$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft File: daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json) Hash identifier: c3u6Bs4KrgR4f3yhuakuyfZmX7AOyIR0dmvYIz9zzoQ= Subject key identifier: 5F:02:95:49:8D:8F:A8:27:76:1A:DA:3C:57:73:A5:A2:03:F1:55:A1 Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 Certificate issuer: /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft Manifest number: 0636 Signing time: Wed 16 Apr 2025 15:05:14 +0000 Manifest this update: Wed 16 Apr 2025 15:05:14 +0000 Manifest next update: Wed 23 Apr 2025 15:05:14 +0000 Files and hashes: 1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: zhA0nl2ShFqmejnt6QbPgA2scTvjO1xXGSoeNn0CeI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 15:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Validity Not Before: Apr 16 15:05:14 2025 GMT Not After : Apr 23 15:05:14 2025 GMT Subject: CN=67ffc72a-0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:1f:d4:e7:b6:12:5f:6b:7d:63:bc:2a:24: 87:35:e5:14:b3:6f:3b:d5:f9:6a:e5:99:ea:88:46: 53:93:ad:f3:da:64:eb:00:ef:44:0b:a8:fa:c5:7b: 4c:b9:f1:4d:f4:a3:b3:23:c5:5e:06:ca:e2:3b:c4: 10:4b:b4:63:ac:8b:98:8f:3e:0e:e9:87:6e:90:0c: 00:9e:70:68:5e:72:00:7b:de:8e:e6:89:28:33:35: 13:d3:87:29:4c:8a:5c:41:a5:05:11:aa:3e:4d:28: 16:27:d7:93:ba:ac:ea:78:4b:bf:1a:ca:02:5f:cd: aa:84:84:26:de:52:6a:d1:db:f2:77:de:c0:08:03: 45:44:57:ee:ff:a7:f8:95:6d:fc:02:3d:32:ed:50: 52:64:35:ab:65:3a:1f:bd:a0:b8:bb:0a:1a:bb:7e: 9b:db:4c:3c:85:f5:96:23:45:54:69:ff:95:e1:a6: 69:3c:e2:35:6d:b1:83:1b:22:b5:6b:71:9a:a7:88: 49:2b:7d:c1:b3:0f:0b:f1:5d:ba:b7:c4:8c:58:4a: 6d:e4:01:4e:c7:97:68:00:70:d3:fc:d6:b1:3b:e0: b0:46:60:2b:7a:ce:23:d1:a3:88:7a:49:04:8f:4c: 93:4b:4f:c9:c3:40:df:21:76:45:3a:d1:2d:23:74: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:95:49:8D:8F:A8:27:76:1A:DA:3C:57:73:A5:A2:03:F1:55:A1 X509v3 Authority Key Identifier: keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f1:1b:75:af:91:fa:a4:76:b9:2a:0c:ea:17:c7:55:38:d2: b1:f8:d9:11:5d:53:10:da:43:f1:7c:58:d3:c5:ab:9c:ca:22: ae:c2:2f:be:7b:52:2a:4c:c9:d7:72:34:a3:78:80:cc:6e:d5: 6e:ec:c4:76:d3:27:6d:c3:79:d5:aa:29:a7:31:5b:5a:52:85: 3c:bf:d4:5a:b3:96:76:72:49:f2:28:13:30:78:53:20:fb:5b: 50:14:e5:5b:30:3b:88:d4:ab:5e:ea:d4:d7:a4:1f:fa:6f:30: 42:c6:08:d7:12:52:22:3c:27:c2:2f:21:42:f0:91:e3:bb:09: 17:a7:16:8b:7c:0b:5d:d9:6e:c3:dc:07:9b:9a:69:65:af:94: 48:ca:aa:00:77:93:af:a5:c0:8f:c3:91:b4:f6:2b:8f:f8:4b: 62:e1:75:71:d6:a9:8b:ae:c5:5a:52:d1:ab:dc:9a:16:33:2a: 71:ae:de:67:60:39:49:23:40:70:c2:5a:1d:b5:d1:87:3f:70: 9a:8d:71:f3:99:6b:74:30:db:f3:dd:ed:39:2a:80:98:82:ea: f3:1d:c9:d3:31:b1:d6:a7:c7:18:4c:9d:76:a9:4d:72:7f:1b: 22:70:28:43:b9:5f:9d:2e:13:3a:d2:ae:cf:34:1e:98:b8:4f: 84:d5:9e:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2MjYxMTAvBgNVBAUTKDc1QTE3RUFCOTA0MUI2NERCMzc0NzFDRkI0RUJGRjU5 MUU4RjY5OTMwHhcNMjUwNDE2MTUwNTE0WhcNMjUwNDIzMTUwNTE0WjAYMRYwFAYD VQQDEw02N2ZmYzcyYS0wZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl8f1Oe2El9rfWO8KiSHNeUUs2871flq5ZnqiEZTk63z2mTrAO9EC6j6xXtM ufFN9KOzI8VeBsriO8QQS7RjrIuYjz4O6YdukAwAnnBoXnIAe96O5okoMzUT04cp TIpcQaUFEao+TSgWJ9eTuqzqeEu/GsoCX82qhIQm3lJq0dvyd97ACANFRFfu/6f4 lW38Aj0y7VBSZDWrZTofvaC4uwoau36b20w8hfWWI0VUaf+V4aZpPOI1bbGDGyK1 a3Gap4hJK33Bsw8L8V26t8SMWEpt5AFOx5doAHDT/NaxO+CwRmAres4j0aOIekkE j0yTS0/Jw0DfIXZFOtEtI3RvjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8ClUmN j6gndhraPFdzpaID8VWhMB8GA1UdIwQYMBaAFHWhfquQQbZNs3Rxz7Tr/1kej2mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDYyNi82MDA4MUVBQzhE N0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRrMnpkSEhQdE92X1dSNlBh Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhRi1xNUJCdGsyemRISFB0T3ZfV1I2UGFaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDYyNi82MDA4MUVBQzhEN0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRr MnpkSEhQdE92X1dSNlBhWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+8Rt1r5H6pHa5KgzqF8dVONKx+NkRXVMQ2kPxfFjTxaucyiKuwi++ e1IqTMnXcjSjeIDMbtVu7MR20ydtw3nVqimnMVtaUoU8v9Ras5Z2cknyKBMweFMg +1tQFOVbMDuI1Kte6tTXpB/6bzBCxgjXElIiPCfCLyFC8JHjuwkXpxaLfAtd2W7D 3Aebmmllr5RIyqoAd5OvpcCPw5G09iuP+Eti4XVx1qmLrsVaUtGr3JoWMypxrt5n YDlJI0BwwlodtdGHP3CajXHzmWt0MNvz3e05KoCYgurzHcnTMbHWp8cYTJ12qU1y fxsicChDuV+dLhM60q7PNB6YuE+E1Z5f -----END CERTIFICATE-----Generated at Wed Apr 16 22:19:13 2025 by rpki-client