$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: Ufwl6Y1UsLZJOLxuz6annE9x0tMTazwKl68XrtwUHMA= Subject key identifier: 09:E2:AB:8D:BC:2D:49:B7:86:2C:F1:62:59:80:2E:73:BE:E7:44:3C Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: E5 Signing time: Sun 11 May 2025 04:14:39 +0000 Manifest this update: Sun 11 May 2025 04:14:39 +0000 Manifest next update: Sun 18 May 2025 04:14:39 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: mPqW5P4ZlUxvhqRaN3oluTVWqAifc2Pbb8UqmFhfvq4=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: May 11 04:14:39 2025 GMT Not After : May 18 04:14:39 2025 GMT Subject: CN=6820242f-352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:46:5f:99:c0:a8:7a:e1:03:f2:a4:ad:1b: b5:de:56:af:0f:5b:b9:b0:c6:8b:8e:2d:8f:95:7e: 9a:80:4e:25:fe:c4:bc:02:03:ed:ad:c5:21:9b:8e: 86:9c:e2:d3:14:54:c0:83:b4:06:a5:24:a9:b2:90: 95:dc:cd:9f:59:64:80:43:36:82:fb:68:77:46:51: 3a:4c:05:d6:13:00:44:5b:13:0b:f1:04:85:41:db: 40:7a:07:50:cf:ac:77:3c:99:08:69:dc:40:6d:75: 37:55:32:c4:ad:54:2b:57:7a:03:4c:27:f0:5f:41: 4c:ee:ed:6d:d8:f3:7b:ef:cc:9e:24:79:e3:10:24: b7:c3:09:ab:43:f9:ba:36:b1:de:ec:f1:7c:44:d5: 54:7b:16:a1:60:a4:f2:0b:6f:88:6c:ef:dd:87:2b: 3d:5a:63:77:bb:a9:fc:2f:a2:69:1b:b3:85:12:1f: 62:b9:22:ef:6f:49:82:c5:25:6b:e5:84:09:49:17: 10:32:63:52:61:39:a6:77:a6:30:fa:5e:40:2e:b9: c1:73:f4:72:c6:5a:bc:6e:0e:99:53:35:3a:fd:2f: ba:e3:2e:3c:a2:88:ae:23:1e:42:0b:be:69:2b:35: 31:85:f6:97:45:2d:7d:62:e8:0a:38:77:e9:a3:95: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E2:AB:8D:BC:2D:49:B7:86:2C:F1:62:59:80:2E:73:BE:E7:44:3C X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:06:10:d7:f3:94:5d:dc:fa:b5:3c:eb:a7:e0:8b:79:cc: c8:5b:7c:2c:ed:2f:08:9f:15:f3:65:a0:54:60:32:97:fe:1c: 6e:63:01:56:91:56:ce:45:38:16:ef:4b:36:97:50:c5:c0:5e: 45:1e:5b:c0:ad:03:b6:fe:e6:bf:e1:d3:86:22:25:5f:42:67: 99:27:8a:39:9c:90:e1:fe:4d:62:bf:45:f0:b9:78:6e:89:16: 21:f7:f8:19:7c:43:e7:94:06:0e:9b:0b:e1:bc:28:c6:50:a9: ab:61:4b:42:7f:f0:7c:fb:2b:7e:38:a6:24:ab:55:2a:a9:6c: d8:52:3e:58:78:d6:28:4a:a9:43:01:1e:4d:5d:06:e8:fd:42: 17:4d:f5:1f:84:b9:ad:34:1f:c2:00:de:07:89:6c:46:97:49: 80:6f:b5:f6:03:34:3c:dd:5d:6e:66:40:e9:1b:e8:fb:64:fe: bd:1e:1a:f0:a8:a9:73:2c:e9:5b:08:05:1d:88:05:ad:61:ed: b9:83:ea:05:57:c7:b3:c9:60:df:fc:12:62:e4:1f:2e:7b:7d: 79:9e:57:a0:67:c4:be:63:45:e1:a8:ad:40:c1:cb:61:d1:8c: 77:31:3f:98:e1:aa:2b:86:4d:03:5a:9d:4f:45:d8:99:ad:14: 80:a5:f7:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUwNTExMDQxNDM5WhcNMjUwNTE4MDQxNDM5WjAYMRYwFAYD VQQDEw02ODIwMjQyZi0zNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8ZGX5nAqHrhA/KkrRu13lavD1u5sMaLji2PlX6agE4l/sS8AgPtrcUhm46G nOLTFFTAg7QGpSSpspCV3M2fWWSAQzaC+2h3RlE6TAXWEwBEWxML8QSFQdtAegdQ z6x3PJkIadxAbXU3VTLErVQrV3oDTCfwX0FM7u1t2PN778yeJHnjECS3wwmrQ/m6 NrHe7PF8RNVUexahYKTyC2+IbO/dhys9WmN3u6n8L6JpG7OFEh9iuSLvb0mCxSVr 5YQJSRcQMmNSYTmmd6Yw+l5ALrnBc/Ryxlq8bg6ZUzU6/S+64y48ooiuIx5CC75p KzUxhfaXRS19YugKOHfpo5WaFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAniq428 LUm3hizxYlmALnO+50Q8MB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZTQYQ1/OUXdz6tTzrp+CLeczIW3ws7S8InxXzZaBUYDKX/hxuYwFW kVbORTgW70s2l1DFwF5FHlvArQO2/ua/4dOGIiVfQmeZJ4o5nJDh/k1iv0XwuXhu iRYh9/gZfEPnlAYOmwvhvCjGUKmrYUtCf/B8+yt+OKYkq1UqqWzYUj5YeNYoSqlD AR5NXQbo/UIXTfUfhLmtNB/CAN4HiWxGl0mAb7X2AzQ83V1uZkDpG+j7ZP69Hhrw qKlzLOlbCAUdiAWtYe25g+oFV8ezyWDf/BJi5B8ue315nlegZ8S+Y0XhqK1Awcth 0Yx3MT+Y4aorhk0DWp1PRdiZrRSApfeN -----END CERTIFICATE-----Generated at Tue May 13 01:24:53 2025 by rpki-client