$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: 05QIMU2GPl9FpjPjLIMjgpBFaFBWa4nxxvSTreM7KgA= Subject key identifier: F8:37:34:59:2E:3A:2E:BA:DD:DD:17:84:B6:9E:E1:9E:47:B1:53:46 Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0324 Signing time: Tue 13 May 2025 00:56:37 +0000 Manifest this update: Tue 13 May 2025 00:56:36 +0000 Manifest next update: Tue 20 May 2025 00:56:36 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: FVdTXU6EvSSofSwEXVWRj1yylo9uuZaSa9J6qU/fIrY=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: yAY/Xp66VBMbd2Lc5/zcmj9DVNGz6j22BacFuet4uZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: May 13 00:56:36 2025 GMT Not After : May 20 00:56:36 2025 GMT Subject: CN=682298c4-4e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:4d:98:e8:df:39:5b:9f:99:b8:d9:db:bc: 09:13:fb:0e:61:a2:5a:55:7a:a1:e6:a9:ee:93:4b: c3:ca:3e:be:6e:21:1d:f9:c3:77:8f:fc:22:de:7d: ae:a1:b1:77:18:cd:fb:16:29:c3:a8:86:0f:d6:3f: 2f:ed:f3:31:63:fc:0a:5a:9e:f1:0f:b1:08:ef:7f: d5:83:d5:03:1f:51:90:83:55:87:71:77:1e:8a:c2: e4:9f:39:fb:3b:9c:49:e0:57:94:8c:0d:b6:7e:6f: 4d:43:68:d8:3d:9c:71:6b:c3:8b:3d:49:1e:3a:19: 58:d4:5d:3f:be:8c:e8:d5:84:d8:25:63:c3:0c:2d: e0:1a:a7:6c:ae:60:fe:80:e6:27:1b:1e:e0:a6:90: 37:28:d3:04:d3:e0:d2:52:17:42:09:42:e7:69:a3: 07:ca:51:92:02:da:27:99:d8:32:99:a0:55:34:77: 7b:fc:b0:f4:53:52:36:50:96:fe:64:05:58:f5:11: 4a:da:7c:ce:05:7f:fd:10:38:7b:d4:0b:01:dc:d5: 91:bf:9b:b2:a4:5e:d2:52:7c:6b:42:ef:d1:cf:1a: c5:af:1e:92:1e:e4:04:7a:ee:ea:38:03:7b:7b:10: 3c:08:a9:64:fe:49:5c:26:89:70:ce:6c:ca:b9:62: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:34:59:2E:3A:2E:BA:DD:DD:17:84:B6:9E:E1:9E:47:B1:53:46 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2b:fc:a3:06:ec:dd:2d:e3:8a:db:45:25:f4:4b:8b:9f:ab: 6e:28:ba:95:b1:fa:b8:1d:f0:24:79:23:d8:a4:3e:5d:a5:64: 87:bb:c5:fc:91:d6:f7:4c:f7:f0:e7:9b:79:5d:6f:6e:3d:f5: 44:9a:4f:d3:31:79:1d:12:61:c1:0b:61:6a:69:2a:52:df:24: 85:bd:52:46:a4:2f:75:66:ad:a6:bc:00:ea:c3:c1:96:99:1a: 25:fd:6f:b9:6a:ef:32:cb:d9:47:f0:08:91:21:ae:c3:04:ad: b8:05:a0:b4:8e:b1:d7:d2:ea:21:fc:02:a3:c4:32:f6:ce:f4: 7a:6c:85:3a:25:0c:05:82:4b:09:00:90:f3:fa:69:3b:4e:d9: 11:49:2a:54:59:a5:f7:85:63:29:3a:fd:e9:dc:ca:3e:4c:09: 51:86:fd:f8:59:1e:a7:c3:44:3e:5c:31:91:ec:c6:c2:6a:3d: 8b:c4:4b:94:98:3d:d7:37:10:8f:be:e7:43:32:9f:79:47:30: a8:ed:e7:76:f8:eb:19:6c:73:48:3f:0d:95:08:b0:4b:4f:9b: 43:39:f5:a9:fc:81:4c:e2:12:33:2c:03:42:e7:49:cb:8c:b6: f1:52:2f:fe:74:00:70:1c:1a:5a:0b:98:eb:e0:d5:45:50:b2: 95:1f:50:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwNTEzMDA1NjM2WhcNMjUwNTIwMDA1NjM2WjAYMRYwFAYD VQQDEw02ODIyOThjNC00ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHhNmOjfOVufmbjZ27wJE/sOYaJaVXqh5qnuk0vDyj6+biEd+cN3j/wi3n2u obF3GM37FinDqIYP1j8v7fMxY/wKWp7xD7EI73/Vg9UDH1GQg1WHcXceisLknzn7 O5xJ4FeUjA22fm9NQ2jYPZxxa8OLPUkeOhlY1F0/vozo1YTYJWPDDC3gGqdsrmD+ gOYnGx7gppA3KNME0+DSUhdCCULnaaMHylGSAtonmdgymaBVNHd7/LD0U1I2UJb+ ZAVY9RFK2nzOBX/9EDh71AsB3NWRv5uypF7SUnxrQu/RzxrFrx6SHuQEeu7qOAN7 exA8CKlk/klcJolwzmzKuWLMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg3NFku Oi663d0XhLae4Z5HsVNGMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYK/yjBuzdLeOK20Ul9EuLn6tuKLqVsfq4HfAkeSPYpD5dpWSHu8X8 kdb3TPfw55t5XW9uPfVEmk/TMXkdEmHBC2FqaSpS3ySFvVJGpC91Zq2mvADqw8GW mRol/W+5au8yy9lH8AiRIa7DBK24BaC0jrHX0uoh/AKjxDL2zvR6bIU6JQwFgksJ AJDz+mk7TtkRSSpUWaX3hWMpOv3p3Mo+TAlRhv34WR6nw0Q+XDGR7MbCaj2LxEuU mD3XNxCPvudDMp95RzCo7ed2+OsZbHNIPw2VCLBLT5tDOfWp/IFM4hIzLANC50nL jLbxUi/+dABwHBpaC5jr4NVFULKVH1C/ -----END CERTIFICATE-----Generated at Wed May 14 01:38:52 2025 by rpki-client