$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: NLR58vGbj4BkOiQcb8tkx7KtLGnxctzGcj/GgP+EPcs= Subject key identifier: A2:DD:40:05:34:81:45:56:70:6C:2E:B7:1F:B3:BE:4D:2C:9E:8F:20 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: C9 Signing time: Tue 13 May 2025 05:05:30 +0000 Manifest this update: Tue 13 May 2025 05:05:29 +0000 Manifest next update: Tue 20 May 2025 05:05:29 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: Nf6Ev8WHimG27HHyAAspBty1k1PO8Uwci+Zb2Rve/9k=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: May 13 05:05:29 2025 GMT Not After : May 20 05:05:29 2025 GMT Subject: CN=6822d31a-3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:36:1f:62:63:a0:7a:2a:49:5e:cf:31:d3: 98:d1:79:36:d8:c0:f5:21:d3:70:63:02:c8:79:de: 6e:5d:04:99:a8:86:fd:e1:81:91:6d:ac:55:6d:dd: b2:21:73:3a:b3:d7:2e:af:39:7b:eb:3b:c8:57:ca: 6f:c2:0b:c4:2b:25:30:eb:7a:56:09:ac:81:2d:e4: 24:b9:14:ba:4e:ea:ba:c2:66:61:d8:c7:3a:d6:56: db:8a:e3:9e:51:62:86:af:b8:bf:85:5c:4c:2d:2e: 08:41:22:77:8c:9a:24:95:20:10:99:8d:39:8f:ad: d9:11:fd:bb:40:74:e6:e0:48:9e:d2:49:b1:55:46: f5:21:e1:46:4c:ca:de:48:3f:c7:67:65:c1:65:df: 32:44:13:03:b3:06:aa:55:f3:2b:eb:e0:48:24:09: b3:ab:80:0b:8a:e5:02:cb:9a:b0:2f:2e:83:df:78: 5c:84:fc:6d:45:d3:e0:86:80:fd:7c:81:b7:29:2f: fb:72:d9:e2:ec:02:1d:09:1d:cc:8d:29:30:00:fe: 64:09:31:ab:b5:ee:50:c7:29:57:15:d1:cd:da:aa: 0b:6a:47:8a:3d:25:4e:01:77:8f:af:60:02:a5:83: 6c:ac:78:a6:0e:68:4d:96:d6:a8:f7:c8:76:e8:d2: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DD:40:05:34:81:45:56:70:6C:2E:B7:1F:B3:BE:4D:2C:9E:8F:20 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8c:c7:55:87:15:bf:a0:8a:9b:6c:94:cd:25:85:7f:eb:b0: 8a:8d:43:ca:6a:6a:b0:60:2c:6c:29:5b:2b:c6:5e:56:50:02: 22:bd:3d:82:54:1b:ca:fa:0a:af:10:66:58:fe:e4:ed:61:8b: b7:4e:58:dc:6f:42:56:e8:ac:ca:25:4d:c9:26:a0:0d:c6:a0: 5e:df:ff:8f:60:86:22:c7:98:7c:c6:4b:40:cd:69:70:a3:dc: b7:4f:ca:fc:e0:f9:0e:dc:35:73:32:1f:5d:d0:4b:72:fb:26: 49:91:2e:2b:6b:ba:22:ed:90:9c:cb:ba:d9:c3:af:aa:e5:92: 45:aa:48:a0:23:0c:22:48:5a:66:41:7e:3a:7f:c2:bd:ba:d8: 67:10:75:58:dd:93:81:c4:54:e7:53:10:cd:7e:91:57:c3:8e: 2d:5e:1a:b2:6b:8b:05:5c:b3:69:a2:39:79:de:55:a3:80:ce: 8d:0a:1d:ca:60:bf:eb:3e:79:6f:d4:80:b5:02:c7:c6:65:26: d3:de:7b:16:02:93:f7:f8:3e:6f:16:fa:21:3b:79:a9:06:a1: 6b:00:63:ce:38:d1:a3:4e:c2:60:19:45:c3:79:e9:46:df:01: 4e:27:4c:0a:5e:f7:54:2e:0a:31:8b:62:26:39:59:62:c8:6d: 02:6f:a3:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUwNTEzMDUwNTI5WhcNMjUwNTIwMDUwNTI5WjAYMRYwFAYD VQQDEw02ODIyZDMxYS0zMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwA2H2JjoHoqSV7PMdOY0Xk22MD1IdNwYwLIed5uXQSZqIb94YGRbaxVbd2y IXM6s9curzl76zvIV8pvwgvEKyUw63pWCayBLeQkuRS6Tuq6wmZh2Mc61lbbiuOe UWKGr7i/hVxMLS4IQSJ3jJoklSAQmY05j63ZEf27QHTm4Eie0kmxVUb1IeFGTMre SD/HZ2XBZd8yRBMDswaqVfMr6+BIJAmzq4ALiuUCy5qwLy6D33hchPxtRdPghoD9 fIG3KS/7ctni7AIdCR3MjSkwAP5kCTGrte5QxylXFdHN2qoLakeKPSVOAXePr2AC pYNsrHimDmhNltao98h26NIefQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLdQAU0 gUVWcGwutx+zvk0sno8gMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUjMdVhxW/oIqbbJTNJYV/67CKjUPKamqwYCxsKVsrxl5WUAIivT2C VBvK+gqvEGZY/uTtYYu3Tljcb0JW6KzKJU3JJqANxqBe3/+PYIYix5h8xktAzWlw o9y3T8r84PkO3DVzMh9d0Ety+yZJkS4ra7oi7ZCcy7rZw6+q5ZJFqkigIwwiSFpm QX46f8K9uthnEHVY3ZOBxFTnUxDNfpFXw44tXhqya4sFXLNpojl53lWjgM6NCh3K YL/rPnlv1IC1AsfGZSbT3nsWApP3+D5vFvohO3mpBqFrAGPOONGjTsJgGUXDeelG 3wFOJ0wKXvdULgoxi2ImOVliyG0Cb6Oj -----END CERTIFICATE-----Generated at Tue May 13 09:15:27 2025 by rpki-client