$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: F4/KTVDyAmaRbNnuShE5Pyb2SyHSus7GP555wtElwXg= Subject key identifier: 12:17:E6:AA:E1:3A:F6:B1:25:DB:9D:84:80:AF:E4:F4:7F:CF:7E:B3 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: CB Signing time: Thu 13 Mar 2025 03:54:24 +0000 Manifest this update: Thu 13 Mar 2025 03:54:23 +0000 Manifest next update: Thu 20 Mar 2025 03:54:23 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: ZsSU2JdEt0lXfvoRyuleGI15eI6KgYFfBETen5heVmY=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: UI9VDDNj5/gUUO3ewueElxsuAaYwPSQhrOvYuANf840=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: kxgR+t9G3Yoo6D6Yn73+0inhOBPdrEAQX82yP7J/c8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651 Validity Not Before: Mar 13 03:54:23 2025 GMT Not After : Mar 20 03:54:23 2025 GMT Subject: CN=67d256f0-6b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:88:f3:c6:a9:14:53:5d:6e:71:de:2a:3a: c4:30:5c:9e:d9:2e:6f:a0:14:05:f6:ac:62:b8:a8: d5:01:a0:34:c9:04:ca:76:99:f5:b3:84:98:b8:1d: b6:fc:26:77:b8:a0:f2:67:d1:7d:eb:d8:37:ed:4b: d1:24:5b:3a:02:c4:df:08:48:b3:5d:f5:95:87:7f: e2:bc:dc:1b:82:64:fa:b7:50:5a:c8:9c:a6:92:e3: 8d:18:7a:dd:84:43:37:91:7e:f0:a4:4b:9a:18:a6: b7:ae:19:93:a0:79:43:76:13:44:37:d8:9c:8f:68: de:ec:47:8d:a7:43:88:ba:cd:09:aa:80:ae:45:b8: e6:a0:e3:35:97:55:6a:02:31:bc:39:d9:50:03:71: 8c:70:33:67:72:05:19:c9:4b:84:27:93:72:18:6d: 77:f5:ec:8d:cb:c4:66:d2:b7:16:2e:7f:07:73:50: 6b:fc:2f:6c:3b:6b:c5:cd:de:0e:2b:8d:67:44:09: 6c:a0:4f:c9:21:94:a4:2a:5e:5f:91:4a:91:76:a8: 4f:1b:84:fd:55:97:d3:d6:84:4e:7d:2f:27:db:80: b5:84:5b:58:48:52:1e:95:df:79:f1:90:19:e4:f1: 72:5f:58:d9:c8:e5:43:2e:a9:0a:ca:80:89:58:6d: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:E6:AA:E1:3A:F6:B1:25:DB:9D:84:80:AF:E4:F4:7F:CF:7E:B3 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2b:ea:7c:af:9b:2b:d7:47:5e:b7:ce:75:d4:a2:b3:c6:70: 13:d0:6b:34:27:73:a1:a3:32:ac:1c:8a:9f:8c:2b:b9:69:ce: 25:00:9e:6b:65:f8:20:b1:34:83:da:1c:6a:e6:a1:d4:92:7b: fb:b1:33:18:21:9b:a1:75:76:c6:8c:36:a1:72:15:5c:13:25: f8:76:a2:6c:dd:5d:f6:4a:db:25:49:aa:c1:cf:14:82:45:3b: 7f:5c:c5:5e:87:91:e9:8d:30:b3:d9:3e:0b:02:c2:65:cc:41: 43:72:e4:4e:39:63:75:c6:d1:fa:94:d4:d8:f6:f0:c0:fc:6b: d2:c0:15:5c:8b:ff:4d:42:79:36:75:35:7e:9a:af:06:90:f3: 7f:b5:02:d1:0a:01:b0:86:97:be:5a:b7:87:05:55:a7:2e:f9: 08:a2:5a:d2:fa:05:22:8c:fc:be:1b:b1:6c:bb:b2:b6:b0:25: 47:02:6b:3d:e5:87:10:37:44:a3:ad:d0:45:f6:6c:6b:fe:4c: c3:f7:a6:3a:57:5a:8b:93:6c:0c:d6:af:7a:ed:9b:80:a7:33: f0:d8:38:d4:01:e1:a0:06:85:32:5d:29:c5:5a:e5:1e:38:e6: 73:6e:f0:64:5e:29:0e:52:85:e4:b4:c7:f0:53:19:65:7a:90: 5d:6a:78:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUwMzEzMDM1NDIzWhcNMjUwMzIwMDM1NDIzWjAYMRYwFAYD VQQDEw02N2QyNTZmMC02YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXiI88apFFNdbnHeKjrEMFye2S5voBQF9qxiuKjVAaA0yQTKdpn1s4SYuB22 /CZ3uKDyZ9F969g37UvRJFs6AsTfCEizXfWVh3/ivNwbgmT6t1BayJymkuONGHrd hEM3kX7wpEuaGKa3rhmToHlDdhNEN9icj2je7EeNp0OIus0JqoCuRbjmoOM1l1Vq AjG8OdlQA3GMcDNncgUZyUuEJ5NyGG139eyNy8Rm0rcWLn8Hc1Br/C9sO2vFzd4O K41nRAlsoE/JIZSkKl5fkUqRdqhPG4T9VZfT1oROfS8n24C1hFtYSFIeld958ZAZ 5PFyX1jZyOVDLqkKyoCJWG2/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIX5qrh OvaxJdudhICv5PR/z36zMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9K+p8r5sr10det8511KKzxnAT0Gs0J3OhozKsHIqfjCu5ac4lAJ5r ZfggsTSD2hxq5qHUknv7sTMYIZuhdXbGjDahchVcEyX4dqJs3V32StslSarBzxSC RTt/XMVeh5HpjTCz2T4LAsJlzEFDcuROOWN1xtH6lNTY9vDA/GvSwBVci/9NQnk2 dTV+mq8GkPN/tQLRCgGwhpe+WreHBVWnLvkIolrS+gUijPy+G7Fsu7K2sCVHAms9 5YcQN0SjrdBF9mxr/kzD96Y6V1qLk2wM1q967ZuApzPw2DjUAeGgBoUyXSnFWuUe OOZzbvBkXikOUoXktMfwUxllepBdanjt -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:54 2025 by rpki-client