$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: GIvvseYh2LpSKRxeLppz/WbPAOpAe9EWnWHaeJO2cY8= Subject key identifier: CE:03:56:D5:49:36:FF:9A:86:CB:10:5F:18:4A:71:FB:7F:9E:F5:81 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1D0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1D00 Signing time: Fri 04 Apr 2025 16:12:16 +0000 Manifest this update: Fri 04 Apr 2025 16:12:16 +0000 Manifest next update: Fri 11 Apr 2025 16:12:16 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: OaeMGttb/y6e8a5d7eTQBh5bnzKMRTm7iHyRQZR0/mY=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: QN4dhYeOYexv58OGwmZdyDg8Z4B86G7ksX83Qid7CHk=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: oh/v7iVJL2nmvk/qjcAVXe7OglXKPf/jEhdssMeYp/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7437 (0x1d0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F Validity Not Before: Apr 4 16:12:16 2025 GMT Not After : Apr 11 16:12:16 2025 GMT Subject: CN=67f004e0-ad59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:de:0b:f6:8a:a7:c3:c2:c8:57:c8:2f:a1: 2b:4a:a8:0b:a3:13:6e:2e:11:86:f4:6d:2e:eb:18: 50:c5:52:29:a5:0f:1f:f6:e4:1b:e8:e2:ae:bf:bc: bc:53:8d:88:4d:9f:43:8d:ad:e4:d1:90:11:de:c3: 3b:1d:58:78:03:af:73:e7:2a:38:43:38:7f:29:d2: f1:8e:ee:4d:05:9e:a7:af:ee:81:d1:14:8c:7e:1c: 41:59:fb:ab:a4:fc:d0:37:88:ec:b8:7a:9e:37:a5: ca:be:9e:5e:73:57:2d:92:a9:bc:3c:05:5d:f3:8d: 8c:0a:3a:a5:df:34:27:01:c3:ae:36:1e:a8:a5:64: cd:7f:14:06:e5:43:e4:e3:20:f2:00:03:8a:37:c3: c8:6f:6c:d1:78:72:e7:f4:03:32:19:b9:c7:f5:c1: 86:8c:ab:dd:c5:19:2a:60:97:39:93:6c:7e:d7:5b: 24:0d:2c:06:5f:9f:f1:e0:57:48:2e:78:5a:b3:8c: b3:2e:4e:44:b0:2a:3a:7a:0d:cd:96:aa:a3:35:a2: 8b:5c:c5:b0:79:c1:7b:38:5d:1a:39:b5:ec:a6:5b: 81:90:e0:4f:00:72:1f:ee:b5:29:91:10:9c:d8:21: f6:1b:fc:da:36:26:fa:cc:c7:f2:39:17:fa:1e:c4: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:03:56:D5:49:36:FF:9A:86:CB:10:5F:18:4A:71:FB:7F:9E:F5:81 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f5:db:7a:7c:ca:5e:c6:7b:a6:a2:c0:80:f4:49:47:92:c1: bf:ba:68:e7:30:5e:a9:13:6b:bf:85:3f:d9:23:ad:d6:0a:24: 8f:3a:a8:b8:26:2c:87:f7:db:8f:44:2e:f7:d1:0e:74:ff:a0: fa:64:a2:52:22:93:9d:d0:96:9e:5f:a2:6b:04:9c:1b:e2:0c: 16:fc:6b:c5:6d:dc:2c:3e:13:4a:6d:d6:80:ec:ae:9f:7c:b5: 17:e1:b5:53:89:4e:cc:5f:df:e6:b6:42:e7:f2:bd:b7:d1:16: e8:b2:aa:e6:03:23:2b:43:26:80:d8:91:03:8b:70:9b:1b:43: 5f:b6:fe:00:dc:99:82:80:c1:97:27:55:6f:9e:e8:0c:5e:91: 7e:76:45:da:fd:4e:50:84:36:a8:eb:49:a3:e1:e5:9c:d9:bf: af:6a:ed:85:ef:d8:68:3d:fd:c1:a6:e3:b2:19:9d:a4:71:f3: 5b:a3:a9:79:46:59:3b:e7:47:c2:09:3d:8e:89:03:3f:38:30: 26:0b:95:03:52:c3:4c:b9:86:55:a3:5d:53:78:c2:27:be:89: 70:a9:82:38:e0:29:1c:db:4a:42:e3:b3:93:2c:8d:a0:36:fc: 74:1d:0f:ae:06:43:1b:5a:6d:2e:7c:f8:2a:ef:ab:5f:ef:1a: 21:20:15:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjUwNDA0MTYxMjE2WhcNMjUwNDExMTYxMjE2WjAYMRYwFAYD VQQDEw02N2YwMDRlMC1hZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCHeC/aKp8PCyFfIL6ErSqgLoxNuLhGG9G0u6xhQxVIppQ8f9uQb6OKuv7y8 U42ITZ9Dja3k0ZAR3sM7HVh4A69z5yo4Qzh/KdLxju5NBZ6nr+6B0RSMfhxBWfur pPzQN4jsuHqeN6XKvp5ec1ctkqm8PAVd842MCjql3zQnAcOuNh6opWTNfxQG5UPk 4yDyAAOKN8PIb2zReHLn9AMyGbnH9cGGjKvdxRkqYJc5k2x+11skDSwGX5/x4FdI Lnhas4yzLk5EsCo6eg3NlqqjNaKLXMWwecF7OF0aObXspluBkOBPAHIf7rUpkRCc 2CH2G/zaNib6zMfyORf6HsTWpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4DVtVJ Nv+ahssQXxhKcft/nvWBMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA9dt6fMpexnumosCA9ElHksG/umjnMF6pE2u/hT/ZI63WCiSPOqi4 JiyH99uPRC730Q50/6D6ZKJSIpOd0JaeX6JrBJwb4gwW/GvFbdwsPhNKbdaA7K6f fLUX4bVTiU7MX9/mtkLn8r230RbosqrmAyMrQyaA2JEDi3CbG0Nftv4A3JmCgMGX J1VvnugMXpF+dkXa/U5QhDao60mj4eWc2b+vau2F79hoPf3BpuOyGZ2kcfNbo6l5 Rlk750fCCT2OiQM/ODAmC5UDUsNMuYZVo11TeMInvolwqYI44Ckc20pC47OTLI2g Nvx0HQ+uBkMbWm0ufPgq76tf7xohIBUd -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:39 2025 by rpki-client