$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: 2hHFwAQJ4e9Z0e2n6geiBdkuMDE4fMV3YTQbw/fvaj8= Subject key identifier: DF:50:7F:70:C3:79:DC:2D:21:38:E9:31:42:27:94:AD:A6:3A:AF:61 Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: 95 Signing time: Mon 21 Apr 2025 05:11:29 +0000 Manifest this update: Mon 21 Apr 2025 05:11:29 +0000 Manifest next update: Mon 28 Apr 2025 05:11:29 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: lrHPGWlhS6UawjlpCf43Tl+O9eMWUDYGt7XAG0apptg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Apr 21 05:11:29 2025 GMT Not After : Apr 28 05:11:29 2025 GMT Subject: CN=6805d381-a33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:f9:21:45:f1:45:60:8a:3a:a5:07:48:f7: 00:3e:df:ed:ab:fb:74:5f:c8:94:a7:c0:82:be:9e: 73:a3:47:2d:06:27:c2:a8:3c:78:aa:b0:32:25:72: 86:18:6d:92:05:f9:25:3d:dd:90:d1:0f:25:31:9d: 83:ec:0e:f0:7d:1f:8c:d3:3b:20:24:c7:cd:05:38: a3:27:e9:22:bf:d4:a3:57:bc:7e:26:64:86:84:0c: b1:48:f3:02:94:bb:91:a6:d7:5f:a5:35:30:4b:f9: 25:de:f3:28:ba:86:b5:84:97:c5:86:b9:13:f4:3d: f5:7e:a9:bd:a0:c5:d5:c5:a1:29:cd:5c:5e:af:84: 09:a9:eb:9b:6d:08:59:59:f0:e2:a7:54:26:78:6a: dd:a8:e9:e6:67:8a:00:27:e3:be:6c:4d:03:9a:b7: e7:89:d1:73:80:77:5c:09:2d:65:09:8f:bd:e4:df: d3:e1:d5:01:10:0a:36:2a:9a:a0:c6:4e:6e:e4:00: 7f:ca:5e:49:77:41:1e:9f:3b:74:b3:26:02:15:cd: 36:24:9a:5d:b3:76:07:b5:d6:54:ea:f4:77:85:1b: 30:04:0f:c3:ab:26:e9:d0:46:85:9f:fa:b5:57:c8: de:de:91:74:bf:9d:47:d7:d4:01:04:63:4c:e2:a4: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:7F:70:C3:79:DC:2D:21:38:E9:31:42:27:94:AD:A6:3A:AF:61 X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e7:16:f7:ea:83:fb:cd:5a:4a:42:c2:75:46:0b:f8:7d:49: f6:ba:fc:1b:be:f3:fb:c4:e8:45:cf:b2:52:8a:99:6f:cc:cb: a4:d4:7d:41:95:be:8d:1b:5f:20:28:e9:b7:17:2f:cb:0a:ae: de:79:16:32:73:9e:1c:c4:80:75:de:7f:9b:2c:76:61:7d:09: 83:92:20:ea:9e:11:54:51:c1:f0:8a:13:94:b6:c3:ee:4c:a3: 8d:32:f0:b3:fe:a5:28:cb:77:88:bb:a7:91:5c:b0:6f:5a:2b: 34:b1:bb:75:69:48:95:4d:e7:3c:db:ec:cd:13:3c:7a:d0:51: bf:e1:67:d2:4e:1e:33:5b:4e:7e:ae:10:46:34:df:8f:4c:70: 45:30:5b:29:5c:ee:45:42:1b:b6:d3:d3:1b:73:56:6d:eb:30: 70:6d:fe:c8:20:eb:29:21:81:db:11:f3:30:e7:f4:72:29:c5: 57:9d:58:8b:32:fb:21:3a:cd:bf:50:aa:d6:fd:70:87:ae:68: 2f:45:86:87:50:5a:a5:84:57:f7:07:23:83:23:86:dd:d4:0d: 66:45:9d:67:a1:51:0e:0f:a1:31:ed:52:81:a4:c0:8b:81:60: 33:eb:ee:55:48:95:f3:da:22:29:10:fe:09:37:cb:54:8b:31: 35:98:7d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKDc1QjcxRjU0NkY0N0IyMUVFM0VBOUE4NjUxMTQ2QzFF QzVFQzk1QTYwHhcNMjUwNDIxMDUxMTI5WhcNMjUwNDI4MDUxMTI5WjAYMRYwFAYD VQQDEw02ODA1ZDM4MS1hMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSP5IUXxRWCKOqUHSPcAPt/tq/t0X8iUp8CCvp5zo0ctBifCqDx4qrAyJXKG GG2SBfklPd2Q0Q8lMZ2D7A7wfR+M0zsgJMfNBTijJ+kiv9SjV7x+JmSGhAyxSPMC lLuRptdfpTUwS/kl3vMouoa1hJfFhrkT9D31fqm9oMXVxaEpzVxer4QJqeubbQhZ WfDip1QmeGrdqOnmZ4oAJ+O+bE0DmrfnidFzgHdcCS1lCY+95N/T4dUBEAo2Kpqg xk5u5AB/yl5Jd0Eenzt0syYCFc02JJpds3YHtdZU6vR3hRswBA/Dqybp0EaFn/q1 V8je3pF0v51H19QBBGNM4qQY+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9Qf3DD edwtITjpMUInlK2mOq9hMB8GA1UdIwQYMBaAFHW3H1RvR7Ie4+qahlEUbB7F7JWm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS8wNEQ0NzIwNDNB OEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNoN2o2cHFHVVJSc0hzWHNs YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS8wNEQ0NzIwNDNBOEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNo N2o2cHFHVVJSc0hzWHNsYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf5xb36oP7zVpKQsJ1Rgv4fUn2uvwbvvP7xOhFz7JSiplvzMuk1H1B lb6NG18gKOm3Fy/LCq7eeRYyc54cxIB13n+bLHZhfQmDkiDqnhFUUcHwihOUtsPu TKONMvCz/qUoy3eIu6eRXLBvWis0sbt1aUiVTec82+zNEzx60FG/4WfSTh4zW05+ rhBGNN+PTHBFMFspXO5FQhu209Mbc1Zt6zBwbf7IIOspIYHbEfMw5/RyKcVXnViL MvshOs2/UKrW/XCHrmgvRYaHUFqlhFf3ByODI4bd1A1mRZ1noVEOD6Ex7VKBpMCL gWAz6+5VSJXz2iIpEP4JN8tUizE1mH2e -----END CERTIFICATE-----Generated at Tue Apr 22 03:15:04 2025 by rpki-client