$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: c4gk8Xux8hSjdEJF3ledZQv6jQCAJBfCBTGF/INVo9I= Subject key identifier: E6:D2:29:62:79:31:A1:EE:D4:20:C7:EF:D4:0B:BC:88:62:85:06:4E Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0AF0 Signing time: Mon 12 May 2025 19:28:29 +0000 Manifest this update: Mon 12 May 2025 19:28:28 +0000 Manifest next update: Mon 19 May 2025 19:28:28 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: t4qnpQml5Z2eHZJWdIPmC9PI2OHrKEd+1JRWhTzT8w4=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: d4UXXCMBLzbA5F5CBh6+/uxfNEdacqbjKjEwNBL2vSE=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: May 12 19:28:28 2025 GMT Not After : May 19 19:28:28 2025 GMT Subject: CN=68224bdd-4256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bb:7c:6e:81:39:01:60:c7:ef:fd:24:5d:de: d5:62:91:0c:d1:7d:d4:0c:e0:d0:98:a1:f3:cc:4d: 06:f9:e0:72:36:68:98:16:fa:d8:26:21:f3:d2:27: c7:00:70:89:10:bf:09:de:6f:0c:3e:84:cf:f1:d2: 50:17:12:4b:a7:b8:c8:04:8f:af:4d:d5:19:4e:e8: 67:52:12:c1:9e:59:28:ae:f7:5b:05:da:06:0e:e5: 44:98:56:30:60:95:34:ee:d8:06:0a:b3:f6:c3:a0: 75:30:b9:d4:2a:5a:1e:6a:00:be:e4:8a:63:ea:ef: 72:17:7a:ab:18:fd:4e:d2:7a:d0:6f:ef:64:74:29: 41:71:bc:71:c0:ac:0c:67:cb:06:41:73:c0:9c:76: 65:ed:b7:93:67:9d:f2:f1:f9:54:24:f4:25:e7:66: d8:60:e3:89:c4:42:97:19:45:6c:71:b0:84:0e:fa: c8:79:93:ce:b6:6c:86:28:df:07:37:3a:38:15:05: b5:95:ef:89:9c:12:56:df:b0:1e:e6:b8:63:36:42: 01:86:ad:7f:1d:bc:66:9d:25:b2:db:b6:ac:52:1f: cd:8c:d5:bf:e7:7e:45:c4:df:a1:08:ee:27:23:22: a2:0a:c4:e6:c4:76:69:98:12:3a:da:ea:e5:02:99: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:29:62:79:31:A1:EE:D4:20:C7:EF:D4:0B:BC:88:62:85:06:4E X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c5:ea:44:a8:42:69:dc:44:a3:30:a6:a9:8d:3a:73:a6:25: 33:33:36:11:71:c9:4d:65:e7:80:40:67:d3:d2:a5:47:3a:7b: 77:d1:cf:48:93:e5:9d:9a:08:cc:75:8c:04:6f:3e:dc:86:66: 5b:9a:18:0f:56:0c:9d:41:c0:34:f0:38:58:fb:e4:0d:4a:48: f7:f0:f6:08:8a:7f:8a:b3:25:d1:c4:47:18:a9:42:65:71:8d: 3e:8f:5b:41:10:03:61:35:39:25:ba:e0:ce:75:92:08:6c:2a: 3e:bf:fd:18:64:fc:7a:0b:e3:ee:93:2e:13:99:e2:b4:89:6d: bc:27:4d:42:1e:1c:24:40:d1:6b:f1:13:f3:67:84:d6:c4:64: 6d:19:06:0c:c7:e6:22:d8:28:bb:0a:7a:13:37:cb:0b:ea:70: 59:93:b1:fc:46:10:7d:fd:5e:0c:b6:59:9d:78:81:e7:da:43: 3a:9c:50:e3:70:96:ce:08:62:58:e0:56:59:9e:fb:f8:8a:81: cf:01:8c:7f:a4:60:6d:8f:0d:e0:09:a0:d3:19:2e:03:8a:7f: 0a:7a:73:2b:38:cc:46:5c:b3:84:58:63:55:e0:97:39:d6:d0: 3b:67:16:8e:79:e5:e1:3d:b0:39:9d:ed:ba:9a:b0:f5:ce:d3: 69:bc:e9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNTEyMTkyODI4WhcNMjUwNTE5MTkyODI4WjAYMRYwFAYD VQQDEw02ODIyNGJkZC00MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67t8boE5AWDH7/0kXd7VYpEM0X3UDODQmKHzzE0G+eByNmiYFvrYJiHz0ifH AHCJEL8J3m8MPoTP8dJQFxJLp7jIBI+vTdUZTuhnUhLBnlkorvdbBdoGDuVEmFYw YJU07tgGCrP2w6B1MLnUKloeagC+5Ipj6u9yF3qrGP1O0nrQb+9kdClBcbxxwKwM Z8sGQXPAnHZl7beTZ53y8flUJPQl52bYYOOJxEKXGUVscbCEDvrIeZPOtmyGKN8H Nzo4FQW1le+JnBJW37Ae5rhjNkIBhq1/HbxmnSWy27asUh/NjNW/535FxN+hCO4n IyKiCsTmxHZpmBI62urlAplAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObSKWJ5 MaHu1CDH79QLvIhihQZOMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaxepEqEJp3ESjMKapjTpzpiUzMzYRcclNZeeAQGfT0qVHOnt30c9I k+WdmgjMdYwEbz7chmZbmhgPVgydQcA08DhY++QNSkj38PYIin+KsyXRxEcYqUJl cY0+j1tBEANhNTkluuDOdZIIbCo+v/0YZPx6C+Puky4TmeK0iW28J01CHhwkQNFr 8RPzZ4TWxGRtGQYMx+Yi2Ci7CnoTN8sL6nBZk7H8RhB9/V4MtlmdeIHn2kM6nFDj cJbOCGJY4FZZnvv4ioHPAYx/pGBtjw3gCaDTGS4Din8KenMrOMxGXLOEWGNV4Jc5 1tA7ZxaOeeXhPbA5ne26mrD1ztNpvOkb -----END CERTIFICATE-----Generated at Wed May 14 10:13:53 2025 by rpki-client