$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json) Hash identifier: CA6WAOW25zBruAJJ5q30H82JYT0LK6Sxkqt8J3WpODM= Subject key identifier: B3:BF:C0:2D:64:05:BC:F1:A2:97:08:D3:77:9D:B8:FE:E8:FC:1D:A9 Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft Manifest number: 0844 Signing time: Thu 08 May 2025 20:38:29 +0000 Manifest this update: Thu 08 May 2025 20:38:29 +0000 Manifest next update: Thu 15 May 2025 20:38:29 +0000 Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: D26m43AHNgTZLzc6r/6DqQXAviK3rmlvK+86djlF7MU=) 2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UBw2PoTevAndZcrQq8icn0bOX1+H9RUk7B/v/OivD1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: May 8 20:38:29 2025 GMT Not After : May 15 20:38:29 2025 GMT Subject: CN=681d1645-5740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:c7:e4:12:0a:b3:b7:91:bf:98:aa:43:b2: 72:0a:16:f4:48:13:5e:82:ff:d4:eb:bd:29:31:c4: 9e:d1:a7:04:f4:ba:35:68:8e:17:9c:76:88:7d:2d: 9e:e4:ab:a1:7e:23:c0:e5:be:3b:8e:c0:71:ee:7a: 61:ec:39:34:48:61:5e:65:96:40:9a:17:de:f2:e8: 9c:db:a6:1c:3c:aa:c6:ef:16:e4:69:58:13:e2:ad: 4a:57:ac:4d:b8:30:36:a8:d2:17:56:ec:1e:12:1c: f4:f4:f8:a9:c2:52:dd:b2:4d:9c:72:12:b4:f0:d8: db:e8:b2:b1:f4:ef:93:fb:1e:2c:cc:30:35:e5:66: 8e:00:5b:3c:d7:50:bf:4c:23:d5:eb:a7:d0:9f:32: ad:13:82:cf:c5:6f:ba:8e:40:84:28:bb:7e:67:6e: 97:ef:2c:27:f9:3a:b0:e6:91:96:dc:24:2c:75:eb: c1:30:cb:96:18:1e:ee:ed:cd:03:9d:7f:4d:f2:e0: fe:1a:d4:45:c4:e7:81:d5:37:46:6c:cf:db:12:1a: 77:03:b8:1c:9e:df:f2:43:05:b8:1a:2e:f0:2f:a0: a7:da:fb:14:8b:87:51:59:5e:0e:81:4e:ef:f0:9f: e1:99:cb:fa:a0:dc:0f:58:23:6d:4b:86:02:6c:43: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:C0:2D:64:05:BC:F1:A2:97:08:D3:77:9D:B8:FE:E8:FC:1D:A9 X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f6:8c:04:1e:fd:e2:ad:70:d1:81:8c:5b:13:86:1d:36:46: d8:01:46:21:69:57:d3:be:98:ff:c9:94:70:54:01:71:4a:91: bf:67:50:fa:22:ef:8c:3d:90:ba:9d:71:f6:86:b5:66:49:57: cd:d2:d3:39:8b:b5:ec:53:7c:69:32:c5:6c:6b:ab:31:dd:ee: 97:24:f9:3d:5f:11:8c:90:b6:b3:79:fa:92:95:c7:6b:88:f7: 9e:40:fc:35:2c:95:52:a7:80:11:e9:73:c8:09:b9:46:7e:b5: fa:41:4d:4e:66:e8:07:c4:89:44:dc:1f:bc:a1:f3:83:63:64: 48:39:64:5a:fa:da:ea:2d:50:d4:96:1a:0c:74:c3:09:3f:63: e3:09:74:92:7d:ea:21:71:ed:af:9a:c5:fb:67:16:1d:0b:57: cf:b9:72:dd:3c:1a:f6:24:4f:94:e0:9c:b9:2c:c6:9f:69:ac: cd:ad:87:3e:49:8f:ef:e6:f6:57:ee:4e:8b:c9:46:46:11:30: 0f:b9:4e:79:12:e7:24:7d:be:4a:e0:3a:be:69:84:34:dd:64: 7f:55:f7:8d:98:66:6e:42:65:8e:3c:42:0c:b3:59:9a:57:02: 19:1c:a7:4d:ed:b5:4a:b9:9e:4c:68:bd:4b:aa:9f:a6:f8:25: 94:37:8a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjUwNTA4MjAzODI5WhcNMjUwNTE1MjAzODI5WjAYMRYwFAYD VQQDEw02ODFkMTY0NS01NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM3H5BIKs7eRv5iqQ7JyChb0SBNegv/U670pMcSe0acE9Lo1aI4XnHaIfS2e 5KuhfiPA5b47jsBx7nph7Dk0SGFeZZZAmhfe8uic26YcPKrG7xbkaVgT4q1KV6xN uDA2qNIXVuweEhz09PipwlLdsk2cchK08Njb6LKx9O+T+x4szDA15WaOAFs811C/ TCPV66fQnzKtE4LPxW+6jkCEKLt+Z26X7ywn+Tqw5pGW3CQsdevBMMuWGB7u7c0D nX9N8uD+GtRFxOeB1TdGbM/bEhp3A7gcnt/yQwW4Gi7wL6Cn2vsUi4dRWV4OgU7v 8J/hmcv6oNwPWCNtS4YCbEOjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO/wC1k BbzxopcI03eduP7o/B2pMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5 a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW9owEHv3irXDRgYxbE4YdNkbYAUYhaVfTvpj/yZRwVAFxSpG/Z1D6 Iu+MPZC6nXH2hrVmSVfN0tM5i7XsU3xpMsVsa6sx3e6XJPk9XxGMkLazefqSlcdr iPeeQPw1LJVSp4AR6XPICblGfrX6QU1OZugHxIlE3B+8ofODY2RIOWRa+trqLVDU lhoMdMMJP2PjCXSSfeohce2vmsX7ZxYdC1fPuXLdPBr2JE+U4Jy5LMafaazNrYc+ SY/v5vZX7k6LyUZGETAPuU55Euckfb5K4Dq+aYQ03WR/VfeNmGZuQmWOPEIMs1ma VwIZHKdN7bVKuZ5MaL1Lqp+m+CWUN4rm -----END CERTIFICATE-----Generated at Fri May 9 18:12:15 2025 by rpki-client