$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: NpoudfsvpWX3fsKty1t9mLooLjfR6cb2K0dQV4xfuIk= Subject key identifier: 6F:4D:19:D0:8D:EE:D7:2C:8F:92:43:B2:D7:30:34:39:75:4F:C9:B8 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CBA Signing time: Wed 04 Jun 2025 18:09:39 +0000 Manifest this update: Wed 04 Jun 2025 18:09:38 +0000 Manifest next update: Wed 11 Jun 2025 18:09:38 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: 00Iz+17l8MhhiXvwoPiLW4RsfOyRLOyakqw0qw5RWZk=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: pjQH54VRYOq5PMku0jKMJ5PyMS22lF1mGoeoJ8lvLEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Jun 4 18:09:38 2025 GMT Not After : Jun 11 18:09:38 2025 GMT Subject: CN=68408be2-934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:18:07:38:9a:d7:98:36:21:d6:9f:35:4c: 67:6e:cc:2f:77:81:0c:2c:ce:74:af:3c:fe:d0:e1: bc:ae:70:d9:12:6f:a4:48:8d:98:a9:94:1b:8b:a8: b6:f4:f3:2b:7d:16:8b:e6:47:f8:9b:7a:3b:42:04: 47:70:26:e4:50:e3:49:b2:e0:3a:5a:e7:cb:99:b1: 63:09:8b:0c:f4:b5:30:99:49:0a:51:35:9f:c9:13: ab:40:38:11:39:8f:ea:55:df:ae:63:a9:db:fe:c6: 7f:48:01:0b:5c:77:1c:61:a7:e6:d5:61:03:c7:58: 3c:19:11:39:76:cc:ce:1f:69:c0:32:a1:8b:27:e2: a9:f4:00:82:50:90:aa:35:c0:e8:67:27:50:ce:14: 36:d3:c7:19:0c:a8:46:05:19:59:3c:f6:5a:96:99: 4e:f3:d1:e5:45:e8:58:79:6f:98:a4:4c:c5:be:ba: 3d:e9:54:0f:d6:e3:c1:1e:c6:76:7e:cf:9c:af:9a: 1d:3e:1d:31:5c:9e:92:a7:3d:85:2b:9f:98:1b:da: 42:fb:58:37:f3:40:cf:a5:ff:b7:84:f0:64:20:73: 99:a2:81:e5:62:12:ab:16:0e:20:1d:20:c7:46:50: 57:a4:26:2a:81:78:65:2b:83:9c:8b:4d:db:1e:54: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4D:19:D0:8D:EE:D7:2C:8F:92:43:B2:D7:30:34:39:75:4F:C9:B8 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ae:0b:6d:29:52:bd:94:80:00:77:9d:70:67:04:b7:0f:63: 55:7a:6d:f0:d4:03:34:e8:b2:f5:be:a5:62:8d:6f:2c:1b:5c: b1:b4:c7:7d:77:ee:4d:6c:17:ad:ce:75:0d:0a:f8:aa:ac:4f: 56:3e:50:ba:ee:78:92:29:b9:ba:bc:c0:a3:3e:86:53:4f:59: b8:26:f2:17:30:80:93:13:0e:de:70:3e:11:c1:44:38:59:08: 03:c0:cf:50:b4:f6:0b:db:e0:25:34:1f:31:bb:15:90:3a:33: 15:18:01:70:b2:b0:15:48:ef:07:1a:7e:46:5c:a9:76:fb:c7: 8a:c8:14:d5:4c:76:a2:82:c7:4a:22:b2:80:30:a8:15:48:34: bc:eb:0d:da:49:b1:63:39:14:c1:27:a4:d6:9d:d5:04:8c:db: 3a:7f:c1:42:8a:9d:41:ae:e1:f9:06:aa:fe:c8:1c:94:7c:7d: 53:c3:69:be:4d:9d:0a:7d:51:c2:9f:69:2c:a1:e4:e1:74:c5: eb:27:0b:01:84:b7:c2:6a:25:90:41:c4:9f:2e:c2:31:35:df: c5:25:44:52:96:57:b7:a5:07:06:79:82:07:c5:17:0e:08:e9: f6:3d:14:f1:23:8f:b4:d6:4b:32:db:0b:40:e5:e5:82:8e:85: dd:c3:18:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwNjA0MTgwOTM4WhcNMjUwNjExMTgwOTM4WjAYMRYwFAYD VQQDEw02ODQwOGJlMi05MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mgYBzia15g2IdafNUxnbswvd4EMLM50rzz+0OG8rnDZEm+kSI2YqZQbi6i2 9PMrfRaL5kf4m3o7QgRHcCbkUONJsuA6WufLmbFjCYsM9LUwmUkKUTWfyROrQDgR OY/qVd+uY6nb/sZ/SAELXHccYafm1WEDx1g8GRE5dszOH2nAMqGLJ+Kp9ACCUJCq NcDoZydQzhQ208cZDKhGBRlZPPZalplO89HlRehYeW+YpEzFvro96VQP1uPBHsZ2 fs+cr5odPh0xXJ6Spz2FK5+YG9pC+1g380DPpf+3hPBkIHOZooHlYhKrFg4gHSDH RlBXpCYqgXhlK4Oci03bHlQwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9NGdCN 7tcsj5JDstcwNDl1T8m4MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgrgttKVK9lIAAd51wZwS3D2NVem3w1AM06LL1vqVijW8sG1yxtMd9 d+5NbBetznUNCviqrE9WPlC67niSKbm6vMCjPoZTT1m4JvIXMICTEw7ecD4RwUQ4 WQgDwM9QtPYL2+AlNB8xuxWQOjMVGAFwsrAVSO8HGn5GXKl2+8eKyBTVTHaigsdK IrKAMKgVSDS86w3aSbFjORTBJ6TWndUEjNs6f8FCip1BruH5Bqr+yByUfH1Tw2m+ TZ0KfVHCn2ksoeThdMXrJwsBhLfCaiWQQcSfLsIxNd/FJURSlle3pQcGeYIHxRcO COn2PRTxI4+01ksy2wtA5eWCjoXdwxgT -----END CERTIFICATE-----Generated at Fri Jun 6 17:20:07 2025 by rpki-client