$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: WFnZFZnuNAmFK1b4+M3Yuk1O58kdpAKlzFfP5x1Tp7g= Subject key identifier: 0F:ED:89:84:F7:D5:80:25:65:A3:D8:15:F8:B8:AC:EC:67:F1:01:34 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 010E Signing time: Tue 13 May 2025 04:38:07 +0000 Manifest this update: Tue 13 May 2025 04:38:06 +0000 Manifest next update: Tue 20 May 2025 04:38:06 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: Ow1i1LAo1lF4R4FZ3xJY3euwbJbGLrZLAhhy++6RIIk=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: MOt4/rtczZ2XuWNA4OgwbPaAH6x2sV9WPLPyaiDEfR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: May 13 04:38:06 2025 GMT Not After : May 20 04:38:06 2025 GMT Subject: CN=6822ccae-1ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:cb:25:bb:64:21:84:88:91:1e:1a:05:df: c5:06:14:37:da:f5:31:e8:f6:c5:7f:f0:9d:eb:cd: b6:92:57:cc:e9:81:aa:42:00:fe:db:ad:73:33:a5: ed:b8:14:8c:9e:ce:e8:0a:d0:93:87:b6:d3:2e:0b: 86:cd:4b:bc:1d:34:74:bc:be:3a:01:7e:42:25:eb: 55:a0:20:d0:b7:52:25:b7:31:cb:a7:be:5c:54:38: 47:cb:5e:6f:95:8d:5f:1b:c4:b9:42:1e:15:a6:d0: 58:1e:89:29:47:fc:44:49:87:2a:60:f0:c9:09:03: c1:83:1a:e1:e0:7e:6d:dd:79:cd:bf:14:2d:b7:07: a4:05:be:c5:9c:7a:07:f7:ac:ae:d6:41:05:16:ed: 94:db:74:85:85:6a:5d:9b:b6:96:ed:b5:15:ca:1e: e9:2f:dc:93:9d:d3:a0:0f:87:9a:1e:a8:99:d1:a7: 25:68:5b:3f:06:84:72:37:04:6f:e1:99:47:94:f3: 80:02:59:69:f0:4c:8b:df:22:66:78:57:ce:e7:cb: 73:50:e1:b6:c8:de:90:1c:a8:bc:1e:8d:1a:03:4e: 7d:b7:14:31:f5:a2:cd:dc:a3:b1:68:e3:40:4a:be: f4:20:d1:e7:2e:4b:4b:2a:34:90:01:23:5a:0b:29: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:89:84:F7:D5:80:25:65:A3:D8:15:F8:B8:AC:EC:67:F1:01:34 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:d6:c2:1f:e6:c5:98:f1:50:c4:8e:d8:7e:69:e0:b1:06: 93:47:81:c4:b8:56:11:9f:c7:75:08:0c:e7:69:17:c7:75:93: 97:cb:6a:9a:20:22:57:e0:42:c6:7a:c0:07:41:8d:f0:df:98: 31:50:d8:e6:43:50:ae:c9:fd:0c:0b:68:24:63:8f:e3:15:7e: 73:03:6a:4a:e3:25:89:e8:e8:12:a8:76:56:1e:57:05:f8:63: a3:6c:05:64:29:0e:d6:82:f0:9d:08:31:74:56:64:f2:9a:9b: 89:7c:2f:2d:2f:0e:94:91:0f:18:d0:1e:f1:72:8f:76:93:44: 81:1b:70:97:f8:bd:30:19:22:4a:41:05:f6:1a:35:83:33:e6: f2:30:26:9b:f3:98:ba:fc:38:82:28:00:fd:f5:ad:d5:93:bf: da:76:f4:01:eb:4b:07:4e:90:1c:19:1d:4e:ba:9b:29:10:43: e9:73:86:8d:17:83:8e:b6:ee:9f:f8:35:7f:f0:33:7f:1f:97: 05:d1:88:89:f0:f2:2c:34:ba:42:f0:c7:ec:37:48:d0:9f:d7: b7:cd:d0:2a:c3:9d:c8:b1:fc:2f:a0:df:57:40:53:a7:53:84: 24:c8:3d:36:3a:15:db:bd:61:49:9d:04:c3:a3:45:9d:54:d4: 72:01:35:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjUwNTEzMDQzODA2WhcNMjUwNTIwMDQzODA2WjAYMRYwFAYD VQQDEw02ODIyY2NhZS0xZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4TLJbtkIYSIkR4aBd/FBhQ32vUx6PbFf/Cd6822klfM6YGqQgD+261zM6Xt uBSMns7oCtCTh7bTLguGzUu8HTR0vL46AX5CJetVoCDQt1IltzHLp75cVDhHy15v lY1fG8S5Qh4VptBYHokpR/xESYcqYPDJCQPBgxrh4H5t3XnNvxQttwekBb7FnHoH 96yu1kEFFu2U23SFhWpdm7aW7bUVyh7pL9yTndOgD4eaHqiZ0aclaFs/BoRyNwRv 4ZlHlPOAAllp8EyL3yJmeFfO58tzUOG2yN6QHKi8Ho0aA059txQx9aLN3KOxaONA Sr70INHnLktLKjSQASNaCykpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/tiYT3 1YAlZaPYFfi4rOxn8QE0MB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl19bCH+bFmPFQxI7YfmngsQaTR4HEuFYRn8d1CAznaRfHdZOXy2qa ICJX4ELGesAHQY3w35gxUNjmQ1Cuyf0MC2gkY4/jFX5zA2pK4yWJ6OgSqHZWHlcF +GOjbAVkKQ7WgvCdCDF0VmTympuJfC8tLw6UkQ8Y0B7xco92k0SBG3CX+L0wGSJK QQX2GjWDM+byMCab85i6/DiCKAD99a3Vk7/advQB60sHTpAcGR1OupspEEPpc4aN F4OOtu6f+DV/8DN/H5cF0YiJ8PIsNLpC8MfsN0jQn9e3zdAqw53IsfwvoN9XQFOn U4QkyD02OhXbvWFJnQTDo0WdVNRyATVf -----END CERTIFICATE-----Generated at Wed May 14 00:37:53 2025 by rpki-client