$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft File: dEeyg16suIrEhyfLcmu4e5e6d4o.mft (raw, json) Hash identifier: v8XDMtzGauycJaHXzVXLqYvzeFaNQsGYZXjrBoyleDI= Subject key identifier: BF:9E:79:82:8D:DD:28:8D:57:87:55:7F:34:5B:B8:4F:84:FA:F2:1D Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft Manifest number: 07A8 Signing time: Fri 04 Apr 2025 21:21:34 +0000 Manifest this update: Fri 04 Apr 2025 21:21:33 +0000 Manifest next update: Fri 11 Apr 2025 21:21:33 +0000 Files and hashes: 1: dEeyg16suIrEhyfLcmu4e5e6d4o.crl (hash: zOfk/M8ugGBATMpEyxC7KX2+FA2TG2eR3XaGPivmDDg=) 2: 5B196FD80A4611ECAE818D54C4F9AE02.roa (hash: 81w6uEIlXcEUdPQfo2vbY8z/AyDWyyCFh1+WTuNWnEo=) 3: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (hash: zTUhKI/Umv9DnZwwhUUIlgq0Y79IbxqyExa7TOr+PSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5F82 Validity Not Before: Apr 4 21:21:33 2025 GMT Not After : Apr 11 21:21:33 2025 GMT Subject: CN=67f04d5d-6a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:b8:19:d2:69:34:f0:52:1d:a8:b9:5e:f0: 34:db:b5:41:74:64:cf:88:00:96:af:44:9c:1f:2b: 65:9c:e6:05:a6:e3:80:4c:b0:66:10:d1:88:87:4b: a5:59:b5:26:fa:39:e5:45:b6:98:f0:87:2d:b5:cf: df:af:23:8f:6a:18:c7:54:c1:dd:c0:be:2e:fc:6c: 82:40:a5:64:53:3f:f4:12:32:61:09:25:e8:0f:ad: 04:e3:ba:2b:04:fa:af:5a:fd:b1:a2:25:94:84:2e: 88:14:8f:ba:c0:49:d5:53:67:85:8f:f2:e1:1b:6f: b0:11:34:d1:6c:c0:aa:34:be:fa:7d:05:52:69:04: 92:ac:63:2c:74:8c:40:81:f7:a0:14:2f:db:1f:4f: 1c:91:12:1f:62:d9:af:a5:cd:61:94:2f:94:9b:3b: 74:fd:b6:c9:e0:ae:c9:b2:3a:ea:c1:b5:4d:8b:e6: 48:86:04:c6:6d:98:2c:d8:21:05:e3:69:8f:17:d3: f9:7f:ec:43:76:0c:2e:09:33:41:fc:70:b5:d7:f5: 63:5a:03:db:0d:e9:aa:c8:fc:bc:64:52:10:2c:67: 7f:0c:e1:e0:a5:5b:dd:f0:7d:1b:77:b5:57:24:63: 90:0a:16:c5:03:c1:3f:ad:96:32:2e:8c:c9:f1:f1: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:79:82:8D:DD:28:8D:57:87:55:7F:34:5B:B8:4F:84:FA:F2:1D X509v3 Authority Key Identifier: keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e3:89:fd:e7:0b:66:ee:33:ea:93:53:06:f6:98:1e:4d:14: 2e:71:1e:50:bb:92:ca:6b:40:c6:7a:b3:97:e5:b2:5c:c1:66: 76:19:69:76:85:89:f5:11:bc:27:35:eb:03:55:4d:bc:b6:3d: b5:bf:10:11:20:5c:7e:2c:b5:2d:ac:b0:08:8a:83:8b:2d:57: 1f:11:07:f2:fa:ec:b5:a9:61:be:f2:d6:86:32:36:72:01:b3: ef:97:5f:df:2e:b5:7e:34:b8:9e:d3:8e:50:18:50:48:57:ac: 56:ac:33:39:5c:59:62:3d:3b:ed:be:a7:e5:d9:fd:c6:40:9a: 6e:01:3c:b9:5e:69:23:de:65:54:e3:58:9b:d3:81:18:c4:f8: a8:fd:4a:53:39:cb:aa:5c:6c:2e:89:66:4b:be:64:eb:78:09: 87:76:ff:f9:d6:e4:a3:09:10:05:29:b6:15:15:49:14:2b:90: bc:53:2e:62:d1:63:ee:9f:e2:b6:85:c7:c7:57:70:d7:2c:e7: c4:bf:09:ad:5d:67:39:b5:bc:ab:af:e9:a1:b8:eb:76:0d:8d: da:9d:d0:86:36:6a:b4:76:a8:aa:d7:94:fa:fd:b9:dc:36:91: 78:7a:dd:2a:86:b8:4a:be:7c:b1:8a:4b:9e:1f:67:0d:8b:f8: 66:ad:f7:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVGODIxMTAvBgNVBAUTKDc0NDdCMjgzNUVBQ0I4OEFDNDg3MjdDQjcyNkJCODdC OTdCQTc3OEEwHhcNMjUwNDA0MjEyMTMzWhcNMjUwNDExMjEyMTMzWjAYMRYwFAYD VQQDEw02N2YwNGQ1ZC02YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1W4GdJpNPBSHai5XvA027VBdGTPiACWr0ScHytlnOYFpuOATLBmENGIh0ul WbUm+jnlRbaY8Icttc/fryOPahjHVMHdwL4u/GyCQKVkUz/0EjJhCSXoD60E47or BPqvWv2xoiWUhC6IFI+6wEnVU2eFj/LhG2+wETTRbMCqNL76fQVSaQSSrGMsdIxA gfegFC/bH08ckRIfYtmvpc1hlC+Umzt0/bbJ4K7JsjrqwbVNi+ZIhgTGbZgs2CEF 42mPF9P5f+xDdgwuCTNB/HC11/VjWgPbDemqyPy8ZFIQLGd/DOHgpVvd8H0bd7VX JGOQChbFA8E/rZYyLozJ8fHJSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+eeYKN 3SiNV4dVfzRbuE+E+vIdMB8GA1UdIwQYMBaAFHRHsoNerLiKxIcny3JruHuXuneK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUY4Mi8zMTA3QjNFQ0Y3 QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJckVoeWZMY211NGU1ZTZk NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZXlnMTZzdUlyRWh5ZkxjbXU0ZTVlNmQ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUY4Mi8zMTA3QjNFQ0Y3QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJ ckVoeWZMY211NGU1ZTZkNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP44n95wtm7jPqk1MG9pgeTRQucR5Qu5LKa0DGerOX5bJcwWZ2GWl2 hYn1EbwnNesDVU28tj21vxARIFx+LLUtrLAIioOLLVcfEQfy+uy1qWG+8taGMjZy AbPvl1/fLrV+NLie045QGFBIV6xWrDM5XFliPTvtvqfl2f3GQJpuATy5Xmkj3mVU 41ib04EYxPio/UpTOcuqXGwuiWZLvmTreAmHdv/51uSjCRAFKbYVFUkUK5C8Uy5i 0WPun+K2hcfHV3DXLOfEvwmtXWc5tbyrr+mhuOt2DY3andCGNmq0dqiq15T6/bnc NpF4et0qhrhKvnyxikueH2cNi/hmrfet -----END CERTIFICATE-----Generated at Sun Apr 6 21:59:50 2025 by rpki-client