$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: yUqJOncm2jXa5Hr6ymL4o9cCJp3qK2LYy625Old1jgc= Subject key identifier: E8:10:B3:28:91:BD:23:43:E3:0B:20:9D:29:0E:D7:DA:33:ED:4E:59 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: CA Signing time: Thu 17 Apr 2025 04:36:06 +0000 Manifest this update: Thu 17 Apr 2025 04:36:05 +0000 Manifest next update: Thu 24 Apr 2025 04:36:05 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: jT8kqI5X8nQx2pkBqjZxdujN5et/iph63W544us5pgI=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Apr 17 04:36:05 2025 GMT Not After : Apr 24 04:36:05 2025 GMT Subject: CN=68008536-c77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:7c:42:18:7a:02:50:a2:28:a9:8b:da:84: 66:ba:7c:e3:25:cf:34:d1:88:47:fd:78:6c:a6:f5: b8:c6:fd:41:4c:a6:37:26:39:c6:c1:1c:38:9c:c9: 20:24:a8:66:35:d3:e0:5f:3a:65:2c:8b:2d:75:6d: 50:01:fb:99:d6:3e:b5:f8:de:e6:82:59:6d:4e:b6: d2:00:dd:e8:05:47:92:3a:9f:ad:14:1d:88:f8:1a: e7:6d:c3:da:00:1e:b4:23:a7:bb:a3:1f:b5:f8:c4: 19:2a:b3:a6:30:cd:09:08:cb:38:0c:40:01:bc:02: 48:b1:9f:b0:fb:5e:41:f2:a0:09:d7:e4:74:b1:6f: ee:ab:85:37:e3:38:65:92:9f:3c:1a:b1:fa:28:3f: 49:d1:db:71:74:f5:72:aa:5c:d1:6d:f9:3c:8c:30: 56:ca:5e:ad:8b:19:1e:4d:d2:13:49:9b:6a:79:9a: 60:cc:8d:a4:fb:24:38:9b:b7:b3:67:03:0e:7f:b9: c5:0e:44:45:e1:7d:b8:c8:0a:2b:77:a5:d3:13:0c: 59:6f:60:6d:51:de:86:34:47:38:c8:b7:a0:45:cc: 31:88:02:ca:c8:bc:1d:36:41:0b:f7:b6:1d:73:10: 81:aa:cd:fa:76:da:b4:45:a7:29:2b:a2:0d:4e:6e: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:10:B3:28:91:BD:23:43:E3:0B:20:9D:29:0E:D7:DA:33:ED:4E:59 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:a0:ab:d4:06:e5:66:fc:68:d4:99:e6:21:73:5c:10:8d: 60:b0:09:9f:9e:6b:73:01:c5:11:20:ac:31:da:01:cd:0d:15: ab:19:23:e3:2d:f5:f5:04:55:38:66:2e:c3:aa:e0:cb:a7:33: 79:31:5f:cb:ea:17:8d:17:e2:d1:f6:8f:9c:86:45:89:2b:a8: c4:c0:43:67:66:c9:e2:d6:1b:1c:23:d6:e0:06:bf:d3:82:4b: f3:94:58:ee:bd:bd:f9:65:14:f6:34:c4:b7:de:e5:fa:38:b3: 8d:bc:d4:43:b7:e9:96:25:7d:a2:84:5e:dc:73:a6:49:fd:3c: 44:3c:05:8c:48:d8:d2:34:3f:78:29:30:f2:70:d8:75:79:b4: 5b:3c:a9:35:c1:d7:d6:dc:b9:c6:b8:e9:49:65:eb:fa:00:4a: 4a:f1:e8:13:3d:d3:8c:1a:d9:04:e0:b8:73:1c:fc:1f:7a:07: 32:60:3f:8c:4c:f2:ed:e9:2e:f7:be:3b:d2:c1:07:ca:71:db: 3c:76:00:c4:17:34:fb:5a:42:1b:d3:f9:71:3c:28:0d:3f:e3: b6:a5:ed:75:e3:f7:00:66:f0:a1:42:08:05:c0:1a:c6:70:ad: 4e:55:fd:55:19:30:42:a3:1f:ea:bd:58:af:52:02:a7:14:8d: 59:d8:52:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjUwNDE3MDQzNjA1WhcNMjUwNDI0MDQzNjA1WjAYMRYwFAYD VQQDEw02ODAwODUzNi1jNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KJ8Qhh6AlCiKKmL2oRmunzjJc800YhH/XhspvW4xv1BTKY3JjnGwRw4nMkg JKhmNdPgXzplLIstdW1QAfuZ1j61+N7mglltTrbSAN3oBUeSOp+tFB2I+BrnbcPa AB60I6e7ox+1+MQZKrOmMM0JCMs4DEABvAJIsZ+w+15B8qAJ1+R0sW/uq4U34zhl kp88GrH6KD9J0dtxdPVyqlzRbfk8jDBWyl6tixkeTdITSZtqeZpgzI2k+yQ4m7ez ZwMOf7nFDkRF4X24yAord6XTEwxZb2BtUd6GNEc4yLegRcwxiALKyLwdNkEL97Yd cxCBqs36dtq0RacpK6INTm4phwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgQsyiR vSND4wsgnSkO19oz7U5ZMB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiqCr1AblZvxo1JnmIXNcEI1gsAmfnmtzAcURIKwx2gHNDRWrGSPj LfX1BFU4Zi7DquDLpzN5MV/L6heNF+LR9o+chkWJK6jEwENnZsni1hscI9bgBr/T gkvzlFjuvb35ZRT2NMS33uX6OLONvNRDt+mWJX2ihF7cc6ZJ/TxEPAWMSNjSND94 KTDycNh1ebRbPKk1wdfW3LnGuOlJZev6AEpK8egTPdOMGtkE4LhzHPwfegcyYD+M TPLt6S73vjvSwQfKcds8dgDEFzT7WkIb0/lxPCgNP+O2pe114/cAZvChQggFwBrG cK1OVf1VGTBCox/qvVivUgKnFI1Z2FI7 -----END CERTIFICATE-----Generated at Sat Apr 19 05:29:12 2025 by rpki-client