$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: Df/emmd/P7giFwjULDL2dHnMQ9RXXvi8kE7Z6uedNaA= Subject key identifier: A1:D4:4C:3D:0A:D4:1A:24:50:70:F8:89:CF:44:EB:72:FD:2C:E8:78 Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 05D5 Signing time: Fri 28 Mar 2025 23:19:05 +0000 Manifest this update: Fri 28 Mar 2025 23:19:05 +0000 Manifest next update: Fri 04 Apr 2025 23:19:05 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: OsDXmD5MCgRnp1xBNTcnMnf6qDlc+4rb8/Wq2duoSlE=) 2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: MNI4tMTnWERKtqUoO+1DtINRz6vPCPMkYFmwGLJDwJM=) 3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: DLHOhN7MxK0HNTrL76H062J5sW6+LyM3CKGkbsKyA38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176 Validity Not Before: Mar 28 23:19:05 2025 GMT Not After : Apr 4 23:19:05 2025 GMT Subject: CN=67e72e69-8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:b6:a8:8a:93:99:b0:2a:7a:54:b1:91:ae: a5:c1:59:49:ae:de:10:c5:a6:62:9b:bd:49:f9:66: 01:82:90:0b:4d:01:85:56:2a:61:b9:ce:3f:66:c5: 89:87:b1:d2:a8:1d:29:ca:dc:f8:76:f0:af:9b:5a: 6b:2c:96:e9:01:7a:3d:f7:a2:18:f5:36:67:da:0d: cf:96:1c:f1:6c:d7:06:e9:02:80:e1:80:38:69:3d: 2c:06:7e:61:fd:ea:14:88:e0:2e:e6:7a:05:5b:be: 4b:c2:9d:6a:79:30:f2:2c:40:67:f4:28:b8:ea:2e: bd:49:86:6f:39:8e:28:ec:f0:53:01:2c:3a:6e:e7: 89:8d:7f:22:d6:de:9f:d4:6f:50:8b:52:19:ab:4d: 02:f2:43:50:6a:2b:08:f6:ec:15:b3:c3:8a:29:6e: c3:86:02:11:c0:d3:ab:7f:90:97:72:10:7a:a2:5c: b2:78:28:04:f3:52:63:29:69:39:51:f9:bb:dd:e4: 99:e0:14:49:b3:16:36:90:43:c7:92:0d:71:cf:77: 61:d1:c0:d9:e2:16:d3:1e:f3:84:32:84:d2:fc:c1: af:80:11:00:98:03:21:8a:00:63:97:c0:c4:6b:e5: 53:24:50:55:41:89:35:65:03:86:69:c4:99:f9:b0: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:4C:3D:0A:D4:1A:24:50:70:F8:89:CF:44:EB:72:FD:2C:E8:78 X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e7:05:66:fe:28:e4:33:7d:72:ad:89:40:f1:46:4f:a1:f5: ff:4e:0e:51:4f:77:83:9c:a4:b2:cb:40:c8:37:7f:a1:0b:9d: 2b:2d:ac:e8:d7:f2:73:b2:fa:14:2d:50:51:7d:9f:39:bf:ff: 1b:50:5a:81:9b:ec:a7:a5:a4:44:ec:19:a7:4e:74:5a:17:0f: 2a:47:18:8f:85:41:e4:a5:cc:bb:ce:e2:4e:a6:dd:7c:84:94: 61:d8:e0:74:b9:1d:87:77:5f:37:d0:1d:94:c5:0e:ac:c1:c8: f0:9c:a6:4b:9e:17:f2:0f:e8:af:16:c0:9c:da:45:d6:3f:45: 68:41:f4:3a:29:13:8b:23:72:a2:65:9b:38:0f:fc:94:0b:1e: 7b:61:eb:66:c8:e2:ca:81:b3:33:0e:0d:40:e3:ba:a3:b9:f6: 69:25:04:ec:fb:77:cd:3a:4a:bc:b5:25:23:ba:76:5d:2f:52: 7d:f4:c5:be:92:fe:2b:95:5b:3e:0d:89:aa:83:44:44:b7:28: ef:14:51:d9:8c:2c:00:12:ce:c7:96:d5:14:cc:92:57:8b:ad: de:1e:9c:d0:74:c3:79:5c:56:2c:6d:4f:43:97:7c:db:82:51: 7d:aa:16:f6:43:05:3e:3f:4b:26:59:1c:23:71:c1:4f:f0:8f: a1:45:0c:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjUwMzI4MjMxOTA1WhcNMjUwNDA0MjMxOTA1WjAYMRYwFAYD VQQDEw02N2U3MmU2OS04ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1i2qIqTmbAqelSxka6lwVlJrt4QxaZim71J+WYBgpALTQGFViphuc4/ZsWJ h7HSqB0pytz4dvCvm1prLJbpAXo996IY9TZn2g3PlhzxbNcG6QKA4YA4aT0sBn5h /eoUiOAu5noFW75Lwp1qeTDyLEBn9Ci46i69SYZvOY4o7PBTASw6bueJjX8i1t6f 1G9Qi1IZq00C8kNQaisI9uwVs8OKKW7DhgIRwNOrf5CXchB6olyyeCgE81JjKWk5 Ufm73eSZ4BRJsxY2kEPHkg1xz3dh0cDZ4hbTHvOEMoTS/MGvgBEAmAMhigBjl8DE a+VTJFBVQYk1ZQOGacSZ+bBS0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHUTD0K 1BokUHD4ic9E63L9LOh4MB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB25wVm/ijkM31yrYlA8UZPofX/Tg5RT3eDnKSyy0DIN3+hC50rLazo 1/JzsvoULVBRfZ85v/8bUFqBm+ynpaRE7BmnTnRaFw8qRxiPhUHkpcy7zuJOpt18 hJRh2OB0uR2Hd1830B2UxQ6swcjwnKZLnhfyD+ivFsCc2kXWP0VoQfQ6KROLI3Ki ZZs4D/yUCx57YetmyOLKgbMzDg1A47qjufZpJQTs+3fNOkq8tSUjunZdL1J99MW+ kv4rlVs+DYmqg0REtyjvFFHZjCwAEs7HltUUzJJXi63eHpzQdMN5XFYsbU9Dl3zb glF9qhb2QwU+P0smWRwjccFP8I+hRQzB -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client