$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: N62n7T2gAZLIV/5WaXjM6LRJPDzg/YyOUw6LDqGmzsk= Subject key identifier: D8:85:E4:8A:50:A8:CD:9B:AD:11:41:F1:9F:7B:7A:4A:E7:4A:2C:6E Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: C9 Signing time: Tue 13 May 2025 04:56:55 +0000 Manifest this update: Tue 13 May 2025 04:56:54 +0000 Manifest next update: Tue 20 May 2025 04:56:54 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: IV8WR2RZM7f1X+X2ZCVz9zkQ5PoTUcL+8r3gVM9Ddjg=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: May 13 04:56:54 2025 GMT Not After : May 20 04:56:54 2025 GMT Subject: CN=6822d117-760a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:2d:2b:66:4e:28:f1:c3:79:51:e1:76:8a: ea:43:61:b9:cb:e9:51:cd:62:cc:43:00:f9:40:ee: 26:f8:c4:a9:67:ce:99:68:eb:3d:a2:96:f9:87:3c: 97:72:9c:62:8b:3f:65:2b:11:0a:56:0c:48:c5:1e: 23:8b:b9:f2:72:13:b6:82:d0:d1:43:f0:35:0e:8d: ea:eb:2a:87:d7:69:c3:1f:32:f3:80:6e:3e:11:6d: 37:1c:8a:46:4b:16:1e:84:f9:8f:a2:2d:7f:26:ba: 6f:cc:87:63:39:96:8a:72:e0:8c:9a:ca:eb:7b:3c: 96:09:28:1d:af:d4:9e:a4:ec:0f:26:0f:1d:75:f6: ed:6e:69:b7:6c:08:54:5d:5e:34:31:1e:a0:a7:58: c4:5f:c4:42:8a:4a:d2:0f:43:71:e4:77:d1:1a:53: 0f:9a:7d:76:f8:79:36:0f:58:5e:f5:f2:8e:1f:64: aa:12:e0:75:ec:96:22:06:bf:e5:15:27:39:3d:2b: 72:3f:75:92:86:d2:75:71:61:83:59:b4:82:b5:1a: 7c:d7:a5:60:40:ee:d1:a5:3e:ec:68:f8:ac:ac:0e: cb:09:5a:b1:ae:dc:97:9e:f9:56:e0:68:51:b0:cd: ec:50:99:a0:69:86:bd:e6:e5:3c:e7:aa:70:2a:7e: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:85:E4:8A:50:A8:CD:9B:AD:11:41:F1:9F:7B:7A:4A:E7:4A:2C:6E X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:33:74:0e:e1:d9:33:3d:02:ab:e5:e7:25:e2:3f:f6:cc:3a: 24:18:df:83:96:f1:6b:fc:0e:84:e3:ca:73:c3:40:47:cb:18: 5a:d2:b9:b9:72:33:44:bc:36:f2:7f:24:05:28:89:62:fe:98: 0b:a5:5a:9c:8c:31:c1:ba:2a:4c:84:c0:1f:28:3f:c9:86:e0: ad:b9:cd:81:c7:df:77:cf:bd:96:d5:15:8c:69:57:2f:31:36: 22:58:e9:cf:a7:ad:9d:e9:7f:d3:7a:c2:88:07:d6:33:ca:32: 9d:25:a0:66:a6:90:ed:83:08:ff:12:d6:5f:1c:7f:9e:c7:42: 9e:84:d9:5e:bd:04:81:74:ad:43:84:0e:91:78:9d:2e:e9:4a: 29:06:47:0d:f8:e3:2f:91:cd:d4:0a:0c:99:25:2c:85:10:af: 41:c0:43:9a:26:6a:a9:90:4a:17:f2:df:c0:58:b6:9d:a4:02: f1:ec:52:2f:2b:4a:96:f7:66:15:ca:f7:07:4d:c9:ef:f9:e8: 37:ee:1d:5f:69:97:ef:cd:cf:97:38:23:d3:b1:4f:4d:16:f8: 47:06:7d:50:0a:5c:8a:00:4b:92:7a:12:f2:a4:a8:e9:ac:6b: f6:e2:56:82:b3:2c:ac:71:de:46:42:8b:84:ba:5f:77:85:52: 19:8d:b0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNTEzMDQ1NjU0WhcNMjUwNTIwMDQ1NjU0WjAYMRYwFAYD VQQDEw02ODIyZDExNy03NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bwtK2ZOKPHDeVHhdorqQ2G5y+lRzWLMQwD5QO4m+MSpZ86ZaOs9opb5hzyX cpxiiz9lKxEKVgxIxR4ji7nychO2gtDRQ/A1Do3q6yqH12nDHzLzgG4+EW03HIpG SxYehPmPoi1/JrpvzIdjOZaKcuCMmsrrezyWCSgdr9SepOwPJg8ddfbtbmm3bAhU XV40MR6gp1jEX8RCikrSD0Nx5HfRGlMPmn12+Hk2D1he9fKOH2SqEuB17JYiBr/l FSc5PStyP3WShtJ1cWGDWbSCtRp816VgQO7RpT7saPisrA7LCVqxrtyXnvlW4GhR sM3sUJmgaYa95uU856pwKn5R7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiF5IpQ qM2brRFB8Z97ekrnSixuMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZM3QO4dkzPQKr5ecl4j/2zDokGN+DlvFr/A6E48pzw0BHyxha0rm5 cjNEvDbyfyQFKIli/pgLpVqcjDHBuipMhMAfKD/JhuCtuc2Bx993z72W1RWMaVcv MTYiWOnPp62d6X/TesKIB9YzyjKdJaBmppDtgwj/EtZfHH+ex0KehNlevQSBdK1D hA6ReJ0u6UopBkcN+OMvkc3UCgyZJSyFEK9BwEOaJmqpkEoX8t/AWLadpALx7FIv K0qW92YVyvcHTcnv+eg37h1faZfvzc+XOCPTsU9NFvhHBn1QClyKAEuSehLypKjp rGv24laCsyyscd5GQouEul93hVIZjbAP -----END CERTIFICATE-----Generated at Tue May 13 11:46:09 2025 by rpki-client