$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft File: dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json) Hash identifier: HpREJOe82uhi7FT57DC4ELOk5ZyqwsyencvVO5XyhKM= Subject key identifier: A4:25:2E:05:CE:71:8A:1E:90:C5:7B:46:29:F7:28:0A:58:48:E7:5F Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft Manifest number: 06C7 Signing time: Fri 28 Mar 2025 22:29:57 +0000 Manifest this update: Fri 28 Mar 2025 22:29:56 +0000 Manifest next update: Fri 04 Apr 2025 22:29:56 +0000 Files and hashes: 1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: krxtaw5w1QwX8w6f1Kxnzu6E4nCaaKUzODhX8Aq71as=) 2: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM=) 3: 6B0EF3045B4911ED8862970DC4F9AE02.roa (hash: HufxlMWBsko144G4tR19UzbVfHKirhQM0DbZOGV07n8=) 4: 4641C3785C2311EDA3D17465C4F9AE02.roa (hash: 1cYw/FnNhsdWx9pKxBCUUJjrGeyH6sgJ5u2vBWIY2hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ECE7 Validity Not Before: Mar 28 22:29:56 2025 GMT Not After : Apr 4 22:29:56 2025 GMT Subject: CN=67e722e5-1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:f2:bf:5f:d7:6f:ee:85:9c:34:51:35:9b: d1:1d:5c:3a:38:9f:fd:27:63:a1:23:e4:bc:67:11: 61:e5:5f:57:73:3e:34:0b:86:d9:05:ca:61:c9:b1: de:27:76:bf:25:ef:03:6f:fe:af:9e:ec:fe:1f:d5: ec:ec:82:25:d3:c8:8f:db:37:b0:05:4c:1c:10:ad: 26:b2:ca:f8:6c:b3:1a:d9:be:a1:6c:23:6f:d9:ec: 74:b0:0d:f6:40:4f:0d:b7:58:f2:0e:c9:a0:19:b2: a5:37:11:19:93:7a:c1:cc:4b:b5:de:08:00:51:6e: b1:74:13:da:88:57:f3:8a:4a:0e:f3:54:2b:56:d3: 20:dd:5c:8c:89:73:ef:aa:dc:a8:c7:1c:1c:6a:43: 78:88:2d:b5:ca:ca:cc:54:a9:44:19:4d:73:a6:d1: cd:3a:00:36:75:ef:ce:88:a8:cd:f9:b4:05:19:35: e9:c5:70:af:e5:91:de:fc:8a:ee:44:d6:f9:4e:75: 4f:93:a4:12:6c:da:cd:7c:c5:75:b9:ed:76:41:73: 95:cd:4c:34:50:7b:21:cc:57:19:07:47:9d:79:17: c5:a6:26:6a:65:02:8d:f7:f1:15:fa:ea:4e:af:53: ff:b3:2c:fe:de:0d:b7:b1:83:ae:1e:fe:e3:eb:02: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:2E:05:CE:71:8A:1E:90:C5:7B:46:29:F7:28:0A:58:48:E7:5F X509v3 Authority Key Identifier: keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c1:95:73:34:ca:ff:f3:17:8f:20:d1:a6:31:94:cc:87:30: 7b:4f:5e:96:41:1a:ff:ac:7f:d7:37:b3:31:8b:a0:78:c5:f2: 83:a6:ea:76:06:ab:bd:76:97:83:57:8d:dc:4b:c1:74:de:26: a8:48:f0:5b:fc:4a:6a:1f:5c:1d:77:7d:95:12:12:3c:b6:71: 5e:63:e1:3c:cb:2f:be:34:50:a0:a1:2e:7d:ee:3d:1f:ca:2e: 33:93:7e:04:ff:30:06:55:6f:e0:7f:a9:3d:24:8c:63:67:d2: ca:29:3a:31:59:ce:7e:78:66:05:4d:74:43:a5:de:54:42:e5: b7:29:3c:65:81:f2:bf:16:b1:6d:64:c2:fe:0e:13:28:2d:5c: a7:90:68:82:80:9c:4f:94:53:5a:25:c3:3b:e1:31:30:22:2f: 18:2c:2d:0d:33:05:a4:ba:b3:e0:ed:f2:04:a6:a6:c1:aa:be: 59:10:b5:6a:45:b9:c1:0c:52:75:c5:61:4e:f0:78:1c:91:59: 96:0c:44:44:e6:42:0a:8b:5b:c8:22:d9:10:ce:f1:f3:88:71: d4:79:48:a6:56:20:1c:77:47:62:91:5e:28:c6:d4:37:15:22: ae:a7:9c:b8:1a:b5:02:cd:10:9e:84:88:4d:b6:77:12:ee:47: 46:5e:11:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF QjZENDBFMzMwHhcNMjUwMzI4MjIyOTU2WhcNMjUwNDA0MjIyOTU2WjAYMRYwFAYD VQQDEw02N2U3MjJlNS0xMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9/yv1/Xb+6FnDRRNZvRHVw6OJ/9J2OhI+S8ZxFh5V9Xcz40C4bZBcphybHe J3a/Je8Db/6vnuz+H9Xs7IIl08iP2zewBUwcEK0mssr4bLMa2b6hbCNv2ex0sA32 QE8Nt1jyDsmgGbKlNxEZk3rBzEu13ggAUW6xdBPaiFfzikoO81QrVtMg3VyMiXPv qtyoxxwcakN4iC21ysrMVKlEGU1zptHNOgA2de/OiKjN+bQFGTXpxXCv5ZHe/Iru RNb5TnVPk6QSbNrNfMV1ue12QXOVzUw0UHshzFcZB0edeRfFpiZqZQKN9/EV+upO r1P/syz+3g23sYOuHv7j6wLT6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQlLgXO cYoekMV7Rin3KApYSOdfMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUNFNy81RTA1REJBNDVGQUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBa MjlyTTVMOXlDZUhyYlVEak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwwZVzNMr/8xePINGmMZTMhzB7T16WQRr/rH/XN7Mxi6B4xfKDpup2 Bqu9dpeDV43cS8F03iaoSPBb/EpqH1wdd32VEhI8tnFeY+E8yy++NFCgoS597j0f yi4zk34E/zAGVW/gf6k9JIxjZ9LKKToxWc5+eGYFTXRDpd5UQuW3KTxlgfK/FrFt ZML+DhMoLVynkGiCgJxPlFNaJcM74TEwIi8YLC0NMwWkurPg7fIEpqbBqr5ZELVq RbnBDFJ1xWFO8HgckVmWDERE5kIKi1vIItkQzvHziHHUeUimViAcd0dikV4oxtQ3 FSKup5y4GrUCzRCehIhNtncS7kdGXhFF -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:31 2025 by rpki-client