$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: f21FViq4IUJ34Vetq+fXwnbNtBJE/TBPYTYKAaXbL18= Subject key identifier: 2E:1E:5E:BE:86:6C:CA:9F:7F:FC:7F:EA:0E:E4:BC:E6:77:9F:C4:2A Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 0291 Signing time: Tue 15 Apr 2025 01:14:46 +0000 Manifest this update: Tue 15 Apr 2025 01:14:45 +0000 Manifest next update: Tue 22 Apr 2025 01:14:45 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: Nt9nebzxX0aL2Mw0HRvNOpr8CTjkNAAxAt7DVpN0u9s=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Apr 15 01:14:45 2025 GMT Not After : Apr 22 01:14:45 2025 GMT Subject: CN=67fdb306-bf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:a9:ac:6e:88:71:97:4e:69:8e:f6:68:ad: da:e3:1d:38:bd:b7:e8:8d:0d:59:5b:55:19:9e:34: e4:dd:d5:8e:c8:2a:b3:95:12:a6:87:1a:91:a6:4b: 73:bc:d5:af:58:a8:ef:aa:5f:40:dc:cf:ff:a2:0b: 80:d6:53:2d:55:b8:60:d2:2b:9d:6b:f2:35:1b:9f: 0d:f7:1f:c2:2e:5a:74:9d:1a:50:cf:45:77:24:be: 96:95:19:51:df:87:1d:88:29:47:c0:c7:a1:c9:7d: 44:fe:b1:4e:f5:ab:9b:01:6f:b2:5b:b7:6a:32:81: 43:94:8e:9a:31:72:78:bf:78:d7:df:33:3f:90:2d: f5:b0:a4:b8:bb:34:78:b3:cf:96:ff:7b:d9:2b:32: 6d:5c:39:89:62:95:49:75:ff:94:8a:8e:62:a1:ba: 6e:ba:51:0f:f7:64:61:72:88:48:03:39:be:84:2b: 2c:87:90:7c:6c:cd:73:b2:fe:fb:05:c1:c9:5f:2b: dc:c3:07:5a:df:2f:86:41:66:b9:8a:c7:1f:f0:2b: 59:17:2e:37:d8:16:3a:c4:ca:13:60:7b:89:14:9c: d5:47:01:a0:01:14:f7:3b:b4:c9:8f:94:40:19:e6: 54:cc:53:20:2d:21:17:86:18:03:02:aa:7d:a1:fd: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:5E:BE:86:6C:CA:9F:7F:FC:7F:EA:0E:E4:BC:E6:77:9F:C4:2A X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f7:0a:d0:17:d6:d8:5d:0a:01:59:04:c3:99:8d:8e:dd:6d: 57:d6:d6:36:f5:ed:7c:d4:d3:36:e7:de:e3:ba:e4:e4:d5:5c: 37:46:0b:60:00:4b:82:35:44:b8:66:47:3d:b1:72:52:b8:56: 10:40:e2:61:a5:ca:87:f5:67:a2:03:c2:16:9c:e0:b7:19:eb: 68:53:03:1b:2b:3d:09:0c:44:ee:6e:bf:5d:a1:05:c6:73:f4: 49:a4:7f:78:5e:b3:56:75:db:28:a5:95:11:5a:b5:80:39:ba: ba:2e:ea:ff:0f:93:ff:7f:1a:0a:48:2b:63:a3:29:0b:19:7a: 96:65:d4:93:d2:b5:39:91:11:87:02:f4:87:1d:cf:23:6a:dd: 81:1f:63:3a:f7:20:af:3f:16:ad:ac:ff:54:57:74:83:5f:58: b3:80:bc:06:49:11:22:ed:d6:cf:9e:f5:81:ac:76:2a:98:f0: a6:38:d1:68:62:39:1a:52:c7:0c:b5:14:8c:82:33:71:5c:33: ee:1f:53:e3:40:ab:11:fc:57:29:ea:85:06:96:02:05:7e:1d: d2:5a:35:db:54:0a:8c:a9:8b:8c:11:21:13:1b:66:89:1d:41: cd:3d:8c:19:9c:4a:84:90:4a:e3:5a:df:ca:0f:cd:1e:4f:73: 49:ed:9a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNDE1MDExNDQ1WhcNMjUwNDIyMDExNDQ1WjAYMRYwFAYD VQQDEw02N2ZkYjMwNi1iZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwCprG6IcZdOaY72aK3a4x04vbfojQ1ZW1UZnjTk3dWOyCqzlRKmhxqRpktz vNWvWKjvql9A3M//oguA1lMtVbhg0iuda/I1G58N9x/CLlp0nRpQz0V3JL6WlRlR 34cdiClHwMehyX1E/rFO9aubAW+yW7dqMoFDlI6aMXJ4v3jX3zM/kC31sKS4uzR4 s8+W/3vZKzJtXDmJYpVJdf+Uio5iobpuulEP92RhcohIAzm+hCssh5B8bM1zsv77 BcHJXyvcwwda3y+GQWa5iscf8CtZFy432BY6xMoTYHuJFJzVRwGgART3O7TJj5RA GeZUzFMgLSEXhhgDAqp9of2/QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4eXr6G bMqff/x/6g7kvOZ3n8QqMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9wrQF9bYXQoBWQTDmY2O3W1X1tY29e181NM2597juuTk1Vw3Rgtg AEuCNUS4Zkc9sXJSuFYQQOJhpcqH9WeiA8IWnOC3GetoUwMbKz0JDETubr9doQXG c/RJpH94XrNWddsopZURWrWAObq6Lur/D5P/fxoKSCtjoykLGXqWZdST0rU5kRGH AvSHHc8jat2BH2M69yCvPxatrP9UV3SDX1izgLwGSREi7dbPnvWBrHYqmPCmONFo YjkaUscMtRSMgjNxXDPuH1PjQKsR/Fcp6oUGlgIFfh3SWjXbVAqMqYuMESETG2aJ HUHNPYwZnEqEkErjWt/KD80eT3NJ7ZqI -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:11 2025 by rpki-client