$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: 5a/08NlalR9LtBJHBG9gYvvVr5OC4ij5cw2FK74CBVU= Subject key identifier: 5F:9C:C9:22:E9:C4:6F:15:BF:0A:FB:98:60:D4:CB:C9:E2:8B:BB:26 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 063B Signing time: Sat 10 May 2025 22:13:44 +0000 Manifest this update: Sat 10 May 2025 22:13:44 +0000 Manifest next update: Sat 17 May 2025 22:13:44 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: F8KNKYEU+zCwA/MHBhQz7YRyg7coUQdQkcvTgm4AhhY=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: May 10 22:13:44 2025 GMT Not After : May 17 22:13:44 2025 GMT Subject: CN=681fcf98-4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:0a:e9:4f:8c:c0:70:5b:84:2d:d7:c1:17: 32:03:64:0e:4c:4d:8b:cc:26:85:3d:e5:d4:0c:6c: 50:3e:e4:19:6f:4b:6f:5a:59:08:0d:ea:af:b5:13: 40:db:89:59:54:86:9a:e5:e9:27:2c:86:0e:99:f0: 26:7d:08:17:58:80:17:45:4b:56:07:b9:c3:94:f7: 04:0a:5e:47:e8:00:9d:1b:60:a4:d9:28:2d:ca:b1: b0:bb:ee:6a:99:86:9f:39:1f:66:6f:e7:f2:ca:ad: a2:5a:b3:3c:5f:2f:bb:50:c4:9a:52:fa:09:9f:94: a9:2d:3c:3d:18:31:7e:ed:31:93:5d:f2:dc:2d:53: 98:86:73:5f:19:98:45:9b:45:50:30:08:2e:e5:97: 3a:d3:78:e5:36:fa:80:26:fd:23:50:da:c9:16:8a: 0c:db:4b:2a:59:98:2b:5a:70:ab:9a:a6:39:5b:37: d9:4a:29:a6:05:47:51:5d:bb:38:0d:a9:08:22:90: 25:8f:a3:00:c7:23:e4:f1:ad:12:6d:2c:99:94:20: 34:ed:d5:a1:5b:83:52:af:30:23:c5:8d:bc:2a:ad: bf:45:8e:b1:5d:41:ef:ed:ec:91:00:b8:64:26:71: b0:86:90:82:8f:8d:bd:8f:72:29:23:de:ce:26:5e: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9C:C9:22:E9:C4:6F:15:BF:0A:FB:98:60:D4:CB:C9:E2:8B:BB:26 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:58:b4:c2:c4:e9:4e:28:70:02:c4:fe:23:72:6c:bb:20:88: e7:43:45:6f:2c:b1:81:9b:57:10:e1:a5:64:84:87:b4:5d:4d: a7:a9:91:dc:62:53:72:05:52:19:63:56:ff:24:7e:80:9e:1c: 7a:a1:b8:82:60:17:14:60:e1:e1:a7:cf:a4:ba:fc:f1:21:b6: 32:bd:2e:62:b3:6b:39:65:b9:ad:42:b1:97:6d:01:b2:59:74: 59:cb:77:7a:01:40:89:0b:f9:38:08:8e:f0:a3:e1:b9:65:3f: 15:68:e1:95:c1:93:de:1e:da:a0:ba:a6:c1:ee:6f:62:ec:9b: 66:f7:c3:69:06:94:0b:ed:74:2e:ff:26:36:7e:d6:9d:de:2c: 95:33:82:bb:5f:82:0b:43:d9:84:64:c9:78:b5:5d:bf:13:46: aa:e2:a3:5f:38:09:c1:a1:7c:ff:aa:5f:09:97:cf:c3:fd:72: 7f:a3:15:e5:40:af:95:04:55:b3:13:58:c0:17:68:e9:c5:97: c7:a5:13:79:c2:d8:64:fc:c9:61:a3:16:c3:61:a0:2b:ca:29: 0c:64:53:7e:62:12:71:96:4e:81:2d:dc:ce:3a:10:ca:8f:28: 65:cf:90:d6:99:3c:df:77:09:a5:aa:4a:0c:b3:a5:d0:88:67: bd:a6:35:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwNTEwMjIxMzQ0WhcNMjUwNTE3MjIxMzQ0WjAYMRYwFAYD VQQDEw02ODFmY2Y5OC00ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sgK6U+MwHBbhC3XwRcyA2QOTE2LzCaFPeXUDGxQPuQZb0tvWlkIDeqvtRNA 24lZVIaa5eknLIYOmfAmfQgXWIAXRUtWB7nDlPcECl5H6ACdG2Ck2SgtyrGwu+5q mYafOR9mb+fyyq2iWrM8Xy+7UMSaUvoJn5SpLTw9GDF+7TGTXfLcLVOYhnNfGZhF m0VQMAgu5Zc603jlNvqAJv0jUNrJFooM20sqWZgrWnCrmqY5WzfZSimmBUdRXbs4 DakIIpAlj6MAxyPk8a0SbSyZlCA07dWhW4NSrzAjxY28Kq2/RY6xXUHv7eyRALhk JnGwhpCCj429j3IpI97OJl6tgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+cySLp xG8Vvwr7mGDUy8nii7smMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSWLTCxOlOKHACxP4jcmy7IIjnQ0VvLLGBm1cQ4aVkhIe0XU2nqZHc YlNyBVIZY1b/JH6Anhx6obiCYBcUYOHhp8+kuvzxIbYyvS5is2s5ZbmtQrGXbQGy WXRZy3d6AUCJC/k4CI7wo+G5ZT8VaOGVwZPeHtqguqbB7m9i7Jtm98NpBpQL7XQu /yY2ftad3iyVM4K7X4ILQ9mEZMl4tV2/E0aq4qNfOAnBoXz/ql8Jl8/D/XJ/oxXl QK+VBFWzE1jAF2jpxZfHpRN5wthk/MlhoxbDYaAryikMZFN+YhJxlk6BLdzOOhDK jyhlz5DWmTzfdwmlqkoMs6XQiGe9pjUI -----END CERTIFICATE-----Generated at Mon May 12 01:25:09 2025 by rpki-client