$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: hjc6vMVghOzHmjxwm5t1kU7ps9i/fjr8/hPbPH0Ic/4= Subject key identifier: 01:9C:93:50:B1:35:9D:04:38:C2:24:52:88:3E:67:DF:3C:CD:6E:54 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 029E Signing time: Sun 11 May 2025 01:03:39 +0000 Manifest this update: Sun 11 May 2025 01:03:38 +0000 Manifest next update: Sun 18 May 2025 01:03:38 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: C1FeC2H8VfuXAw7O4es8aitVesLlV/wIK9D+FWezV1U=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: May 11 01:03:38 2025 GMT Not After : May 18 01:03:38 2025 GMT Subject: CN=681ff76a-1ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:12:30:bd:36:dc:3b:c4:4f:d9:5a:d8:1f: 16:30:8b:08:8e:d2:81:fe:8c:a6:32:a3:d0:4a:d5: ac:ef:22:65:c6:d9:4a:e3:b2:76:16:56:88:02:e9: 32:f6:c4:7f:e7:99:25:8b:2d:98:9f:87:71:ed:7c: c9:db:2b:7c:48:6a:d5:44:22:89:0f:67:e0:eb:d3: 90:eb:e3:1c:dd:e2:c1:d9:d6:1e:98:90:68:7d:f0: a2:0f:b4:e4:29:4a:70:73:14:1d:57:c8:0a:57:cd: 71:55:93:42:56:21:42:f0:7c:8c:a1:3c:a9:8f:1c: 8b:f8:41:6e:98:d4:3d:21:8b:d0:d1:4a:67:fd:95: 5a:c2:56:ac:72:60:e5:7f:38:ce:13:fe:ad:2a:43: 93:d0:2d:27:ec:1f:0f:3b:9d:c9:8a:1a:f4:fe:21: ff:fe:91:48:02:03:1e:58:21:d7:bf:94:cb:17:a7: 9b:d4:a1:b3:90:16:76:96:7a:fb:19:1d:16:eb:72: b6:f8:ce:73:8a:3c:84:a2:be:30:d8:83:ac:e3:49: f7:19:1e:4b:61:88:9a:ac:6c:73:52:2a:ee:ed:67: 4d:8b:79:dd:72:b5:df:d9:7c:1f:87:34:2b:e9:58: 00:97:67:3c:15:b6:f2:e5:7c:5c:b8:2a:5a:6f:97: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9C:93:50:B1:35:9D:04:38:C2:24:52:88:3E:67:DF:3C:CD:6E:54 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:05:82:93:bd:93:f8:ed:56:cf:ae:9b:c3:8a:4c:30:07:ab: 60:3b:91:1d:4f:3a:a0:27:68:62:10:b9:c4:eb:00:02:47:b3: 8b:3f:80:42:12:d0:3e:90:c9:4a:d0:72:77:16:29:1b:f6:78: e7:64:90:aa:7c:f2:19:43:03:0a:c4:56:6f:56:44:e4:04:b0: 25:4c:b1:33:38:8d:1e:73:d1:ae:d8:03:60:ed:73:4e:43:7f: bb:6d:55:0f:d6:dd:46:ff:fd:98:f9:c0:51:65:8c:f4:23:a0: 47:de:1a:76:7a:9c:cf:5e:3a:9f:d2:a3:26:24:ae:03:f7:b3: a8:1a:d4:03:eb:bd:ef:f8:32:db:5a:45:8e:5f:56:23:df:0d: dc:bb:48:20:35:fa:a1:98:1c:e7:af:7a:3f:54:56:38:4e:6f: 7d:90:08:bd:d7:91:5c:2e:95:13:06:9b:92:f5:4b:9b:73:c9: 5a:0f:21:69:37:c5:b8:7d:30:4a:5b:24:f6:d2:38:8b:87:70: 2b:67:02:40:8f:af:82:af:fd:88:a9:2e:1b:9a:67:c9:e2:61: 02:29:0d:12:5a:f1:5e:ff:57:bb:f5:f6:c0:38:d8:3e:c8:a6: 7c:01:79:5c:cb:41:46:02:ff:4b:83:f9:6f:6b:73:91:cc:1d: 1a:ba:15:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNTExMDEwMzM4WhcNMjUwNTE4MDEwMzM4WjAYMRYwFAYD VQQDEw02ODFmZjc2YS0xZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLsSML023DvET9la2B8WMIsIjtKB/oymMqPQStWs7yJlxtlK47J2FlaIAuky 9sR/55kliy2Yn4dx7XzJ2yt8SGrVRCKJD2fg69OQ6+Mc3eLB2dYemJBoffCiD7Tk KUpwcxQdV8gKV81xVZNCViFC8HyMoTypjxyL+EFumNQ9IYvQ0Upn/ZVawlascmDl fzjOE/6tKkOT0C0n7B8PO53Jihr0/iH//pFIAgMeWCHXv5TLF6eb1KGzkBZ2lnr7 GR0W63K2+M5zijyEor4w2IOs40n3GR5LYYiarGxzUiru7WdNi3ndcrXf2XwfhzQr 6VgAl2c8Fbby5XxcuCpab5exnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGck1Cx NZ0EOMIkUog+Z988zW5UMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkBYKTvZP47VbPrpvDikwwB6tgO5EdTzqgJ2hiELnE6wACR7OLP4BC EtA+kMlK0HJ3Fikb9njnZJCqfPIZQwMKxFZvVkTkBLAlTLEzOI0ec9Gu2ANg7XNO Q3+7bVUP1t1G//2Y+cBRZYz0I6BH3hp2epzPXjqf0qMmJK4D97OoGtQD673v+DLb WkWOX1Yj3w3cu0ggNfqhmBznr3o/VFY4Tm99kAi915FcLpUTBpuS9Uubc8laDyFp N8W4fTBKWyT20jiLh3ArZwJAj6+Cr/2IqS4bmmfJ4mECKQ0SWvFe/1e79fbAONg+ yKZ8AXlcy0FGAv9Lg/lva3ORzB0auhXD -----END CERTIFICATE-----Generated at Tue May 13 02:38:17 2025 by rpki-client