$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: HdVgLw+dPWi4x2hNZG/kWgd6tiC/3CYTG7T3vZ8jY9Q= Subject key identifier: B4:25:57:9C:69:9D:CA:74:13:46:BA:E2:05:A6:E7:37:E7:9E:4F:49 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 074C Signing time: Mon 12 May 2025 21:26:44 +0000 Manifest this update: Mon 12 May 2025 21:26:44 +0000 Manifest next update: Mon 19 May 2025 21:26:44 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: W5E1D6h89ZdIxHgd1lnIhs2JeCHHNtHYLRYlqDkBm2g=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: JZswEN+XecxArpSSM4RVMDRfDgGMw001dDeS9M+57zo=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: oEPtlYq/nXMulTOfDIA15K7NQ6WPK/Aw89/ToBV4eiI=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: a7MdMxFeYrNOuayo2yExYYUNllObfBGwl1IXCgsh4ko=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: May 12 21:26:44 2025 GMT Not After : May 19 21:26:44 2025 GMT Subject: CN=68226794-bb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:6e:be:3e:7c:a4:4d:37:f4:48:3e:4e:68: 36:36:62:3c:2a:69:04:aa:99:7e:e0:08:da:64:8a: f1:48:b2:5f:52:d3:dd:e8:dd:95:02:1f:d8:f9:2d: a1:3d:80:4e:c0:9a:9a:65:85:b0:e3:3c:37:59:d8: 82:e1:ff:79:e5:e7:83:79:47:ba:8f:87:73:cd:33: 1f:10:ef:d3:4a:db:47:76:8b:ac:27:7f:23:30:21: e3:d5:6e:2b:30:11:a6:be:8b:49:b6:3a:89:d0:08: 7e:42:3e:63:dd:ae:cb:9f:e4:6f:c4:e3:02:0b:3a: 70:30:6d:d4:2c:41:b6:e8:8d:98:b0:2b:38:db:e9: 55:38:ea:02:b3:80:18:a5:84:9a:13:a9:65:d8:87: 67:92:25:8e:6b:f3:70:79:42:9e:e3:06:20:5d:47: 78:c6:6c:30:ac:60:68:59:dd:57:61:b5:65:9b:f0: 70:ef:68:b4:16:b2:34:6a:da:a1:0d:6b:19:c1:73: 66:ee:2c:dd:0d:51:70:a3:f0:f7:ba:60:b0:74:d6: b0:06:80:90:f1:0e:5a:d5:77:51:89:3a:33:e2:72: 76:eb:d7:e0:75:a3:77:e0:c0:7e:33:64:6b:fb:7a: 9d:e8:08:1a:c2:4e:ec:e0:2f:f7:87:9d:2a:af:d5: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:57:9C:69:9D:CA:74:13:46:BA:E2:05:A6:E7:37:E7:9E:4F:49 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c0:87:c6:47:0b:06:eb:24:6d:36:40:a6:ee:79:6c:a0:3f: 04:65:69:8e:d8:c3:39:f1:a3:74:8a:55:b2:f2:5e:67:6b:85: dd:89:cf:d6:d5:1c:3a:8a:ad:5c:7f:89:96:8b:97:54:67:a5: ad:e7:c8:e3:41:83:e6:87:95:2d:c3:a4:f1:e9:16:71:5b:9c: 2f:0a:f8:05:48:4b:1a:e1:54:47:66:7c:2d:d2:c5:80:68:b6: 8c:e0:02:9b:92:c4:47:f6:64:71:1b:a3:d8:f1:ae:5f:8b:80: 91:db:c1:f1:b7:41:10:2c:61:9e:b8:cd:82:49:53:3e:40:16: be:1a:dc:57:ce:64:cd:14:b1:eb:4c:fc:0e:a3:98:06:d6:92: 9a:44:e3:8f:a3:87:b1:4c:cb:da:21:b1:3f:58:33:85:61:fe: fa:37:26:8f:25:57:e0:9c:99:a8:55:ce:c5:c9:bd:f8:37:71: 7d:57:67:76:1b:45:df:02:2d:09:47:65:28:ec:79:63:3e:0e: 76:29:db:c5:ec:ac:5b:37:34:22:fe:fb:ae:82:54:07:17:9a: 49:66:c8:21:93:95:52:9e:61:76:65:29:6b:5b:b5:fa:3b:ee: c5:4d:77:b5:b9:37:1e:39:19:f4:a5:8d:9c:72:7f:6e:b5:b4: e9:fa:59:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUwNTEyMjEyNjQ0WhcNMjUwNTE5MjEyNjQ0WjAYMRYwFAYD VQQDEw02ODIyNjc5NC1iYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjtuvj58pE039Eg+Tmg2NmI8KmkEqpl+4AjaZIrxSLJfUtPd6N2VAh/Y+S2h PYBOwJqaZYWw4zw3WdiC4f955eeDeUe6j4dzzTMfEO/TSttHdousJ38jMCHj1W4r MBGmvotJtjqJ0Ah+Qj5j3a7Ln+RvxOMCCzpwMG3ULEG26I2YsCs42+lVOOoCs4AY pYSaE6ll2IdnkiWOa/NweUKe4wYgXUd4xmwwrGBoWd1XYbVlm/Bw72i0FrI0atqh DWsZwXNm7izdDVFwo/D3umCwdNawBoCQ8Q5a1XdRiToz4nJ269fgdaN34MB+M2Rr +3qd6Agawk7s4C/3h50qr9UHJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQlV5xp ncp0E0a64gWm5zfnnk9JMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcwIfGRwsG6yRtNkCm7nlsoD8EZWmO2MM58aN0ilWy8l5na4Xdic/W 1Rw6iq1cf4mWi5dUZ6Wt58jjQYPmh5Utw6Tx6RZxW5wvCvgFSEsa4VRHZnwt0sWA aLaM4AKbksRH9mRxG6PY8a5fi4CR28Hxt0EQLGGeuM2CSVM+QBa+GtxXzmTNFLHr TPwOo5gG1pKaROOPo4exTMvaIbE/WDOFYf76NyaPJVfgnJmoVc7Fyb34N3F9V2d2 G0XfAi0JR2Uo7HljPg52KdvF7KxbNzQi/vuuglQHF5pJZsghk5VSnmF2ZSlrW7X6 O+7FTXe1uTceORn0pY2ccn9utbTp+lk2 -----END CERTIFICATE-----Generated at Wed May 14 08:10:15 2025 by rpki-client