$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: 5DiKjH4Oan5PrhAGyYpys8cPrrTP11bv1ptqzCD3/cg= Subject key identifier: 3B:B1:57:95:D0:D4:A9:37:85:DB:2C:AA:D5:B1:1A:F5:2B:1E:09:2C Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 064A Signing time: Sat 10 May 2025 22:16:11 +0000 Manifest this update: Sat 10 May 2025 22:16:11 +0000 Manifest next update: Sat 17 May 2025 22:16:11 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: GkW2V52t/xph5mnKUkMu/VXp0gcp8++OTrznr/hJ4Bo=) 2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=) 3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: May 10 22:16:11 2025 GMT Not After : May 17 22:16:11 2025 GMT Subject: CN=681fd02b-5f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:37:26:65:8f:7c:e2:4a:94:19:28:03:4e: 95:8e:78:8a:2a:b0:38:1b:d5:6a:ac:5e:f7:7d:3a: 6a:e9:24:ce:ab:9e:d2:62:76:76:39:74:5e:16:20: 9e:2c:86:c9:a0:ff:99:28:c2:40:30:36:4b:a0:23: 02:fe:e0:31:c9:6f:c9:20:2b:3b:41:32:22:36:33: dc:2a:3d:24:07:74:ed:c1:5f:9c:00:8a:f6:ff:b0: 29:95:ef:bb:d6:d3:28:d3:00:ad:a2:bf:61:d0:54: d9:51:44:39:80:aa:8d:7f:93:40:74:d9:c6:e2:6f: 3a:35:a2:6b:95:bb:ab:b7:4d:82:45:db:fb:9b:c4: ff:46:4f:83:e1:8a:a1:23:9a:df:72:b6:e7:df:b8: d4:8b:86:9d:8e:f1:a9:1f:4a:82:63:70:72:89:72: d8:ae:38:fd:07:16:2f:09:b5:20:06:67:c9:e6:2b: dc:9b:2f:e6:c2:3d:10:9c:6f:f2:7b:f5:8f:f7:99: 68:d1:6d:05:f4:ec:c8:61:cd:29:5d:f6:08:3a:6d: cd:1b:a6:51:02:66:cf:23:69:57:35:57:d7:52:51: c4:29:06:fa:1d:d1:a9:77:92:16:74:31:24:f8:c4: a8:3b:55:e2:de:33:10:d8:e6:59:a4:a7:ec:0e:1f: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B1:57:95:D0:D4:A9:37:85:DB:2C:AA:D5:B1:1A:F5:2B:1E:09:2C X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:34:0a:23:32:7e:9c:86:0d:f0:41:90:62:0e:42:4b:ea:89: 6e:81:37:d0:40:45:0a:bc:d7:f7:e1:14:60:ca:ef:05:92:fc: 70:98:32:3c:ec:c3:7c:ba:43:e6:7b:41:56:52:ff:8e:48:f3: 83:91:f9:8d:3b:25:c6:d6:5a:f3:5c:12:d5:38:ca:06:8a:e3: a7:2a:be:dc:ea:58:0a:9f:6b:2b:4b:0d:9b:f5:95:9b:71:f6: 44:a5:76:db:82:75:55:78:30:13:58:85:c1:f6:26:64:8d:0e: de:29:e3:f4:b4:03:1e:ed:e8:01:62:4b:b4:0c:9b:3e:01:81: 5a:db:8c:e4:8c:4b:a6:49:0c:f8:9f:16:0d:3d:14:ac:f4:de: d8:40:a8:38:23:c0:fc:55:b6:07:85:ea:cd:cc:08:0d:c5:e0: 09:6f:2b:24:e7:dc:f6:6a:d8:c1:5c:e8:f1:90:a2:b8:68:4e: 35:89:c5:f4:90:7a:26:bb:71:a9:9d:8f:a4:ec:64:a7:0a:73: 89:f3:06:b3:fe:e0:64:4b:62:0d:ae:7b:9e:8c:d9:f6:66:c3: 39:9d:21:7a:58:6a:bb:0f:f4:41:46:b2:78:1b:64:20:bf:3d: 17:7e:41:36:35:0e:32:c4:b9:66:e1:8d:0b:98:7b:46:93:60: aa:09:b3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUwNTEwMjIxNjExWhcNMjUwNTE3MjIxNjExWjAYMRYwFAYD VQQDEw02ODFmZDAyYi01ZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHA3JmWPfOJKlBkoA06VjniKKrA4G9VqrF73fTpq6STOq57SYnZ2OXReFiCe LIbJoP+ZKMJAMDZLoCMC/uAxyW/JICs7QTIiNjPcKj0kB3TtwV+cAIr2/7Aple+7 1tMo0wCtor9h0FTZUUQ5gKqNf5NAdNnG4m86NaJrlburt02CRdv7m8T/Rk+D4Yqh I5rfcrbn37jUi4adjvGpH0qCY3ByiXLYrjj9BxYvCbUgBmfJ5ivcmy/mwj0QnG/y e/WP95lo0W0F9OzIYc0pXfYIOm3NG6ZRAmbPI2lXNVfXUlHEKQb6HdGpd5IWdDEk +MSoO1Xi3jMQ2OZZpKfsDh9waQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuxV5XQ 1Kk3hdssqtWxGvUrHgksMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4NAojMn6chg3wQZBiDkJL6olugTfQQEUKvNf34RRgyu8FkvxwmDI8 7MN8ukPme0FWUv+OSPODkfmNOyXG1lrzXBLVOMoGiuOnKr7c6lgKn2srSw2b9ZWb cfZEpXbbgnVVeDATWIXB9iZkjQ7eKeP0tAMe7egBYku0DJs+AYFa24zkjEumSQz4 nxYNPRSs9N7YQKg4I8D8VbYHherNzAgNxeAJbysk59z2atjBXOjxkKK4aE41icX0 kHomu3GpnY+k7GSnCnOJ8waz/uBkS2INrnuejNn2ZsM5nSF6WGq7D/RBRrJ4G2Qg vz0XfkE2NQ4yxLlm4Y0LmHtGk2CqCbOs -----END CERTIFICATE-----Generated at Sun May 11 15:54:46 2025 by rpki-client