$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: p/0Zbkt2pOf28QGbw7hvE24sY823H9l139g6hM62NzI= Subject key identifier: 9F:5B:B7:66:7B:94:AC:62:31:6E:60:D2:46:E4:FC:08:24:7E:D0:CB Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 0249 Signing time: Tue 15 Apr 2025 01:31:03 +0000 Manifest this update: Tue 15 Apr 2025 01:31:02 +0000 Manifest next update: Tue 22 Apr 2025 01:31:02 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: WgiRridXIYbxSqc2uhGqpEko0ac/x85x6OAV1cOfhtc=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: +eopR6Ey6rjil4YrK0oUqjN/Z120/0ESYezEgJdM8WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Apr 15 01:31:02 2025 GMT Not After : Apr 22 01:31:02 2025 GMT Subject: CN=67fdb6d6-9d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:2b:2c:59:ea:be:d3:14:43:ee:2e:42:3c: 44:75:20:74:f8:5d:39:ee:32:e0:3b:53:da:48:91: 0a:84:66:57:2b:3f:af:84:94:20:17:2e:bc:2d:88: ab:42:b4:96:ba:e9:33:42:ce:80:c7:d8:68:3a:34: 76:9b:e3:db:c8:9d:cd:cf:5f:3b:3f:09:b9:6a:94: ea:62:ae:4c:b6:bd:43:56:59:4f:b4:0b:96:9d:3b: e6:6d:43:08:fa:da:4c:9a:cd:59:e5:e6:69:32:12: bb:f9:59:a7:fb:48:e5:7b:99:dd:30:b7:13:63:f8: 62:62:2f:f1:89:fc:dd:73:3d:06:eb:83:50:86:51: 74:56:b2:53:a1:15:dc:1f:ad:35:42:bf:a1:53:45: 7a:0d:5a:ef:d4:9e:29:f3:3c:c2:ea:39:76:fa:b0: 24:f0:e7:c6:b6:ee:1d:4d:ae:a3:e8:9b:0f:e3:d0: 37:f2:f7:62:34:5b:f3:f4:21:08:9c:49:1f:dd:53: a9:3d:1d:e5:13:cd:ed:03:8e:2a:24:28:1f:91:19: 60:89:ff:69:cd:46:6b:d1:2e:b2:37:d9:0a:40:d5: eb:e4:74:f0:98:b6:26:ec:3c:6c:b9:3e:89:87:34: 5e:24:bf:37:0c:0a:5e:69:42:ab:0b:9a:49:82:24: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:B7:66:7B:94:AC:62:31:6E:60:D2:46:E4:FC:08:24:7E:D0:CB X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c5:9d:d0:fa:c4:e5:49:b2:4a:0b:fa:f8:fa:a9:c0:2a:88: d7:26:3d:b7:1e:3c:00:09:3c:79:ca:b5:6e:5d:b7:84:6d:bf: e3:84:57:98:f4:58:71:17:f0:c5:eb:d2:71:da:67:76:cf:c4: 6d:22:d7:61:41:1a:6f:56:49:bc:0a:00:87:dc:31:bf:57:67: 55:4f:9e:11:81:c7:3e:2f:10:dc:32:34:79:f9:a4:33:84:a0: 7a:50:70:57:03:3d:13:e5:5d:39:32:cb:6c:8f:5b:ed:98:ad: 21:e3:80:bf:5e:47:8f:25:e3:80:ea:f4:53:0e:bf:d8:35:63: 3f:d4:c7:9d:90:0f:4d:f9:fa:37:fd:0e:6f:9b:b1:84:2c:c4: 6b:62:54:2f:21:80:99:6a:23:9c:85:02:6a:5d:31:e8:b4:07: 89:f5:b6:0a:11:c3:94:e4:6c:33:84:d9:cf:3a:0f:47:78:d8: 80:41:63:9b:8e:c1:98:02:13:a0:cf:d3:50:10:b3:e7:c3:db: 65:de:4b:9e:43:2b:e6:a2:30:ee:4f:af:38:b6:9b:74:86:dc: 71:73:4d:36:eb:c9:61:b0:0d:ae:da:57:ad:51:fd:bc:9d:dd: ea:20:6b:58:8f:c2:20:51:f5:f0:b5:c2:f1:28:bf:d8:40:34: c0:e0:da:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwNDE1MDEzMTAyWhcNMjUwNDIyMDEzMTAyWjAYMRYwFAYD VQQDEw02N2ZkYjZkNi05ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveorLFnqvtMUQ+4uQjxEdSB0+F057jLgO1PaSJEKhGZXKz+vhJQgFy68LYir QrSWuukzQs6Ax9hoOjR2m+PbyJ3Nz187Pwm5apTqYq5Mtr1DVllPtAuWnTvmbUMI +tpMms1Z5eZpMhK7+Vmn+0jle5ndMLcTY/hiYi/xifzdcz0G64NQhlF0VrJToRXc H601Qr+hU0V6DVrv1J4p8zzC6jl2+rAk8OfGtu4dTa6j6JsP49A38vdiNFvz9CEI nEkf3VOpPR3lE83tA44qJCgfkRlgif9pzUZr0S6yN9kKQNXr5HTwmLYm7DxsuT6J hzReJL83DApeaUKrC5pJgiQpvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9bt2Z7 lKxiMW5g0kbk/AgkftDLMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIxZ3Q+sTlSbJKC/r4+qnAKojXJj23HjwACTx5yrVuXbeEbb/jhFeY 9FhxF/DF69Jx2md2z8RtItdhQRpvVkm8CgCH3DG/V2dVT54Rgcc+LxDcMjR5+aQz hKB6UHBXAz0T5V05Mstsj1vtmK0h44C/XkePJeOA6vRTDr/YNWM/1MedkA9N+fo3 /Q5vm7GELMRrYlQvIYCZaiOchQJqXTHotAeJ9bYKEcOU5GwzhNnPOg9HeNiAQWOb jsGYAhOgz9NQELPnw9tl3kueQyvmojDuT684tpt0htxxc00268lhsA2u2letUf28 nd3qIGtYj8IgUfXwtcLxKL/YQDTA4NpZ -----END CERTIFICATE-----Generated at Tue Apr 15 17:21:28 2025 by rpki-client