71:85:3b:df:d5: a6:9e:68:ff:48:83:fd:52:e9:ba:70:ca:7a:75:cf: 00:32:18:b1:c1:d5:28:1e:f9:02:b3:04:b3:f6:39: f9:85:63:68:01:19:3f:31:a5:01:76:d7:1d:d3:8c: 47:d8:74:22:3a:64:24:e4:5f:5f:0f:61:1b:eb:67: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:B7:FE:57:74:91:CD:01:E0:05:56:2F:7D:D8:1D:CC:04:77:59 X509v3 Authority Key Identifier: keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:10:69:ac:2f:17:c9:98:c3:c5:9d:39:aa:da:75:bb:b6:4a: bf:4b:b6:2c:a0:8a:9d:9f:07:ad:aa:9a:df:3e:6b:c4:48:53: 5a:66:76:b0:b3:9a:72:2d:3d:2e:b1:76:f4:4a:69:5b:f1:23: 97:da:34:bd:f3:30:02:2d:52:48:7b:73:66:06:3a:a9:7f:8a: da:37:0f:fb:d7:aa:f0:48:17:de:95:7c:af:56:30:82:04:27: c8:b7:7f:47:5c:61:99:2a:eb:3e:75:e4:8c:ea:a0:82:31:e4: d8:04:c2:d0:bc:e7:f7:48:f5:da:bb:c4:9e:cd:e7:02:7b:e8: 3b:62:74:30:20:95:b5:89:e0:24:2d:12:78:da:3a:bd:6c:3d: 99:e8:3c:9d:8c:3a:e5:2d:df:4c:52:a1:cb:6b:a9:f7:86:95: 31:9a:2f:fc:67:a4:94:42:36:36:b6:6b:12:62:85:c4:2d:03: 45:23:b8:04:46:be:3f:49:eb:c6:b6:0c:82:bf:f7:0b:34:a9: 83:42:c6:00:f4:1c:58:4c:5e:10:42:22:8b:ac:fe:1c:b3:56: 18:25:e5:98:73:01:fd:83:1b:a3:03:81:5f:09:29:f3:d2:40: 3d:c2:01:be:b4:dd:9e:85:b8:3d:cf:fb:1b:dd:65:fe:3e:82: 14:4e:c7:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFNTYxMTAvBgNVBAUTKDc0NjYwNzNDOEQyMEZGNUIwQ0E4OEU0QTNBM0ZDODFE M0M5RjY3OUIwHhcNMjUwNDE3MDE0MjM0WhcNMjUwNDI0MDE0MjM0WjAYMRYwFAYD VQQDEw02ODAwNWM4Yi1jOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCUQeoTHmzFJeM47EPOuAQ5DF4+NBi7ubQfRK4Hnd/0vEOG89oJoDYL8aV8Y 5nKS+x1sNTWQLH1qQhPoMLtgcDwUFRDHWOFZVWvjF4o8TnHqAu6Pv7CjWrwS4/lr yAguZu8YRsIM2SHUmieuBKphaXNw6L7EPNDFSSuOhWy++T7S0L44727SxhJ+EQUr m9/lj00knUtJgwLV01c3vYKDBaMoU7XS8VoIQRBIz9AZN9fm9/XuDGYTEMEzyvsy cYU739Wmnmj/SIP9Uum6cMp6dc8AMhixwdUoHvkCswSz9jn5hWNoARk/MaUBdtcd 04xH2HQiOmQk5F9fD2Eb62fj7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJht/5X dJHNAeAFVi992B3MBHdZMB8GA1UdIwQYMBaAFHRmBzyNIP9bDKiOSjo/yB08n2eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0U1Ni8yNjI2NEFGMDM5 NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18xc01xSTVLT2pfSUhUeWZa NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHWUhQSTBnXzFzTXFJNUtPal9JSFR5Zlo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0U1Ni8yNjI2NEFGMDM5NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18x c01xSTVLT2pfSUhUeWZaNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUEGmsLxfJmMPFnTmq2nW7tkq/S7YsoIqdnwetqprfPmvESFNaZnaw s5pyLT0usXb0Smlb8SOX2jS98zACLVJIe3NmBjqpf4raNw/716rwSBfelXyvVjCC BCfIt39HXGGZKus+deSM6qCCMeTYBMLQvOf3SPXau8SezecCe+g7YnQwIJW1ieAk LRJ42jq9bD2Z6DydjDrlLd9MUqHLa6n3hpUxmi/8Z6SUQjY2tmsSYoXELQNFI7gE Rr4/SevGtgyCv/cLNKmDQsYA9BxYTF4QQiKLrP4cs1YYJeWYcwH9gxujA4FfCSnz 0kA9wgG+tN2ehbg9z/sb3WX+PoIUTsed -----END CERTIFICATE-----Generated at Sat Apr 19 00:55:16 2025 by rpki-client