$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: Z8syDkigPthnZLObZkEeaCm26Xfe9O8Iino5TU46Y98= Subject key identifier: D3:AC:BB:60:03:DE:E0:A8:3B:13:42:64:3C:5F:0A:20:8A:50:F0:5D Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1FFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 187C Signing time: Fri 16 May 2025 17:31:15 +0000 Manifest this update: Fri 16 May 2025 17:31:15 +0000 Manifest next update: Fri 23 May 2025 17:31:15 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: xSpRGJuVy5GQatfAer+6xDDi/9plLukp8bUZYAOvyXQ=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: EHblWN/sQZKLg9HDhv2zyoanKhtnruUlRN2jtd5a8fY=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: vkLbx3UKTR9g9Nkc39hdbcDwUn28d/ORpVf5hXTtd6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8189 (0x1ffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: May 16 17:31:15 2025 GMT Not After : May 23 17:31:15 2025 GMT Subject: CN=68277663-0282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:3d:f5:0b:a5:d8:a1:32:1f:64:84:ef:fe: 76:8e:af:d9:0c:14:52:15:6d:3b:5a:73:f6:8a:80: e4:5e:19:b4:bb:6f:da:cb:31:77:7e:7c:75:d2:12: 00:ba:f4:2e:6e:1d:44:1c:29:98:b1:0d:47:81:29: 45:ec:68:0c:d8:e6:27:7d:a9:0e:7a:0b:ad:1b:22: c6:4c:a7:9f:63:d3:b6:c9:d9:37:2a:cc:24:87:15: c1:0a:4e:7f:47:11:1e:17:b3:3b:d7:a4:25:76:f6: 5a:96:0e:3b:6c:00:52:f3:41:2b:d4:23:1b:e5:a2: ad:d6:56:36:96:a9:da:8a:4b:b6:38:fc:a1:2d:5e: fc:c8:3f:1f:46:2e:fd:50:0c:5c:87:32:52:5c:f1: ac:5c:11:02:76:19:17:56:5d:64:0d:a7:5c:b0:49: 44:37:a2:7e:36:a4:4c:3a:6e:ce:cc:c3:08:af:77: 6c:a5:81:c8:75:1b:f7:76:6a:e7:c2:24:0f:cf:93: d6:72:05:32:0e:08:62:48:b9:4c:e1:19:20:65:b0: 2b:4c:a0:ac:5c:b5:b4:7d:f2:cb:ef:91:7d:7e:1c: 2e:d7:34:ac:0f:2d:16:18:48:96:80:ad:c4:e6:3a: 87:6a:60:14:19:bb:90:8e:17:35:eb:87:c3:af:c6: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AC:BB:60:03:DE:E0:A8:3B:13:42:64:3C:5F:0A:20:8A:50:F0:5D X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:92:16:c1:e4:2d:a4:9a:90:92:0f:a8:16:87:bf:49:c8:1f: da:42:8a:c9:c5:71:4c:e7:75:dd:c3:01:5a:b5:33:78:8f:a2: 7b:11:3e:9f:94:53:2e:de:7e:80:11:1f:a5:19:84:a2:e1:e3: 22:49:02:0a:54:25:f5:ce:2e:7b:7f:67:ad:a4:47:a4:88:fe: fd:53:51:8b:5a:5e:1b:c2:14:17:3b:bc:a0:c7:09:a1:ea:c2: 59:03:6a:bd:cf:63:7a:f4:d0:8b:a8:de:50:11:c9:46:a7:41: e2:10:4d:fb:f1:90:2b:46:0a:50:5a:2c:8d:4e:4b:75:ad:32: 48:56:7f:13:38:c0:48:fd:c3:7d:bc:81:1b:96:4f:95:9d:1a: c3:ca:9a:ff:2a:d7:51:62:93:bf:6c:31:a1:5a:6f:2b:0c:37: 4c:67:52:30:9e:8d:17:20:bc:ab:3e:cc:e0:c3:26:4f:3c:ce: 90:02:fa:6d:de:cb:6c:d8:fb:9c:c0:e1:c2:8e:32:55:40:bc: a4:e9:92:29:cd:7f:df:0c:79:19:ad:fd:aa:44:70:c8:85:69: 98:3e:ae:75:6b:4d:b1:cf:54:d9:cd:17:f0:9a:aa:55:99:64: 59:7a:82:b5:31:84:06:6e:17:9e:2f:ac:d2:d0:3f:73:c8:4a: d4:eb:40:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjUwNTE2MTczMTE1WhcNMjUwNTIzMTczMTE1WjAYMRYwFAYD VQQDEw02ODI3NzY2My0wMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BY99Qul2KEyH2SE7/52jq/ZDBRSFW07WnP2ioDkXhm0u2/ayzF3fnx10hIA uvQubh1EHCmYsQ1HgSlF7GgM2OYnfakOegutGyLGTKefY9O2ydk3KswkhxXBCk5/ RxEeF7M716QldvZalg47bABS80Er1CMb5aKt1lY2lqnaiku2OPyhLV78yD8fRi79 UAxchzJSXPGsXBECdhkXVl1kDadcsElEN6J+NqRMOm7OzMMIr3dspYHIdRv3dmrn wiQPz5PWcgUyDghiSLlM4RkgZbArTKCsXLW0ffLL75F9fhwu1zSsDy0WGEiWgK3E 5jqHamAUGbuQjhc164fDr8ZNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOsu2AD 3uCoOxNCZDxfCiCKUPBdMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4khbB5C2kmpCSD6gWh79JyB/aQorJxXFM53XdwwFatTN4j6J7ET6f lFMu3n6AER+lGYSi4eMiSQIKVCX1zi57f2etpEekiP79U1GLWl4bwhQXO7ygxwmh 6sJZA2q9z2N69NCLqN5QEclGp0HiEE378ZArRgpQWiyNTkt1rTJIVn8TOMBI/cN9 vIEblk+VnRrDypr/KtdRYpO/bDGhWm8rDDdMZ1Iwno0XILyrPszgwyZPPM6QAvpt 3sts2PucwOHCjjJVQLyk6ZIpzX/fDHkZrf2qRHDIhWmYPq51a02xz1TZzRfwmqpV mWRZeoK1MYQGbheeL6zS0D9zyErU60C0 -----END CERTIFICATE-----Generated at Sat May 17 12:25:23 2025 by rpki-client