$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: QpxClIJfnzRQ6vL1jc2I/fMJd5UR9MPBn9E4TjsDNKM= Subject key identifier: A8:8C:42:D7:AC:EB:59:28:E5:12:DE:F9:4D:7E:0A:76:B6:B3:49:B1 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CAE Signing time: Mon 12 May 2025 18:03:13 +0000 Manifest this update: Mon 12 May 2025 18:03:12 +0000 Manifest next update: Mon 19 May 2025 18:03:12 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: 6/cTAPEgl6R6uLTzbX7gO/LUUQuMN536Wy2uZeESsbM=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: pjQH54VRYOq5PMku0jKMJ5PyMS22lF1mGoeoJ8lvLEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: May 12 18:03:12 2025 GMT Not After : May 19 18:03:12 2025 GMT Subject: CN=682237e0-2080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:fa:e0:38:6e:52:42:da:a5:1f:15:3d:d6: d2:89:ee:28:7b:e2:c2:a3:cc:b7:74:c0:3a:4c:c7: 10:4d:54:68:bb:e9:3f:c7:97:8f:52:1c:f6:2e:7e: 90:98:b3:d0:bc:f4:87:6d:2c:a3:51:fb:0d:63:7a: d2:f5:3a:dd:2a:59:0d:f2:61:e8:7c:17:6b:97:8d: 13:1c:bb:6c:24:b1:6e:24:1c:2d:93:bb:09:8c:c4: c4:2f:85:da:6a:22:42:f9:bc:2a:ab:17:fc:0b:7e: 4e:ad:5e:54:39:92:a2:da:8a:51:ee:54:d1:7e:6b: b7:40:99:dc:1f:88:50:2a:57:52:ba:82:41:68:0a: df:60:20:f2:4b:4b:82:6f:be:88:b2:4b:c7:43:c8: db:06:bf:1c:1f:73:79:a7:53:4c:a7:13:2c:c6:4a: 51:ba:f1:a5:24:aa:0b:cb:48:f9:87:a6:8b:d0:b7: 70:20:7f:80:95:1c:94:b9:5e:31:78:11:ca:9a:af: 9f:24:91:bc:cf:45:31:2b:70:bb:33:2d:14:0a:9d: 8e:97:b9:b2:0e:61:4b:f6:89:7e:2d:43:2c:0f:1d: 94:a5:eb:ee:ba:f0:8f:4e:a9:d4:e6:6a:3b:e8:c9: 08:1d:bb:60:ca:c9:51:89:4f:44:c6:e7:ea:0e:cd: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:42:D7:AC:EB:59:28:E5:12:DE:F9:4D:7E:0A:76:B6:B3:49:B1 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2b:f8:af:ce:4f:1e:58:ed:fe:5c:64:ed:75:a3:3c:f9:e1: 54:c6:92:30:d1:67:01:55:ce:94:8b:b2:eb:82:e7:a5:3b:4f: 3c:56:42:f2:7a:33:9f:ae:0d:ba:66:a7:5e:ed:45:fb:1f:b0: f6:1c:6c:2c:c2:ce:2e:71:3d:dd:53:fe:f7:10:c6:e4:32:f4: 66:6a:88:28:ab:d6:57:1c:a7:56:fa:08:dd:c9:9f:9a:0e:20: db:eb:2f:54:4c:0a:d9:80:b3:63:c2:a3:7e:c7:01:2c:94:6f: fb:d3:a1:6b:c5:5b:3b:65:1a:74:b5:81:61:cc:92:a6:80:85: a7:2f:39:f6:c9:67:80:f8:5e:4e:43:42:7d:8d:2e:4d:39:95: e8:06:cc:9c:ed:a3:68:09:20:fa:91:b0:1a:45:f5:29:34:2a: ef:a5:cf:39:f8:c4:ae:10:cc:10:dd:3b:0e:0b:94:e1:c2:74: 04:12:95:f4:3c:66:bd:ed:b2:9e:3a:06:00:6e:a0:ed:1e:b9: ad:39:e0:56:e6:17:cb:52:22:1c:75:6c:49:6a:19:d1:fe:f1: c3:c1:d7:d5:16:6c:44:3a:8e:5f:5f:a2:88:5f:b5:6e:54:61: d1:36:64:3b:1d:d0:de:3b:14:3c:d8:0e:6f:27:0d:53:4c:2b: 2b:81:40:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwNTEyMTgwMzEyWhcNMjUwNTE5MTgwMzEyWjAYMRYwFAYD VQQDEw02ODIyMzdlMC0yMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsr64DhuUkLapR8VPdbSie4oe+LCo8y3dMA6TMcQTVRou+k/x5ePUhz2Ln6Q mLPQvPSHbSyjUfsNY3rS9TrdKlkN8mHofBdrl40THLtsJLFuJBwtk7sJjMTEL4Xa aiJC+bwqqxf8C35OrV5UOZKi2opR7lTRfmu3QJncH4hQKldSuoJBaArfYCDyS0uC b76IskvHQ8jbBr8cH3N5p1NMpxMsxkpRuvGlJKoLy0j5h6aL0LdwIH+AlRyUuV4x eBHKmq+fJJG8z0UxK3C7My0UCp2Ol7myDmFL9ol+LUMsDx2UpevuuvCPTqnU5mo7 6MkIHbtgyslRiU9ExufqDs3GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiMQtes 61ko5RLe+U1+Cna2s0mxMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMK/ivzk8eWO3+XGTtdaM8+eFUxpIw0WcBVc6Ui7LrguelO088VkLy ejOfrg26Zqde7UX7H7D2HGwsws4ucT3dU/73EMbkMvRmaogoq9ZXHKdW+gjdyZ+a DiDb6y9UTArZgLNjwqN+xwEslG/706FrxVs7ZRp0tYFhzJKmgIWnLzn2yWeA+F5O Q0J9jS5NOZXoBsyc7aNoCSD6kbAaRfUpNCrvpc85+MSuEMwQ3TsOC5ThwnQEEpX0 PGa97bKeOgYAbqDtHrmtOeBW5hfLUiIcdWxJahnR/vHDwdfVFmxEOo5fX6KIX7Vu VGHRNmQ7HdDeOxQ82A5vJw1TTCsrgUDZ -----END CERTIFICATE-----Generated at Mon May 12 22:34:25 2025 by rpki-client