$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft File: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft (raw, json) Hash identifier: gDvVXOE6lpChDAH9mCqs29J/hwpP1MjGS5RWBv3XFy4= Subject key identifier: DF:04:F9:B7:43:D1:8C:55:A5:B3:28:C4:1C:BC:A9:BE:D5:99:BF:F9 Authority key identifier: 0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE Certificate issuer: /CN=A91FB179/serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft Manifest number: 068E Signing time: Tue 08 Apr 2025 22:00:36 +0000 Manifest this update: Tue 08 Apr 2025 22:00:35 +0000 Manifest next update: Tue 15 Apr 2025 22:00:35 +0000 Files and hashes: 1: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl (hash: 1aylHTlea+A7ebrxJ86h6atSqedSNHHimk79OE+vVgI=) 2: 6C4046C665EE11EB9ADB5F40C4F9AE02.roa (hash: 2Mo86XnCI5KeTWF6zAmVrthl3kfcd93BXOE5Y90BE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB179 Validity Not Before: Apr 8 22:00:35 2025 GMT Not After : Apr 15 22:00:35 2025 GMT Subject: CN=67f59c84-4900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:d5:84:9e:39:67:9d:ff:6d:8a:0e:c6:85: 7b:14:d5:0a:3d:41:a5:a9:de:28:24:8d:c2:9f:62: ad:8b:a9:b9:2c:8b:2f:9f:a0:8a:f5:23:a7:8a:37: 18:6d:67:11:4e:2c:4a:b2:c1:36:c5:a5:1a:aa:54: 76:8f:51:55:9d:26:47:57:99:20:b8:d2:4f:fa:0b: c3:ce:49:5d:db:af:53:4a:bd:c0:2a:28:ce:f5:6c: 19:17:11:2a:31:28:0e:b0:14:5d:6d:fc:df:59:28: 36:3b:e2:e1:8b:c2:91:75:13:5a:e1:c7:32:fc:2b: f9:f5:d8:15:02:d7:c1:dd:7f:8a:0c:78:0d:3c:e5: f4:f3:90:b6:39:74:38:fe:2f:6c:6a:38:9d:0a:43: 28:be:fd:7f:60:da:8e:bb:ad:8d:6b:c1:64:a1:64: 3a:80:8f:00:38:d6:0b:7f:2e:eb:68:8d:d7:44:72: cd:51:31:e2:76:16:b3:27:5c:2e:1c:32:18:47:80: 8f:ec:06:73:d1:77:48:51:fe:69:eb:38:a5:69:30: 33:62:c6:11:07:f6:08:c4:fc:54:07:cf:8d:a9:86: 22:2c:b6:b3:be:77:06:bd:56:0e:c5:d8:f8:bd:64: a3:6f:1c:e5:10:c2:e4:74:80:dd:30:f7:83:49:dc: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:F9:B7:43:D1:8C:55:A5:B3:28:C4:1C:BC:A9:BE:D5:99:BF:F9 X509v3 Authority Key Identifier: keyid:0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:da:ed:1e:b7:df:6f:57:55:a9:81:e4:34:dd:63:fa:54:16: 80:78:8f:53:99:92:ee:76:99:3e:57:0a:05:ec:68:fc:b5:3e: 53:d2:f6:2a:c2:74:01:14:e8:b6:fd:c5:0c:05:5b:f6:39:f4: 91:8a:a1:b1:2a:61:31:ed:fe:b6:b0:5c:05:7b:5a:b6:19:a8: 58:10:c5:fe:b8:66:c4:09:59:94:df:f0:0e:04:4c:b4:c3:9a: 42:c1:0e:19:3b:ff:0b:0b:b1:70:75:d3:df:26:a1:bc:42:ef: cf:1d:80:87:1e:a3:5f:62:4c:15:60:70:e5:9d:4e:c6:c7:06: ee:12:29:9e:95:20:2b:ef:5f:53:2e:b9:54:db:2a:3c:ec:38: 53:d5:76:2a:0c:40:c2:59:fc:7c:be:f2:e8:ce:66:f7:2c:db: 3b:4e:af:44:d7:55:b6:5e:03:38:0b:3d:e1:97:4c:41:13:a8: 06:f9:88:d2:ed:f5:0d:9b:4b:04:dd:c3:de:39:a3:ef:a6:b7: c9:7f:0d:66:4c:b2:75:7c:0c:c0:fe:e0:09:ea:eb:a0:61:07: f6:4f:f4:90:50:f7:ab:8a:08:48:5d:62:5e:d1:b0:70:bc:5d: 8b:13:48:ca:19:87:58:e8:d1:41:61:c5:11:42:9a:d7:54:6f: aa:5d:01:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxNzkxMTAvBgNVBAUTKDBFM0QxRTIzQTc2NEU2MjIzQjc3N0MxNzFFNEZERTEy M0M2NTdFRkUwHhcNMjUwNDA4MjIwMDM1WhcNMjUwNDE1MjIwMDM1WjAYMRYwFAYD VQQDEw02N2Y1OWM4NC00OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlM3VhJ45Z53/bYoOxoV7FNUKPUGlqd4oJI3Cn2Kti6m5LIsvn6CK9SOnijcY bWcRTixKssE2xaUaqlR2j1FVnSZHV5kguNJP+gvDzkld269TSr3AKijO9WwZFxEq MSgOsBRdbfzfWSg2O+Lhi8KRdRNa4ccy/Cv59dgVAtfB3X+KDHgNPOX085C2OXQ4 /i9sajidCkMovv1/YNqOu62Na8FkoWQ6gI8AONYLfy7raI3XRHLNUTHidhazJ1wu HDIYR4CP7AZz0XdIUf5p6zilaTAzYsYRB/YIxPxUB8+NqYYiLLazvncGvVYOxdj4 vWSjbxzlEMLkdIDdMPeDSdw7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8E+bdD 0YxVpbMoxBy8qb7Vmb/5MB8GA1UdIwQYMBaAFA49HiOnZOYiO3d8Fx5P3hI8ZX7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjE3OS8yQ0NDQUI5ODY1 RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVpSTdkM3dYSGtfZUVqeGxm djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqMGVJNmRrNWlJN2Qzd1hIa19lRWp4bGZ2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjE3OS8yQ0NDQUI5ODY1RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVp STdkM3dYSGtfZUVqeGxmdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ2u0et99vV1WpgeQ03WP6VBaAeI9TmZLudpk+VwoF7Gj8tT5T0vYq wnQBFOi2/cUMBVv2OfSRiqGxKmEx7f62sFwFe1q2GahYEMX+uGbECVmU3/AOBEy0 w5pCwQ4ZO/8LC7FwddPfJqG8Qu/PHYCHHqNfYkwVYHDlnU7GxwbuEimelSAr719T LrlU2yo87DhT1XYqDEDCWfx8vvLozmb3LNs7Tq9E11W2XgM4Cz3hl0xBE6gG+YjS 7fUNm0sE3cPeOaPvprfJfw1mTLJ1fAzA/uAJ6uugYQf2T/SQUPerighIXWJe0bBw vF2LE0jKGYdY6NFBYcURQprXVG+qXQEw -----END CERTIFICATE-----Generated at Wed Apr 9 10:22:16 2025 by rpki-client