$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: VRx71dEQPmzw/mACb1YVsSykkVV5Z8XqH8O7Av81Zwo= Subject key identifier: E4:0B:13:02:F7:39:55:C6:00:ED:2D:8C:5B:05:98:52:62:A7:4A:D5 Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 0459 Signing time: Thu 03 Apr 2025 00:11:18 +0000 Manifest this update: Thu 03 Apr 2025 00:11:18 +0000 Manifest next update: Thu 10 Apr 2025 00:11:18 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: qlkBCZ+Qx2UNcH3RaPMp2lmBNnmSLYXt5gNBSFUFwzY=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B Validity Not Before: Apr 3 00:11:18 2025 GMT Not After : Apr 10 00:11:18 2025 GMT Subject: CN=67edd226-7869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:a6:2e:1d:34:d6:01:05:4f:63:72:1d:11: fb:ae:c4:6c:e3:d7:64:2f:9d:7c:a2:20:ff:a3:40: 50:8f:79:74:58:bf:e8:20:4d:1c:77:35:8c:e5:1e: 6e:c7:4d:1e:bc:b5:86:45:eb:bb:79:80:b8:ff:4e: 83:1a:8c:5d:66:b0:29:f2:d7:47:86:7e:df:dd:26: 27:0d:88:81:43:d1:8a:88:fe:38:b1:3b:a4:8d:de: 02:b7:4b:e0:b2:07:6a:ac:f0:32:fa:88:6e:d0:85: 38:34:66:82:0b:b7:4b:9e:b3:1e:df:9b:2a:ba:a8: a8:c7:a3:e4:35:91:8e:38:d8:76:eb:ac:e8:b1:37: 81:50:9a:8f:0b:dd:91:12:3b:38:10:0b:d4:2a:0a: fe:11:36:a7:56:29:f6:7d:02:ae:ee:4c:0a:10:ee: f9:32:64:ad:67:df:09:ba:48:2d:e2:de:f7:65:6c: 0b:e6:9a:02:27:e3:d4:d6:45:80:dd:ef:8c:f7:56: 6b:af:d1:44:a2:64:69:49:b0:6a:e9:30:83:55:b1: 81:1b:ba:4b:b3:2e:1d:b4:a3:bf:02:12:0f:43:fa: 84:b7:3c:3c:6e:8d:e2:55:b9:fe:19:b2:68:20:d4: 39:02:20:c9:87:c9:b1:08:08:56:d8:4c:57:17:f0: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:13:02:F7:39:55:C6:00:ED:2D:8C:5B:05:98:52:62:A7:4A:D5 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b5:6d:e6:31:37:23:67:50:e2:dd:f3:da:86:8a:86:d3:cb: bb:4b:5f:86:68:05:0d:82:d5:f6:58:fe:ea:b0:d4:b8:40:d2: 00:ff:2f:14:2f:b1:7d:21:79:90:27:ef:17:e3:c3:b5:ab:b8: 61:2a:bb:82:87:99:7a:d4:80:20:79:83:ee:26:5e:f7:71:fe: 36:8f:08:ae:68:65:f2:56:e8:72:0e:80:7b:fb:d3:06:4f:b0: 32:d9:be:65:9f:e4:33:e3:b0:a3:89:61:a3:da:58:51:d8:17: da:b5:22:71:68:f8:2c:eb:2e:61:e2:01:43:02:9f:9d:ee:18: 2a:bc:5f:b3:f1:2e:f1:f8:76:09:26:22:53:c6:ce:59:1a:32: 77:be:a2:dc:6f:6c:11:27:a0:14:19:72:2e:9b:01:f3:78:d4: 67:c6:5f:ce:d8:54:f4:48:a9:40:e3:2f:ce:3a:18:58:28:13: 27:f6:37:43:72:fe:c0:3a:46:eb:4a:e9:24:0a:23:8d:4b:fc: 28:56:1b:9e:da:55:54:77:3f:76:dd:d8:4a:68:3b:1c:27:35: 40:8f:64:92:79:45:88:8f:bd:0a:7c:2e:b8:60:7f:25:b2:85: 6c:a1:81:8d:65:f4:9f:09:e3:87:a1:2e:e4:92:60:31:a8:3a: ec:c5:6e:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUwNDAzMDAxMTE4WhcNMjUwNDEwMDAxMTE4WjAYMRYwFAYD VQQDEw02N2VkZDIyNi03ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEKmLh001gEFT2NyHRH7rsRs49dkL518oiD/o0BQj3l0WL/oIE0cdzWM5R5u x00evLWGReu7eYC4/06DGoxdZrAp8tdHhn7f3SYnDYiBQ9GKiP44sTukjd4Ct0vg sgdqrPAy+ohu0IU4NGaCC7dLnrMe35squqiox6PkNZGOONh266zosTeBUJqPC92R Ejs4EAvUKgr+ETanVin2fQKu7kwKEO75MmStZ98Jukgt4t73ZWwL5poCJ+PU1kWA 3e+M91Zrr9FEomRpSbBq6TCDVbGBG7pLsy4dtKO/AhIPQ/qEtzw8bo3iVbn+GbJo INQ5AiDJh8mxCAhW2ExXF/CXOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQLEwL3 OVXGAO0tjFsFmFJip0rVMB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntW3mMTcjZ1Di3fPahoqG08u7S1+GaAUNgtX2WP7qsNS4QNIA/y8U L7F9IXmQJ+8X48O1q7hhKruCh5l61IAgeYPuJl73cf42jwiuaGXyVuhyDoB7+9MG T7Ay2b5ln+Qz47CjiWGj2lhR2BfatSJxaPgs6y5h4gFDAp+d7hgqvF+z8S7x+HYJ JiJTxs5ZGjJ3vqLcb2wRJ6AUGXIumwHzeNRnxl/O2FT0SKlA4y/OOhhYKBMn9jdD cv7AOkbrSukkCiONS/woVhue2lVUdz923dhKaDscJzVAj2SSeUWIj70KfC64YH8l soVsoYGNZfSfCeOHoS7kkmAxqDrsxW77 -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:45 2025 by rpki-client