$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: Se7t1PPpprffNuXbtYYGCWSwzZ5NwnyPJidGZF/tdzE= Subject key identifier: 02:F6:43:0C:FF:5E:E3:C4:49:F6:62:1E:25:6F:65:62:4E:5A:31:AF Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1FE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1867 Signing time: Fri 04 Apr 2025 17:23:00 +0000 Manifest this update: Fri 04 Apr 2025 17:23:00 +0000 Manifest next update: Fri 11 Apr 2025 17:23:00 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: TVa7cUpYHS4IcclcLu6UhEueRaO1RZd27EXDqN/QpPA=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8168 (0x1fe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6 Validity Not Before: Apr 4 17:23:00 2025 GMT Not After : Apr 11 17:23:00 2025 GMT Subject: CN=67f01574-b6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:d3:af:97:27:f7:37:97:cc:07:be:9b:7f: 27:f4:38:7b:76:c1:fc:4c:25:3f:4c:8c:fb:d0:e7: aa:fd:12:4e:c1:c2:94:11:aa:c5:92:23:b4:33:90: 75:d7:8a:ec:f0:0c:a2:d9:61:0a:06:c4:5e:66:a0: 0b:90:b7:d9:f1:d3:02:6f:10:b0:58:08:7a:eb:ce: 5c:c0:a2:e8:27:98:00:0b:57:f0:05:54:a9:08:ab: 8e:81:49:94:83:18:d1:3c:20:df:60:67:df:23:66: bb:d8:78:71:0a:35:44:d1:06:0c:f3:cb:c6:57:e6: 47:58:2c:89:38:34:82:3a:ef:e2:4e:6d:54:a9:2f: 13:e1:4d:dd:f2:09:1e:53:60:ca:37:21:5e:72:7b: f3:ea:0e:73:52:c6:d1:c6:de:e3:b8:85:bb:4a:c7: c3:db:34:00:89:4a:36:c7:02:67:44:33:90:c8:42: 05:25:7a:25:0b:63:8e:c1:3f:55:09:38:ac:7e:d4: b5:4e:9f:ec:eb:fd:df:28:1d:68:94:c2:bd:91:5c: 51:48:5e:b7:c2:54:ff:bd:e0:1e:10:a7:ef:f2:8c: 5c:76:e1:5d:c6:c3:8f:cd:ea:0f:7e:cb:42:62:bd: 66:b1:d7:ee:d6:b1:4b:c7:4e:e0:7b:93:7b:71:b3: f4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:43:0C:FF:5E:E3:C4:49:F6:62:1E:25:6F:65:62:4E:5A:31:AF X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e5:f1:71:21:10:34:88:4a:18:7b:46:d7:98:58:1a:67:a1: 9e:db:5a:f6:45:54:e6:44:8b:19:e2:dd:96:7c:f3:71:d8:de: db:b4:81:25:d6:a1:8a:d4:d9:ad:02:9c:4c:31:2b:e2:12:ba: 39:51:23:1e:b9:9e:2b:42:aa:bc:02:eb:64:23:72:e5:83:9b: e4:17:01:f1:1b:6a:37:e4:d3:b5:8a:ec:10:c7:58:60:3c:84: a5:f9:c2:16:a0:72:b9:11:f8:91:5f:22:d5:c9:85:11:34:cc: fb:5d:7c:1d:47:46:ec:f5:08:b8:12:18:82:19:78:f7:49:64: 8d:7b:4c:c1:01:ea:40:6c:66:60:f9:74:51:8c:7d:c5:f2:71: 78:45:ad:02:e6:e8:e2:f8:68:1e:6b:88:f4:f9:fb:70:14:7d: c0:7e:0c:3e:02:cb:ba:ad:f4:97:41:92:70:d5:47:43:4d:cc: 86:1b:ff:6b:f4:75:63:7d:82:fc:98:e5:5e:09:f5:81:bb:42: 01:f4:85:8b:35:3e:6b:f8:5f:53:07:0a:2c:5e:9a:bc:e5:a3: 01:1d:57:1d:19:82:ea:57:a7:e3:f1:a5:d8:55:a4:b2:17:49: d7:49:91:8a:02:80:0f:b5:03:de:6f:b9:f1:de:1f:b1:71:78: a1:d7:c1:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwNDA0MTcyMzAwWhcNMjUwNDExMTcyMzAwWjAYMRYwFAYD VQQDEw02N2YwMTU3NC1iNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjzTr5cn9zeXzAe+m38n9Dh7dsH8TCU/TIz70Oeq/RJOwcKUEarFkiO0M5B1 14rs8Ayi2WEKBsReZqALkLfZ8dMCbxCwWAh6685cwKLoJ5gAC1fwBVSpCKuOgUmU gxjRPCDfYGffI2a72HhxCjVE0QYM88vGV+ZHWCyJODSCOu/iTm1UqS8T4U3d8gke U2DKNyFecnvz6g5zUsbRxt7juIW7SsfD2zQAiUo2xwJnRDOQyEIFJXolC2OOwT9V CTisftS1Tp/s6/3fKB1olMK9kVxRSF63wlT/veAeEKfv8oxcduFdxsOPzeoPfstC Yr1msdfu1rFLx07ge5N7cbP0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL2Qwz/ XuPESfZiHiVvZWJOWjGvMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH5fFxIRA0iEoYe0bXmFgaZ6Ge21r2RVTmRIsZ4t2WfPNx2N7btIEl 1qGK1NmtApxMMSviEro5USMeuZ4rQqq8AutkI3Llg5vkFwHxG2o35NO1iuwQx1hg PISl+cIWoHK5EfiRXyLVyYURNMz7XXwdR0bs9Qi4EhiCGXj3SWSNe0zBAepAbGZg +XRRjH3F8nF4Ra0C5uji+Ggea4j0+ftwFH3Afgw+Asu6rfSXQZJw1UdDTcyGG/9r 9HVjfYL8mOVeCfWBu0IB9IWLNT5r+F9TBwosXpq85aMBHVcdGYLqV6fj8aXYVaSy F0nXSZGKAoAPtQPeb7nx3h+xcXih18Gv -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:15 2025 by rpki-client