$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: 9jJ83tqMdgrnbxabX6ceM0DRIFg8gx2k5Q20R4AWNwY= Subject key identifier: E5:83:19:C2:C7:FB:DE:C0:C5:DB:15:44:1B:49:F8:1C:3C:0A:3E:46 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0C21 Signing time: Sun 06 Apr 2025 18:23:40 +0000 Manifest this update: Sun 06 Apr 2025 18:23:40 +0000 Manifest next update: Sun 13 Apr 2025 18:23:40 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: 5ZfrWBUIyacCavvnc4Bg7tdQPpb/ryxy508HLIPmf7w=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE Validity Not Before: Apr 6 18:23:40 2025 GMT Not After : Apr 13 18:23:40 2025 GMT Subject: CN=67f2c6ac-b7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:1b:a7:6a:d0:50:c9:33:e6:76:4b:a5:11: ec:ed:2a:be:de:31:3c:85:e9:73:47:f6:cb:91:a3: 9b:03:57:97:e8:40:f7:73:f3:8b:a5:3d:19:ce:07: 8e:8a:48:2f:ff:0a:67:a6:09:b8:09:db:be:f0:1b: db:e7:bb:53:32:b7:36:95:fc:f5:23:b9:e2:7e:45: 38:6b:e6:44:93:22:ad:68:ea:56:36:21:f0:59:0f: 6d:c4:a9:ad:f3:fb:ff:8b:3e:9b:8f:e0:2b:36:7c: 6f:1a:0e:bf:51:8b:3d:a5:1a:b4:22:d1:ac:5c:8d: 9f:b0:6d:44:2c:f2:81:bd:91:aa:9b:7a:40:98:2c: 1f:4b:f2:cb:47:e1:b3:ce:65:96:4c:17:8d:cc:be: e6:27:2b:53:a0:33:c3:4d:2b:77:70:f6:7b:ec:f0: a4:02:e2:65:10:31:48:5c:41:26:c2:1e:4a:6c:df: c8:e3:b5:4f:c1:a7:12:7e:b5:8c:82:30:08:0e:38: 4b:d1:77:cc:0f:e4:1d:eb:54:b0:99:c4:64:8c:75: 19:cf:8d:c3:69:fa:86:c9:64:7b:74:21:91:37:6b: c1:8e:fe:cf:e5:e9:96:f2:1a:d2:10:dd:c1:ba:3d: 37:00:5b:ed:33:7e:1a:2c:eb:6c:ca:08:43:88:8a: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:19:C2:C7:FB:DE:C0:C5:DB:15:44:1B:49:F8:1C:3C:0A:3E:46 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:7d:b2:75:4a:5a:d1:45:e7:3b:9a:c9:87:77:ec:91:92: ea:93:50:4c:04:da:39:48:13:b7:d5:26:30:f1:89:9d:81:c1: 2c:3e:6d:f0:99:fe:38:fe:71:4b:55:e0:1e:c6:e7:2a:00:64: 9c:5b:de:cb:81:fa:1d:68:c0:46:d2:d2:cd:35:02:27:65:65: ed:9a:ec:bb:b8:7d:3b:58:08:83:92:28:c4:11:1d:1a:70:e0: a3:b1:00:79:4b:33:34:2c:04:e8:a1:2d:df:49:0f:f6:7c:14: cc:79:83:61:ed:c0:7b:ec:aa:64:59:eb:16:f4:67:00:47:06: 9a:77:af:42:cf:04:c1:45:b3:97:40:98:53:ca:b1:1f:9d:74: 42:c4:3a:ed:65:3b:2c:5d:38:f0:d6:cb:92:fb:74:f8:a1:20: 5b:43:15:23:6e:a0:e0:9f:14:f4:da:cd:00:48:59:a3:06:ae: f5:f1:d3:61:f8:83:1b:35:53:b4:a8:b3:e9:c2:d0:3d:17:03: 05:14:81:7a:de:e1:df:20:4b:74:2f:9e:1f:a4:d2:81:ba:0f: ec:ef:1c:18:e4:79:8b:7c:fe:53:c1:54:8b:aa:55:72:72:ee: 39:12:2e:0e:f1:85:5a:a7:db:e6:72:64:4d:be:a7:8a:07:7e: 3a:29:5d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUwNDA2MTgyMzQwWhcNMjUwNDEzMTgyMzQwWjAYMRYwFAYD VQQDEw02N2YyYzZhYy1iN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrUbp2rQUMkz5nZLpRHs7Sq+3jE8helzR/bLkaObA1eX6ED3c/OLpT0ZzgeO ikgv/wpnpgm4Cdu+8Bvb57tTMrc2lfz1I7nifkU4a+ZEkyKtaOpWNiHwWQ9txKmt 8/v/iz6bj+ArNnxvGg6/UYs9pRq0ItGsXI2fsG1ELPKBvZGqm3pAmCwfS/LLR+Gz zmWWTBeNzL7mJytToDPDTSt3cPZ77PCkAuJlEDFIXEEmwh5KbN/I47VPwacSfrWM gjAIDjhL0XfMD+Qd61SwmcRkjHUZz43DafqGyWR7dCGRN2vBjv7P5emW8hrSEN3B uj03AFvtM34aLOtsyghDiIpSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWDGcLH +97AxdsVRBtJ+Bw8Cj5GMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqcX2ydUpa0UXnO5rJh3fskZLqk1BMBNo5SBO31SYw8YmdgcEsPm3w mf44/nFLVeAexucqAGScW97LgfodaMBG0tLNNQInZWXtmuy7uH07WAiDkijEER0a cOCjsQB5SzM0LATooS3fSQ/2fBTMeYNh7cB77KpkWesW9GcARwaad69CzwTBRbOX QJhTyrEfnXRCxDrtZTssXTjw1suS+3T4oSBbQxUjbqDgnxT02s0ASFmjBq718dNh +IMbNVO0qLPpwtA9FwMFFIF63uHfIEt0L54fpNKBug/s7xwY5HmLfP5TwVSLqlVy cu45Ei4O8YVap9vmcmRNvqeKB346KV2J -----END CERTIFICATE-----Generated at Mon Apr 7 00:45:00 2025 by rpki-client