$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json) Hash identifier: +mIeh3kTjZANMcMcPCEueVlj1tiAvqOEuO91FR7d/CU= Subject key identifier: AD:9F:B3:A7:75:41:8F:17:1A:C9:0E:5B:FF:12:7C:E5:D1:E7:3F:62 Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft Manifest number: 87 Signing time: Thu 03 Apr 2025 05:48:44 +0000 Manifest this update: Thu 03 Apr 2025 05:48:44 +0000 Manifest next update: Thu 10 Apr 2025 05:48:44 +0000 Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: V6GDLBWQ8cdPvyZ8avMh+PKAsElQWY+HSqM1tng7HH4=) 2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: R0ve1rGoHZXsOYQBScXwsDxNaaTbtMNOWotF4DpFkvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB1F3 Validity Not Before: Apr 3 05:48:44 2025 GMT Not After : Apr 10 05:48:44 2025 GMT Subject: CN=67ee213c-338e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:24:ed:a4:aa:ec:b8:bd:da:e5:87:ca:78: 9d:c9:60:9d:29:a4:12:95:a6:e0:70:39:61:46:b2: 2a:1b:23:4a:2a:82:18:e3:56:44:6c:05:a6:15:66: db:92:af:54:04:6d:fd:5b:0e:3b:8f:cd:88:d6:f9: 65:d4:d4:0c:64:b0:75:c4:84:0f:2d:2f:f3:47:4a: 79:99:2f:ec:6b:7a:95:4a:0a:d9:8d:2a:83:2f:2d: e1:d6:4f:d5:27:67:74:c0:3e:df:a7:d2:4f:fe:90: 77:04:e0:2e:1a:1e:94:f8:76:51:e6:a8:58:a9:c5: 43:86:f0:16:10:d5:52:ac:79:25:d8:32:e6:62:3b: b0:e0:9a:c9:2e:0e:c6:83:d6:49:95:5b:3c:11:3f: e1:fa:0d:83:b8:7a:d1:58:98:74:a2:62:d1:b0:36: 87:34:16:cd:50:1e:0c:5d:8d:79:3d:90:2c:5a:18: cb:a8:bc:ea:45:2b:e7:49:41:06:52:c4:5f:aa:d4: 5e:85:e6:c1:a5:b7:25:59:ab:7d:3a:f4:5d:da:7c: e0:ad:f7:fb:2a:2c:eb:69:6e:49:1f:04:59:2a:5b: 67:9e:04:fd:a7:fa:d4:81:57:a5:74:89:d1:b7:56: 3e:63:b0:be:86:a3:9d:a4:2a:25:05:db:a7:c9:40: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9F:B3:A7:75:41:8F:17:1A:C9:0E:5B:FF:12:7C:E5:D1:E7:3F:62 X509v3 Authority Key Identifier: keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ef:6e:4b:15:10:50:7d:47:2f:cc:8a:74:8e:51:1c:e2:27: cc:94:eb:13:81:86:48:24:6a:69:a1:8c:cb:86:d7:50:83:9f: 71:99:bb:b7:c6:86:e2:6d:bd:98:46:5c:ae:cd:40:b6:b1:13: ef:db:94:f1:71:6c:ff:5f:a2:d3:7d:8c:b0:db:47:ce:98:37: 46:85:db:7f:55:bc:ff:6b:1a:de:7c:63:92:02:4b:4a:d2:8a: d0:45:df:de:ca:3a:bd:e6:e7:92:0c:98:02:6e:17:f2:13:04: e8:a2:40:02:0c:eb:3d:ca:8e:2c:af:dd:86:ad:68:7a:4a:d4: 8d:91:d4:28:2a:3d:97:73:8b:27:3e:4b:4a:c0:36:0f:da:11: be:bd:1a:15:37:7f:16:86:b5:50:0a:16:91:5b:59:bc:a2:06: 1e:80:c4:9f:95:63:b1:da:bc:56:11:6b:e3:77:a7:af:ff:13: 1b:bc:27:4a:45:07:9b:ea:21:12:03:27:46:2c:4d:4d:25:58: 4d:fa:8f:d4:ff:5c:14:40:ce:e1:59:4b:57:f6:2f:77:fe:a5: 16:7e:9a:c2:a4:25:b5:55:66:02:23:ed:63:7c:da:c6:c1:05: 68:3e:a6:b0:77:ec:b7:4d:4e:42:4f:3d:2d:2f:09:e4:35:b0: a5:61:31:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxRjMxMTAvBgNVBAUTKDc1MEZBNTdCNTkxNTY1MzlDQjE2RTU0QTYwQTZDRURC NUIxMEVCOUUwHhcNMjUwNDAzMDU0ODQ0WhcNMjUwNDEwMDU0ODQ0WjAYMRYwFAYD VQQDEw02N2VlMjEzYy0zMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CMk7aSq7Li92uWHynidyWCdKaQSlabgcDlhRrIqGyNKKoIY41ZEbAWmFWbb kq9UBG39Ww47j82I1vll1NQMZLB1xIQPLS/zR0p5mS/sa3qVSgrZjSqDLy3h1k/V J2d0wD7fp9JP/pB3BOAuGh6U+HZR5qhYqcVDhvAWENVSrHkl2DLmYjuw4JrJLg7G g9ZJlVs8ET/h+g2DuHrRWJh0omLRsDaHNBbNUB4MXY15PZAsWhjLqLzqRSvnSUEG UsRfqtRehebBpbclWat9OvRd2nzgrff7KizraW5JHwRZKltnngT9p/rUgVeldInR t1Y+Y7C+hqOdpColBdunyUA21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2fs6d1 QY8XGskOW/8SfOXR5z9iMB8GA1UdIwQYMBaAFHUPpXtZFWU5yxblSmCmzttbEOue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjFGMy80Mjk3RDA1MjQ1 QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpUbkxGdVZLWUtiTzIxc1E2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRLWxlMWtWWlRuTEZ1VktZS2JPMjFzUTY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjFGMy80Mjk3RDA1MjQ1QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpU bkxGdVZLWUtiTzIxc1E2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2725LFRBQfUcvzIp0jlEc4ifMlOsTgYZIJGppoYzLhtdQg59xmbu3 xobibb2YRlyuzUC2sRPv25TxcWz/X6LTfYyw20fOmDdGhdt/Vbz/axrefGOSAktK 0orQRd/eyjq95ueSDJgCbhfyEwTookACDOs9yo4sr92GrWh6StSNkdQoKj2Xc4sn PktKwDYP2hG+vRoVN38WhrVQChaRW1m8ogYegMSflWOx2rxWEWvjd6ev/xMbvCdK RQeb6iESAydGLE1NJVhN+o/U/1wUQM7hWUtX9i93/qUWfprCpCW1VWYCI+1jfNrG wQVoPqawd+y3TU5CTz0tLwnkNbClYTGJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:47 2025 by rpki-client