$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json) Hash identifier: Trjk4a3UJHVXTiHRDhakNrFZPyH3l6sfDwZPZ00rfe4= Subject key identifier: F2:9A:88:D9:DF:FC:97:63:97:20:DD:2D:99:67:CA:5E:24:34:99:1E Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft Manifest number: F2 Signing time: Tue 13 May 2025 04:35:40 +0000 Manifest this update: Tue 13 May 2025 04:35:40 +0000 Manifest next update: Tue 20 May 2025 04:35:40 +0000 Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: hTmcZJd8oc0WDtw0lpz8EMH28oRO5Bztw2ueFJUssNI=) 2: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: v+1b4BSfVaZyzyzYkzqzeT7Ee1I3/7A+8jt9kQpxCPc=) 3: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: A9dIkj8J76tWHGXSX/3Ud9jZf1nkfnJcE726ptgm7cw=) 4: 79F7221E892911EF896D1145C4F9AE02.roa (hash: hGdMrY8+O6zApibMjg/vy58aibxku7iV/ch2aVDa82w=) 5: F278C026892911EFB08D7746C4F9AE02.roa (hash: Vz6AnYUqxQMrtm1fqPuY9YKct5u+kfmwLL8MJ80Qjc4=) 6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: 1Q/6I9YvTdRroG4PgU/vX7AvoYDmVeBiDmXzSwZyFRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Validity Not Before: May 13 04:35:40 2025 GMT Not After : May 20 04:35:40 2025 GMT Subject: CN=6822cc1c-2de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:26:b1:ee:42:90:13:54:32:c6:97:a5:ee: bb:44:1f:60:18:90:84:df:65:fc:9b:b5:09:a3:7f: 7e:4c:57:52:65:17:cd:db:d3:4c:d0:0d:5f:68:52: ea:50:cc:b0:2e:ad:4e:a1:91:33:99:6d:6e:f7:a9: df:a8:15:a5:1b:bd:28:1c:bd:45:1f:34:d3:dc:9d: 7c:49:bd:e9:8b:d8:6b:3c:e3:2a:12:fb:2c:58:b4: 52:e8:1b:cb:21:29:64:01:18:2b:9f:a4:80:15:e4: a4:aa:97:7e:81:55:63:3f:f0:06:5b:8e:71:14:1e: 08:be:65:0f:1f:4f:bc:83:19:d1:92:ea:62:19:3b: ce:ca:df:54:76:b4:18:90:1b:d8:56:52:9a:32:a8: 67:f2:12:02:4f:0f:d7:ff:57:c8:c5:ef:c4:1e:f1: cd:2f:35:a1:c8:37:fa:d7:6f:5f:88:0c:99:de:b6: 9c:86:46:dc:42:b1:1d:df:ff:d5:94:d7:97:51:a7: 4a:0a:9e:61:55:8b:a3:7e:93:fd:07:15:af:6e:5a: 62:34:fe:5e:68:d2:a4:73:ce:4d:ed:20:cc:60:38: 04:24:fd:04:d2:ea:83:69:2c:39:d6:24:d8:d4:52: f8:b5:9f:14:68:9f:d1:01:14:92:69:1a:b7:64:1a: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:88:D9:DF:FC:97:63:97:20:DD:2D:99:67:CA:5E:24:34:99:1E X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6c:b0:09:ce:f6:77:11:5a:39:1d:e5:97:bc:37:e5:57:69: 81:f2:8b:10:2d:5f:c7:d9:09:e2:c9:1b:ca:dd:d0:60:d0:5c: 31:d8:87:85:89:24:a7:42:3e:e8:78:a6:25:89:13:d2:50:50: 3a:15:b4:70:36:ea:37:df:73:d8:a8:7f:51:72:4c:98:4f:92: bf:34:e7:8b:e8:1b:2b:30:1d:36:aa:8c:2b:32:47:07:5a:ac: d7:07:f3:af:7b:f0:a9:4c:91:d2:d3:6b:17:bb:2f:39:cb:00: 21:20:e1:e4:7c:75:00:25:36:96:08:03:90:65:e4:5f:5f:a6: aa:0a:1d:db:c4:9e:9a:79:12:b0:17:e0:7b:f0:24:06:2a:38: 15:f7:38:2b:40:d1:62:5b:38:62:fd:1a:d4:50:d5:42:38:98: e5:60:f7:eb:56:b5:c5:07:6e:18:84:b4:e5:f8:3b:f9:2d:42: 9b:89:94:7e:e8:ad:07:0b:4f:98:b5:ec:e1:d6:b2:a5:c7:f5: a5:d3:a1:5b:78:bf:37:4d:5f:e1:3c:34:c9:ca:cd:97:f4:b6: a4:b1:64:7b:c5:9d:bb:ab:85:29:24:02:82:f8:82:06:76:f4: 30:d5:43:79:17:70:b9:09:42:7a:12:77:31:32:64:a4:9f:a3: 60:13:9a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwNTEzMDQzNTQwWhcNMjUwNTIwMDQzNTQwWjAYMRYwFAYD VQQDEw02ODIyY2MxYy0yZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dkmse5CkBNUMsaXpe67RB9gGJCE32X8m7UJo39+TFdSZRfN29NM0A1faFLq UMywLq1OoZEzmW1u96nfqBWlG70oHL1FHzTT3J18Sb3pi9hrPOMqEvssWLRS6BvL ISlkARgrn6SAFeSkqpd+gVVjP/AGW45xFB4IvmUPH0+8gxnRkupiGTvOyt9UdrQY kBvYVlKaMqhn8hICTw/X/1fIxe/EHvHNLzWhyDf6129fiAyZ3rachkbcQrEd3//V lNeXUadKCp5hVYujfpP9BxWvblpiNP5eaNKkc85N7SDMYDgEJP0E0uqDaSw51iTY 1FL4tZ8UaJ/RARSSaRq3ZBqtLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKaiNnf /JdjlyDdLZlnyl4kNJkeMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw eVloSUx4MXgxMG11ZmNTdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNbLAJzvZ3EVo5HeWXvDflV2mB8osQLV/H2QniyRvK3dBg0Fwx2IeF iSSnQj7oeKYliRPSUFA6FbRwNuo333PYqH9RckyYT5K/NOeL6BsrMB02qowrMkcH WqzXB/Ove/CpTJHS02sXuy85ywAhIOHkfHUAJTaWCAOQZeRfX6aqCh3bxJ6aeRKw F+B78CQGKjgV9zgrQNFiWzhi/RrUUNVCOJjlYPfrVrXFB24YhLTl+Dv5LUKbiZR+ 6K0HC0+Ytezh1rKlx/Wl06FbeL83TV/hPDTJys2X9LaksWR7xZ27q4UpJAKC+IIG dvQw1UN5F3C5CUJ6EncxMmSkn6NgE5oD -----END CERTIFICATE-----Generated at Thu May 15 00:25:50 2025 by rpki-client