$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: JsKretlVwAEi0gl2dSIC3xHkMtCabX8xLJXUVKBpp8M= Subject key identifier: 09:99:97:54:23:D6:A3:D9:ED:70:F0:33:D3:65:DF:CA:87:6C:C6:73 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 03C8 Signing time: Thu 03 Apr 2025 00:37:22 +0000 Manifest this update: Thu 03 Apr 2025 00:37:21 +0000 Manifest next update: Thu 10 Apr 2025 00:37:21 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: owSycKNYGRS3N/KoRGzYgFS9GlwfSYE3u8bvESZXSOI=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: 8BQNN/QNIWAJlkiQOUN0UFHd3tX4uQeluOnMm/rMf64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5 Validity Not Before: Apr 3 00:37:21 2025 GMT Not After : Apr 10 00:37:21 2025 GMT Subject: CN=67edd841-9fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:f1:3d:03:1e:83:6f:77:9e:4f:36:c9:aa: 3f:1c:e9:e3:5f:8f:db:7d:4d:e8:d6:20:d6:11:06: 5b:7b:37:37:df:49:3a:77:1f:d5:4d:b2:45:c5:fb: 8f:e9:4b:93:db:72:04:98:33:9e:5b:fc:f5:d8:91: 61:df:01:bc:db:d1:a2:98:67:7c:6e:bf:2f:ef:95: 14:94:f5:7b:df:20:db:b8:df:41:fe:6f:39:a5:2f: 57:f3:0a:2c:0d:b8:91:01:b4:a1:69:02:d1:6d:20: 85:e4:40:36:a7:df:69:a4:43:9f:44:ab:39:fe:9c: 60:1f:ec:95:42:7a:76:31:2e:08:0d:e4:52:48:16: 3b:24:d9:6f:01:b0:b4:1b:a1:7e:22:3d:36:92:45: fd:68:77:56:3e:34:65:db:93:bf:41:7e:5d:fb:f9: 96:48:b6:60:db:4c:6f:c0:6b:ad:94:98:32:ff:b6: 75:a3:c2:b1:2f:b5:34:17:d9:74:b2:29:f2:db:01: bc:ef:be:95:16:d3:69:76:26:22:09:a3:df:71:70: ef:72:c9:06:0e:43:99:c2:14:66:02:ee:ac:c0:83: 7e:61:4f:1e:c7:14:e2:5e:37:f3:fa:a2:9d:83:9e: be:1e:ec:71:11:27:7c:53:d0:be:1b:61:e7:e9:bd: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:99:97:54:23:D6:A3:D9:ED:70:F0:33:D3:65:DF:CA:87:6C:C6:73 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d9:ff:1e:54:6b:d1:9a:92:de:ae:62:85:63:b2:a7:03:75: 67:65:8d:ba:81:a4:ea:68:86:bc:bb:87:f6:2d:83:45:8b:84: 84:ab:f1:4d:99:2e:3f:1c:c6:4c:0a:0a:c0:0a:4b:62:a9:d0: 1f:f7:f6:e6:28:0d:5e:18:cb:39:26:3b:15:49:0a:43:23:22: ca:e2:3d:fd:76:c5:a0:96:a3:39:22:4b:1e:5b:2a:5c:be:6e: 78:ee:3b:5f:e5:1f:be:75:82:0a:62:8b:77:6f:a4:15:fb:b9: 79:54:6b:a4:7f:e5:cf:c9:64:ed:6f:9c:a1:71:44:c9:d1:30: 1f:6a:5e:ba:99:bd:29:9a:7f:fb:16:84:49:a5:59:f3:ba:e1: 10:b5:0a:8c:6a:f5:65:e9:7a:13:2a:b4:ab:56:93:45:80:98: be:77:64:14:93:ed:bb:41:c6:21:ac:d5:fd:79:c5:d3:98:74: 31:d7:0e:44:41:65:82:80:0e:5e:85:7f:8b:84:2a:0a:bd:8d: 7a:e3:c7:ed:6c:e8:ba:6c:a1:88:a5:da:7e:1c:c6:13:4b:45: 3c:17:4a:0f:4b:c1:dc:0d:9c:ba:3c:f2:38:28:a1:37:fb:d0: 49:25:49:04:53:5f:05:cd:c5:09:17:45:2a:e6:80:17:91:c6: 41:4b:18:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUwNDAzMDAzNzIxWhcNMjUwNDEwMDAzNzIxWjAYMRYwFAYD VQQDEw02N2VkZDg0MS05ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtHxPQMeg293nk82yao/HOnjX4/bfU3o1iDWEQZbezc330k6dx/VTbJFxfuP 6UuT23IEmDOeW/z12JFh3wG829GimGd8br8v75UUlPV73yDbuN9B/m85pS9X8wos DbiRAbShaQLRbSCF5EA2p99ppEOfRKs5/pxgH+yVQnp2MS4IDeRSSBY7JNlvAbC0 G6F+Ij02kkX9aHdWPjRl25O/QX5d+/mWSLZg20xvwGutlJgy/7Z1o8KxL7U0F9l0 siny2wG8776VFtNpdiYiCaPfcXDvcskGDkOZwhRmAu6swIN+YU8exxTiXjfz+qKd g56+HuxxESd8U9C+G2Hn6b3MmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmZl1Qj 1qPZ7XDwM9Nl38qHbMZzMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2f8eVGvRmpLermKFY7KnA3VnZY26gaTqaIa8u4f2LYNFi4SEq/FN mS4/HMZMCgrACktiqdAf9/bmKA1eGMs5JjsVSQpDIyLK4j39dsWglqM5IkseWypc vm547jtf5R++dYIKYot3b6QV+7l5VGukf+XPyWTtb5yhcUTJ0TAfal66mb0pmn/7 FoRJpVnzuuEQtQqMavVl6XoTKrSrVpNFgJi+d2QUk+27QcYhrNX9ecXTmHQx1w5E QWWCgA5ehX+LhCoKvY1648ftbOi6bKGIpdp+HMYTS0U8F0oPS8HcDZy6PPI4KKE3 +9BJJUkEU18FzcUJF0Uq5oAXkcZBSxgq -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:47 2025 by rpki-client