$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft File: ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json) Hash identifier: br42A/97TpVxbSB9f5ncYbE4ueBWs7E5+MqbasBNqqg= Subject key identifier: 6E:EB:31:5A:0B:DD:4F:5A:C5:8F:2C:BC:63:59:7B:78:36:93:F1:1F Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft Manifest number: 010A Signing time: Thu 03 Apr 2025 04:17:59 +0000 Manifest this update: Thu 03 Apr 2025 04:17:59 +0000 Manifest next update: Thu 10 Apr 2025 04:17:59 +0000 Files and hashes: 1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: WaYxOf3uvzf2BuJwjHuVvYSxU48Mw1nv3fMD/2o38c0=) 2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=) 3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5832 Validity Not Before: Apr 3 04:17:59 2025 GMT Not After : Apr 10 04:17:59 2025 GMT Subject: CN=67ee0bf7-c138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:2f:05:8e:a3:46:b7:67:92:e2:4d:3b:c0: b8:80:fe:47:00:17:c6:be:6e:78:01:7f:06:aa:76: 3a:70:12:42:2b:5c:56:1b:7f:c8:15:49:cb:43:99: f8:7e:be:0e:ef:e3:38:60:03:2f:0f:31:b5:14:f7: dd:42:25:29:15:1f:49:f5:9b:ef:c3:c7:a2:38:9e: e6:05:2c:e5:f5:31:2b:13:c5:b5:72:f3:ad:82:ca: db:3c:0b:ed:d2:52:3b:8c:da:b7:b5:51:e0:76:a5: ab:a2:9c:1a:3e:b7:94:18:20:d1:b1:2c:80:04:52: ee:c0:70:cb:3f:14:ff:b5:9e:da:c8:36:2b:1b:03: 2e:02:be:8f:93:4e:14:0b:79:ff:03:ad:a3:4c:e6: 85:fe:75:03:b0:ea:79:2a:64:e3:9f:9f:b6:ac:ca: 30:29:fb:da:c2:81:a2:53:c6:8c:85:c7:3b:f7:31: 35:b8:42:c1:b2:32:ac:4a:55:3e:e9:e8:d8:bf:a9: c9:90:a4:19:35:b8:5b:99:86:40:60:93:70:40:51: fe:2d:8f:fb:de:78:4b:10:11:b3:3d:f5:6d:b6:8a: 81:0a:9a:9e:8f:a7:04:50:c2:49:12:2e:98:bb:ad: d0:8b:ca:23:c5:22:a1:ab:38:32:3e:46:23:d1:7b: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:31:5A:0B:DD:4F:5A:C5:8F:2C:BC:63:59:7B:78:36:93:F1:1F X509v3 Authority Key Identifier: keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:de:de:99:be:04:0f:05:4c:15:26:90:1f:02:12:17:77:4d: 34:78:7b:8f:cb:83:ae:0d:4e:4c:79:9d:c8:54:4e:e1:25:df: d6:21:9b:31:fd:22:6b:69:7e:1f:47:f5:2f:30:de:0e:83:bf: 1a:f9:fc:6f:03:4f:5d:97:8f:be:fe:3e:36:57:3e:2d:a9:e3: db:42:d6:ef:cb:ed:58:34:56:d1:88:cc:ce:69:06:58:ba:06: 20:fd:a5:fe:a3:20:28:cc:b5:f9:9d:1a:2b:be:c4:37:1e:00: 29:a8:65:38:74:78:47:38:cb:05:fe:4e:43:83:5e:2c:6f:28: ba:ce:fb:70:c2:78:7b:ed:62:87:18:69:2f:c7:b5:b8:87:63: 75:5a:49:db:2a:c9:69:6d:4e:14:43:b3:8d:5a:f5:84:4a:98: 22:f8:4d:96:93:77:af:20:e7:ee:8a:aa:e7:43:d7:53:f3:b4: e2:ae:5d:38:b0:f4:3b:c3:98:dc:af:f2:59:c3:dc:e4:03:ec: 91:5e:ea:75:55:a6:5d:0a:66:ff:3d:57:12:f3:a0:5b:6b:2c: ef:d8:8f:e8:82:e6:3e:95:2d:2d:32:ac:c5:eb:cb:98:a4:4b: 76:37:56:82:c3:e0:63:22:61:1d:a4:c8:fe:6a:df:ce:2d:39: 4e:df:72:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB NTI4REYzQkUwHhcNMjUwNDAzMDQxNzU5WhcNMjUwNDEwMDQxNzU5WjAYMRYwFAYD VQQDEw02N2VlMGJmNy1jMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZgvBY6jRrdnkuJNO8C4gP5HABfGvm54AX8GqnY6cBJCK1xWG3/IFUnLQ5n4 fr4O7+M4YAMvDzG1FPfdQiUpFR9J9Zvvw8eiOJ7mBSzl9TErE8W1cvOtgsrbPAvt 0lI7jNq3tVHgdqWropwaPreUGCDRsSyABFLuwHDLPxT/tZ7ayDYrGwMuAr6Pk04U C3n/A62jTOaF/nUDsOp5KmTjn5+2rMowKfvawoGiU8aMhcc79zE1uELBsjKsSlU+ 6ejYv6nJkKQZNbhbmYZAYJNwQFH+LY/73nhLEBGzPfVttoqBCpqej6cEUMJJEi6Y u63Qi8ojxSKhqzgyPkYj0XvK2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7rMVoL 3U9axY8svGNZe3g2k/EfMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3 OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044 NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJv M0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI3t6ZvgQPBUwVJpAfAhIXd000eHuPy4OuDU5MeZ3IVE7hJd/WIZsx /SJraX4fR/UvMN4Og78a+fxvA09dl4++/j42Vz4tqePbQtbvy+1YNFbRiMzOaQZY ugYg/aX+oyAozLX5nRorvsQ3HgApqGU4dHhHOMsF/k5Dg14sbyi6zvtwwnh77WKH GGkvx7W4h2N1WknbKslpbU4UQ7ONWvWESpgi+E2Wk3evIOfuiqrnQ9dT87Tirl04 sPQ7w5jcr/JZw9zkA+yRXup1VaZdCmb/PVcS86Bbayzv2I/oguY+lS0tMqzF68uY pEt2N1aCw+BjImEdpMj+at/OLTlO33JV -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:57 2025 by rpki-client