$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: HYipniJJah6CDf5zT4wgu7uwH4xGxJK2AbtAurc5HYg= Subject key identifier: 84:D1:B4:8A:32:24:D2:44:73:D0:90:84:84:D6:00:EA:C8:FF:E8:00 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 0255 Signing time: Fri 09 May 2025 01:34:00 +0000 Manifest this update: Fri 09 May 2025 01:34:00 +0000 Manifest next update: Fri 16 May 2025 01:34:00 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: fgy4pDDvFIkoFlUF9zFNsyZjfDWKDt0Z3TkWSP0w0Vo=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: +eopR6Ey6rjil4YrK0oUqjN/Z120/0ESYezEgJdM8WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: May 9 01:34:00 2025 GMT Not After : May 16 01:34:00 2025 GMT Subject: CN=681d5b88-557e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:6a:92:1b:1c:4e:1d:7a:69:c9:b1:0d:63: 7d:65:ac:bc:a2:6e:19:a6:39:53:bd:b3:f3:7c:7f: e5:e3:0f:05:a5:4c:f8:cc:64:0d:7f:c1:51:ac:ee: 93:50:dc:36:87:82:ce:a5:e9:fb:fe:cf:71:e8:37: f6:16:e0:64:83:74:bb:20:a5:09:de:5a:db:d6:39: 44:bc:7b:49:69:8b:15:8c:94:f6:25:c5:b0:82:60: f9:f6:6d:52:0d:a5:31:9b:54:f2:91:c8:82:ca:0c: 1b:a2:5a:20:90:77:ba:0c:8c:82:04:0f:6c:a0:7d: d5:34:04:0e:05:d0:5b:7d:02:98:b5:45:f3:e1:76: 2b:cb:51:d5:9d:f8:1f:c4:4e:80:ae:ad:b8:08:b8: 73:8c:34:d7:1f:b2:0d:3c:49:d1:d0:fd:15:10:9e: b0:4c:74:e9:b4:1c:bb:da:52:2f:72:99:5d:20:08: 03:d8:19:82:4d:21:ba:50:ca:ff:da:da:e2:e3:02: 7f:16:86:64:ff:aa:1e:d9:c8:12:d0:f8:9a:7e:ee: 75:e2:f9:72:34:ee:ff:62:05:ef:78:c7:4f:81:48: 07:ff:c9:5c:98:84:e2:3b:4b:25:26:2b:71:4f:63: 7b:19:77:89:bb:db:cf:2c:eb:24:66:cc:57:a8:74: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D1:B4:8A:32:24:D2:44:73:D0:90:84:84:D6:00:EA:C8:FF:E8:00 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:e6:fe:68:45:9e:65:f6:b4:5e:be:ce:33:97:95:51:4d: c6:1c:29:83:40:74:8b:84:c6:0b:62:25:52:5c:5f:2b:31:c8: 7c:1b:66:cc:ee:5d:65:18:34:59:37:f2:43:22:ad:bd:5e:bd: 4f:b0:68:5a:bd:ee:f3:7d:ab:3c:58:51:79:6d:eb:e9:db:70: c6:a8:11:bd:40:61:61:5d:ef:26:98:a4:2f:52:91:c4:d9:a4: 21:43:3c:86:f3:74:d1:43:6b:0a:68:b7:20:15:ed:ea:a5:a8: 6b:3a:86:58:c5:e4:e7:48:4b:d8:3a:58:8c:68:2e:ad:21:01: 67:ef:68:66:17:2b:56:b4:aa:a4:50:f8:1c:a6:17:cd:3f:0a: 6f:df:56:c6:82:56:96:41:24:ac:2e:1b:27:bf:8a:33:d2:21: c8:17:46:ef:7d:8d:f3:37:73:d3:ea:bb:6e:4c:0b:a7:45:19: 7a:78:dc:95:a5:04:56:e0:2e:69:c2:c7:69:9a:10:44:76:1a: ae:46:84:97:3a:43:2b:dc:8e:8a:7a:eb:b4:1f:c3:db:87:30: 24:1f:32:be:7c:98:f8:a2:54:f1:21:7a:70:6f:54:82:9a:f4: 75:02:b5:69:b9:c8:5a:9d:47:fc:e0:56:16:72:85:05:e9:53: 50:a3:45:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUwNTA5MDEzNDAwWhcNMjUwNTE2MDEzNDAwWjAYMRYwFAYD VQQDEw02ODFkNWI4OC01NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHhqkhscTh16acmxDWN9Zay8om4ZpjlTvbPzfH/l4w8FpUz4zGQNf8FRrO6T UNw2h4LOpen7/s9x6Df2FuBkg3S7IKUJ3lrb1jlEvHtJaYsVjJT2JcWwgmD59m1S DaUxm1TykciCygwbologkHe6DIyCBA9soH3VNAQOBdBbfQKYtUXz4XYry1HVnfgf xE6Arq24CLhzjDTXH7INPEnR0P0VEJ6wTHTptBy72lIvcpldIAgD2BmCTSG6UMr/ 2tri4wJ/FoZk/6oe2cgS0Piafu514vlyNO7/YgXveMdPgUgH/8lcmITiO0slJitx T2N7GXeJu9vPLOskZsxXqHTl3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITRtIoy JNJEc9CQhITWAOrI/+gAMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbxeb+aEWeZfa0Xr7OM5eVUU3GHCmDQHSLhMYLYiVSXF8rMch8G2bM 7l1lGDRZN/JDIq29Xr1PsGhave7zfas8WFF5bevp23DGqBG9QGFhXe8mmKQvUpHE 2aQhQzyG83TRQ2sKaLcgFe3qpahrOoZYxeTnSEvYOliMaC6tIQFn72hmFytWtKqk UPgcphfNPwpv31bGglaWQSSsLhsnv4oz0iHIF0bvfY3zN3PT6rtuTAunRRl6eNyV pQRW4C5pwsdpmhBEdhquRoSXOkMr3I6Keuu0H8PbhzAkHzK+fJj4olTxIXpwb1SC mvR1ArVpuchanUf84FYWcoUF6VNQo0V4 -----END CERTIFICATE-----Generated at Sun May 11 02:05:35 2025 by rpki-client