$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: flXhfHz4eKoK3dEWwVLZl1b9ac412+pfng9mipflFFc= Subject key identifier: 5A:AA:4D:70:63:2A:12:A9:DA:AD:DB:85:3C:57:76:54:D0:00:F4:FC Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: D6 Signing time: Fri 11 Apr 2025 04:49:54 +0000 Manifest this update: Fri 11 Apr 2025 04:49:53 +0000 Manifest next update: Fri 18 Apr 2025 04:49:53 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: K/TnTA4SLkgF29fjZIaWWVdTf4pHSwPtsgl2n0jR8jY=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Apr 11 04:49:53 2025 GMT Not After : Apr 18 04:49:53 2025 GMT Subject: CN=67f89f72-c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f3:e2:48:71:ec:28:70:82:83:bb:3d:6b:ed: d9:ee:77:dd:8b:51:53:6b:98:a4:dd:f5:da:d1:58: 76:8a:d7:55:df:b8:3d:58:a1:6c:84:5f:cd:76:23: 2e:1f:ef:a4:de:ef:3e:c4:50:4c:50:19:06:b5:9f: 79:cb:6f:92:57:1f:43:e4:58:f4:68:cb:c4:57:e5: b7:57:e0:41:62:80:12:ed:87:d8:d7:48:a5:db:66: 46:b6:71:8b:a8:64:e4:b2:59:f7:0a:c0:65:91:27: 76:f1:c4:62:fe:d3:73:8d:de:b6:ab:23:4d:ad:7d: 83:97:73:52:a7:35:40:d7:71:53:a3:f6:30:12:8f: ad:bf:50:a8:e5:68:4e:fb:4c:1d:16:ce:a9:79:17: bb:46:0b:e3:b2:64:ce:6a:65:fd:49:32:4f:b7:48: d2:a5:35:0b:28:16:86:0f:d7:7e:88:e5:e5:69:5a: c5:f3:42:5f:52:72:9c:cd:a8:bb:b0:b0:44:c8:a3: 48:41:cb:49:87:25:c1:f9:fb:c2:2c:fa:41:37:45: 89:18:c0:42:14:b1:2e:0c:6d:6b:1a:cb:1d:83:57: 84:00:db:aa:de:80:82:82:1f:ab:39:dd:9b:09:23: c6:36:75:9d:4c:89:72:7f:26:ca:25:83:eb:4d:96: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:4D:70:63:2A:12:A9:DA:AD:DB:85:3C:57:76:54:D0:00:F4:FC X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ac:3a:2d:6c:d7:11:8e:57:f2:37:ea:1c:94:23:db:4b:4b: b6:62:53:19:76:e6:ab:31:08:3b:42:95:b8:c4:3a:25:a6:4b: 0a:e6:31:cf:c4:59:cf:af:b0:7a:cd:69:1a:3b:60:24:41:75: 6c:b6:83:08:8e:5b:b1:c1:2e:4d:0e:26:17:ba:81:a7:56:ce: b0:53:d9:43:25:2f:a5:b7:04:92:9b:7f:28:fb:2a:25:4f:d0: bf:1e:1f:23:f9:b1:5c:70:a0:1b:89:12:19:25:d7:5c:53:e9: d7:77:19:55:3f:61:e4:95:34:c4:95:0c:c5:c9:d7:9d:4d:b4: aa:2b:ec:d5:c9:a3:ef:f8:eb:fa:c1:02:e8:3f:af:63:63:ec: 49:5d:be:1a:49:01:99:11:82:c0:b8:85:30:29:32:7e:3a:a6: f4:fb:0a:1b:b4:a2:24:7a:9b:f2:e5:30:57:0a:19:e8:84:28: e4:3e:9a:e8:f4:5c:d9:e0:67:0c:d9:8b:07:cf:ea:52:86:6b: 97:d7:90:d5:cc:72:88:9b:df:31:b6:40:71:42:1f:ac:4f:da: f5:c4:4f:49:78:96:23:83:9e:47:60:7d:9c:12:16:39:62:83: 2f:85:7d:63:bc:cc:43:9a:8b:c1:d3:ab:59:9a:ea:51:21:b8: 78:6c:2f:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNDExMDQ0OTUzWhcNMjUwNDE4MDQ0OTUzWjAYMRYwFAYD VQQDEw02N2Y4OWY3Mi1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vPiSHHsKHCCg7s9a+3Z7nfdi1FTa5ik3fXa0Vh2itdV37g9WKFshF/NdiMu H++k3u8+xFBMUBkGtZ95y2+SVx9D5Fj0aMvEV+W3V+BBYoAS7YfY10il22ZGtnGL qGTksln3CsBlkSd28cRi/tNzjd62qyNNrX2Dl3NSpzVA13FTo/YwEo+tv1Co5WhO +0wdFs6peRe7RgvjsmTOamX9STJPt0jSpTULKBaGD9d+iOXlaVrF80JfUnKczai7 sLBEyKNIQctJhyXB+fvCLPpBN0WJGMBCFLEuDG1rGssdg1eEANuq3oCCgh+rOd2b CSPGNnWdTIlyfybKJYPrTZa0nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqqTXBj KhKp2q3bhTxXdlTQAPT8MB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPrDotbNcRjlfyN+oclCPbS0u2YlMZduarMQg7QpW4xDolpksK5jHP xFnPr7B6zWkaO2AkQXVstoMIjluxwS5NDiYXuoGnVs6wU9lDJS+ltwSSm38o+yol T9C/Hh8j+bFccKAbiRIZJddcU+nXdxlVP2HklTTElQzFydedTbSqK+zVyaPv+Ov6 wQLoP69jY+xJXb4aSQGZEYLAuIUwKTJ+Oqb0+wobtKIkepvy5TBXChnohCjkPpro 9FzZ4GcM2YsHz+pShmuX15DVzHKIm98xtkBxQh+sT9r1xE9JeJYjg55HYH2cEhY5 YoMvhX1jvMxDmovB06tZmupRIbh4bC+m -----END CERTIFICATE-----Generated at Sat Apr 12 22:37:15 2025 by rpki-client