$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: 2C6FRHTkH60xPwv8iHzty2Xv2QUqTXGbxtjTeIxKhmk= Subject key identifier: 77:C8:EC:84:5E:0F:FD:5D:BF:67:7B:4B:54:CD:5D:FA:27:CC:9A:78 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: D1 Signing time: Sat 31 May 2025 05:14:54 +0000 Manifest this update: Sat 31 May 2025 05:14:53 +0000 Manifest next update: Sat 07 Jun 2025 05:14:53 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: HVqvCOxisHIhmEfajO+WtnGhnUpIjrZK+tbBEg4kOR0=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: May 31 05:14:53 2025 GMT Not After : Jun 7 05:14:53 2025 GMT Subject: CN=683a904e-3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:62:cb:5d:74:36:9a:aa:06:d0:79:5c:ab: e4:28:49:71:96:3c:b8:47:7a:75:42:96:2c:0d:3d: da:ca:6d:43:03:e0:56:76:41:02:2f:19:0e:74:ad: e6:e3:4b:3c:2c:02:2e:33:d3:7d:ee:1b:95:8d:6c: 64:96:60:72:d6:d7:91:58:9f:71:f1:b9:66:53:8d: 6a:7c:cb:b1:dc:ba:e2:2b:05:82:fe:b0:32:5b:31: 69:44:ba:7b:c0:e1:e8:7f:a4:1f:a4:fa:31:1d:c5: 13:0f:28:9f:82:cc:39:65:e6:97:e8:d2:86:04:d5: c7:05:d1:ff:e4:d9:50:9f:2e:90:70:3d:2e:1d:e5: 84:23:f9:9b:05:eb:b0:92:95:c0:27:90:fb:72:dc: cc:48:53:5b:b3:6e:5f:51:79:9a:e9:47:39:72:72: ca:39:22:21:d8:84:95:7e:6b:fb:64:0f:d0:e3:25: da:b8:27:a0:ff:e6:29:df:04:32:ff:22:c7:7b:40: 7b:32:c5:d1:54:b3:bf:da:6c:c4:7f:b4:b1:b5:a8: f6:2b:f3:49:f7:15:8b:77:c2:b6:45:e9:65:01:67: 95:e3:2d:e5:0e:67:6a:52:8b:fb:99:0c:8b:6a:f2: 07:55:65:69:db:1a:22:24:57:fa:4f:37:79:15:07: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:EC:84:5E:0F:FD:5D:BF:67:7B:4B:54:CD:5D:FA:27:CC:9A:78 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fe:04:ca:de:f9:fb:d6:49:0d:28:fc:4d:bd:7d:8f:55:25: 39:6c:db:b4:ec:9b:f5:1f:5b:09:bc:a5:cd:02:72:fc:69:14: f0:f5:ee:b6:5d:9d:f8:c3:85:f7:d9:11:16:81:02:6c:e6:ce: 08:79:1b:69:2a:53:3a:fc:c7:40:67:a5:af:47:d3:8e:74:cc: f4:c4:a8:05:94:8b:24:55:c7:dd:3e:6a:d5:3f:41:2b:81:c1: f8:c6:56:2b:7b:68:93:77:e5:46:49:89:86:a9:ab:95:24:be: 1d:db:9a:0e:95:87:66:be:7b:03:93:09:33:94:32:20:e9:8c: 3f:aa:d1:c7:a4:b0:e4:33:d7:33:fb:d2:81:ef:5d:b4:c1:95: d6:8f:7b:fa:d1:df:83:2b:dd:a1:03:6e:44:b3:6d:71:dd:ce: 46:94:73:0a:46:1e:61:85:c3:0a:8a:17:a4:2e:d1:05:21:a9: 4b:0a:b5:81:3f:f1:0b:80:fc:c7:e5:f6:61:be:f1:92:f9:35: f5:d4:e8:60:b3:f9:d8:85:2e:ca:ce:b5:80:ae:5d:15:46:d2: 8b:b4:2d:8c:a8:5a:bb:b2:4f:9f:2e:c5:2d:dc:ce:49:23:fe: a4:a8:6b:7e:09:1e:a4:e8:41:d5:90:d6:bc:1f:c6:68:82:26: 8b:ff:ed:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNTMxMDUxNDUzWhcNMjUwNjA3MDUxNDUzWjAYMRYwFAYD VQQDEw02ODNhOTA0ZS0zY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AFiy110NpqqBtB5XKvkKElxljy4R3p1QpYsDT3aym1DA+BWdkECLxkOdK3m 40s8LAIuM9N97huVjWxklmBy1teRWJ9x8blmU41qfMux3LriKwWC/rAyWzFpRLp7 wOHof6QfpPoxHcUTDyifgsw5ZeaX6NKGBNXHBdH/5NlQny6QcD0uHeWEI/mbBeuw kpXAJ5D7ctzMSFNbs25fUXma6Uc5cnLKOSIh2ISVfmv7ZA/Q4yXauCeg/+Yp3wQy /yLHe0B7MsXRVLO/2mzEf7Sxtaj2K/NJ9xWLd8K2RellAWeV4y3lDmdqUov7mQyL avIHVWVp2xoiJFf6Tzd5FQfTowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfI7IRe D/1dv2d7S1TNXfonzJp4MB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/gTK3vn71kkNKPxNvX2PVSU5bNu07Jv1H1sJvKXNAnL8aRTw9e62 XZ34w4X32REWgQJs5s4IeRtpKlM6/MdAZ6WvR9OOdMz0xKgFlIskVcfdPmrVP0Er gcH4xlYre2iTd+VGSYmGqauVJL4d25oOlYdmvnsDkwkzlDIg6Yw/qtHHpLDkM9cz +9KB7120wZXWj3v60d+DK92hA25Es21x3c5GlHMKRh5hhcMKihekLtEFIalLCrWB P/ELgPzH5fZhvvGS+TX11Ohgs/nYhS7KzrWArl0VRtKLtC2MqFq7sk+fLsUt3M5J I/6kqGt+CR6k6EHVkNa8H8ZogiaL/+1x -----END CERTIFICATE-----Generated at Sat May 31 17:06:31 2025 by rpki-client