$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: a/IqqWarzfej5l7kgYUqIAq9Tk4lc0p1z1EhxLjMPUo= Subject key identifier: 30:2C:6C:E3:08:54:A4:9A:A5:F3:B0:15:24:0E:B8:7C:4D:F3:DF:68 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07AB Signing time: Sat 10 May 2025 20:52:31 +0000 Manifest this update: Sat 10 May 2025 20:52:31 +0000 Manifest next update: Sat 17 May 2025 20:52:31 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: b1vTZWcfdkjFmFHuf2/Ljb60G6hFEvHhbYoDaqrPsrw=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: May 10 20:52:31 2025 GMT Not After : May 17 20:52:31 2025 GMT Subject: CN=681fbc8f-fc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:8d:ab:a2:d2:04:52:52:d5:e8:c0:26:3d: 6b:bc:a1:db:d9:cb:d4:28:e9:65:9f:e9:2d:ed:61: ca:17:88:18:61:7e:ed:b3:6c:4f:3f:8d:cb:51:2b: 51:47:f5:95:43:d0:8e:53:2d:6c:1e:aa:7d:48:a2: ef:4b:95:7c:64:ad:fc:ad:d9:f2:0e:22:33:9a:9c: 5c:76:fa:24:a7:3f:94:b0:59:60:5e:63:7d:17:4e: 00:cb:9d:57:c8:59:20:6b:07:b5:6a:1f:e9:c0:bb: a5:0a:23:83:c3:91:65:9a:99:21:45:f7:6b:3a:fd: ec:87:e3:64:d5:e6:c7:f2:18:a5:5e:ed:0c:9f:84: 66:01:62:7d:81:4a:fc:34:92:9f:22:8d:f8:9a:5f: 0b:8a:0d:88:62:ad:39:37:5a:05:e1:8e:d3:0b:15: 78:8c:b3:0a:8d:c1:e3:74:6e:a5:fe:f4:42:2b:dc: c9:91:9b:70:91:5f:ec:0e:61:e6:de:43:f3:e9:43: 0b:c2:2a:d3:b1:fa:30:a5:f4:e1:44:91:0d:22:45: 70:df:1b:2b:eb:c9:f1:fe:98:f8:96:3c:57:17:b2: 44:8d:00:fc:67:02:72:56:e0:bf:c0:61:23:9a:2c: 75:62:b0:59:90:ca:17:99:1c:92:f1:eb:96:df:0e: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2C:6C:E3:08:54:A4:9A:A5:F3:B0:15:24:0E:B8:7C:4D:F3:DF:68 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:24:08:25:0e:66:c7:fd:98:25:7b:89:99:d9:4e:e5:b8:33: 9f:cb:88:1f:ac:b3:71:c9:4c:7c:78:50:35:b1:8d:f5:93:4a: e0:a4:39:67:98:a7:95:65:f9:fe:84:f7:c3:3f:7d:ca:ba:34: 0d:f9:28:33:34:ee:f3:b1:98:38:6c:99:7e:65:ee:27:90:f8: f5:e8:d5:fb:98:d1:d3:d2:d6:71:c1:2b:c6:35:b0:39:8f:6a: bb:b8:18:1d:4a:f9:e9:05:e3:89:b6:88:3a:b0:eb:22:50:3d: ea:35:08:11:8d:ed:3a:d5:4b:fc:f4:4b:33:24:b2:7d:0f:32: c7:66:02:d0:30:0d:a3:80:ca:19:a9:b1:58:cd:02:f9:d5:e4: 77:fc:9d:c0:ae:e6:4d:7e:c1:c0:38:a2:68:16:9b:a0:30:ce: 6c:e3:7f:19:8e:be:1e:15:32:3d:7f:e2:f5:ea:b2:0a:b7:f8: 54:79:f2:df:0b:ce:1f:68:3d:0e:f2:9f:a3:e6:a3:78:43:b0: d2:6f:b0:60:a7:d4:8e:11:78:45:81:f8:39:3e:7f:3e:10:8d: 82:25:8d:e6:a4:2e:fd:b8:d7:38:0e:ac:f4:f7:d4:cc:8d:66: c6:cd:82:e8:dc:ea:9a:75:8b:46:9e:4b:41:3f:a2:18:6c:54: 08:5d:e2:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNTEwMjA1MjMxWhcNMjUwNTE3MjA1MjMxWjAYMRYwFAYD VQQDEw02ODFmYmM4Zi1mYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI+Nq6LSBFJS1ejAJj1rvKHb2cvUKOlln+kt7WHKF4gYYX7ts2xPP43LUStR R/WVQ9COUy1sHqp9SKLvS5V8ZK38rdnyDiIzmpxcdvokpz+UsFlgXmN9F04Ay51X yFkgawe1ah/pwLulCiODw5FlmpkhRfdrOv3sh+Nk1ebH8hilXu0Mn4RmAWJ9gUr8 NJKfIo34ml8Lig2IYq05N1oF4Y7TCxV4jLMKjcHjdG6l/vRCK9zJkZtwkV/sDmHm 3kPz6UMLwirTsfowpfThRJENIkVw3xsr68nx/pj4ljxXF7JEjQD8ZwJyVuC/wGEj mix1YrBZkMoXmRyS8euW3w5/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAsbOMI VKSapfOwFSQOuHxN899oMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkJAglDmbH/Zgle4mZ2U7luDOfy4gfrLNxyUx8eFA1sY31k0rgpDln mKeVZfn+hPfDP33KujQN+SgzNO7zsZg4bJl+Ze4nkPj16NX7mNHT0tZxwSvGNbA5 j2q7uBgdSvnpBeOJtog6sOsiUD3qNQgRje061Uv89EszJLJ9DzLHZgLQMA2jgMoZ qbFYzQL51eR3/J3AruZNfsHAOKJoFpugMM5s438Zjr4eFTI9f+L16rIKt/hUefLf C84faD0O8p+j5qN4Q7DSb7Bgp9SOEXhFgfg5Pn8+EI2CJY3mpC79uNc4Dqz099TM jWbGzYLo3OqadYtGnktBP6IYbFQIXeJb -----END CERTIFICATE-----Generated at Mon May 12 19:59:26 2025 by rpki-client