$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft File: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json) Hash identifier: kfLivQDYOlDv+kgCrW72sK1vC1bwJDXOBhDPMezZXuw= Subject key identifier: 06:DC:74:04:0F:DA:BD:A8:8E:C5:03:3F:95:2A:85:60:F3:1E:40:AD Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB Certificate issuer: /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft Manifest number: 08FD Signing time: Sat 10 May 2025 20:03:38 +0000 Manifest this update: Sat 10 May 2025 20:03:37 +0000 Manifest next update: Sat 17 May 2025 20:03:37 +0000 Files and hashes: 1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: 24V8NmsWoa0Xh7I3bYEFeEPast4oeBjF34AFdvE1rWc=) 2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5DA, serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Validity Not Before: May 10 20:03:37 2025 GMT Not After : May 17 20:03:37 2025 GMT Subject: CN=681fb119-2600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:6a:9e:74:a7:ee:02:73:c4:82:4b:7d:ab: f2:7e:84:07:6e:6e:30:d2:1a:03:67:ad:5f:b8:c3: 02:0a:c5:21:9b:8d:c5:f6:50:2d:ed:62:89:9b:e3: c6:ae:5f:0a:52:ec:72:2f:c4:af:3c:55:08:7f:21: c0:92:87:78:e1:a5:b9:2f:bc:05:ff:d5:8a:ed:a9: 81:df:a4:c0:6f:6b:76:cf:37:1f:31:e2:9c:0a:44: db:f2:99:ae:cc:e7:ac:a7:c6:70:0e:81:1e:66:1e: 5f:da:f9:98:3a:2c:9f:9a:f5:6e:1c:17:06:9c:e3: 9b:c5:e8:41:d2:c9:81:09:98:e8:f3:a9:87:a4:bb: 9f:d3:26:40:31:28:47:27:46:f1:b8:b7:6a:2a:1d: e1:4c:56:e3:e7:d8:82:c1:6f:6d:21:03:26:07:ca: c9:94:d7:ed:b6:6a:86:6a:88:22:ca:fc:86:85:05: ff:22:8c:85:bc:47:27:15:1f:b4:bb:ea:94:2f:5e: ce:a3:b9:e7:99:f3:50:d8:4e:38:a5:9f:e2:f6:43: 48:01:e3:79:4f:5b:7a:9c:57:b6:23:68:84:51:c9: 5b:84:71:3c:0d:6e:e7:c4:a2:b6:8b:68:d5:fa:4c: 8d:3e:4b:3f:a9:bb:ca:9d:b3:98:d8:75:75:58:ad: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:74:04:0F:DA:BD:A8:8E:C5:03:3F:95:2A:85:60:F3:1E:40:AD X509v3 Authority Key Identifier: keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:cb:f7:07:46:5e:32:4c:7f:e5:62:45:5f:1c:4b:3e:c6: 86:3b:2c:6d:e5:de:99:a6:95:d8:39:6b:ba:83:9f:8e:df:65: 9e:df:6d:84:07:21:10:e7:00:25:a4:2e:dc:03:20:64:9d:8b: 11:7e:2f:89:e3:0a:39:b9:d6:8e:d7:1f:7b:f4:e7:fb:11:f7: ff:0f:db:82:1c:2a:3c:59:3e:e0:b3:b7:91:75:9a:79:25:92: 62:19:e7:94:12:ab:d3:54:8b:7c:63:3f:ff:4d:64:96:52:d5: a5:b6:8b:d7:db:a8:08:72:79:ee:d7:78:e2:49:43:d6:e9:30: 42:22:88:80:8e:6b:44:13:13:75:32:f6:1f:9d:ae:75:b4:29: 02:f4:d2:f5:25:b8:4b:88:cc:03:3b:56:dc:a6:27:c9:b1:f1: f7:a7:d0:79:90:ec:bc:28:a1:50:b2:88:1d:59:cd:23:ca:d3: 28:36:6d:1a:fa:45:9d:a3:ab:12:a0:62:9f:83:fe:cd:db:d7: 43:36:7d:c8:51:8c:2f:66:26:bc:26:b1:57:d3:a8:c2:29:32: 8a:a1:fc:c5:c1:56:ef:0b:3c:b8:17:2f:b5:72:12:5e:48:af: de:8f:fb:33:21:d6:3e:43:fe:d2:a0:91:51:8f:56:48:b5:37: 1b:a5:b7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1REExMTAvBgNVBAUTKDBFQkREMkJGNDQ5RUYzMzQ0MDYzNTE1NTNGMEVENjgz MkU0NkU0Q0IwHhcNMjUwNTEwMjAwMzM3WhcNMjUwNTE3MjAwMzM3WjAYMRYwFAYD VQQDEw02ODFmYjExOS0yNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcxqnnSn7gJzxIJLfavyfoQHbm4w0hoDZ61fuMMCCsUhm43F9lAt7WKJm+PG rl8KUuxyL8SvPFUIfyHAkod44aW5L7wF/9WK7amB36TAb2t2zzcfMeKcCkTb8pmu zOesp8ZwDoEeZh5f2vmYOiyfmvVuHBcGnOObxehB0smBCZjo86mHpLuf0yZAMShH J0bxuLdqKh3hTFbj59iCwW9tIQMmB8rJlNfttmqGaogiyvyGhQX/IoyFvEcnFR+0 u+qUL17Oo7nnmfNQ2E44pZ/i9kNIAeN5T1t6nFe2I2iEUclbhHE8DW7nxKK2i2jV +kyNPks/qbvKnbOY2HV1WK0PhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbcdAQP 2r2ojsUDP5UqhWDzHkCtMB8GA1UdIwQYMBaAFA690r9EnvM0QGNRVT8O1oMuRuTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVEQS9CODQ4REY2OEE2 MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6UkFZMUZWUHc3V2d5NUc1 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RyM1N2MFNlOHpSQVkxRlZQdzdXZ3k1RzVNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVEQS9CODQ4REY2OEE2MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6 UkFZMUZWUHc3V2d5NUc1TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFsv3B0ZeMkx/5WJFXxxLPsaGOyxt5d6ZppXYOWu6g5+O32We322E ByEQ5wAlpC7cAyBknYsRfi+J4wo5udaO1x979Of7Eff/D9uCHCo8WT7gs7eRdZp5 JZJiGeeUEqvTVIt8Yz//TWSWUtWltovX26gIcnnu13jiSUPW6TBCIoiAjmtEExN1 MvYfna51tCkC9NL1JbhLiMwDO1bcpifJsfH3p9B5kOy8KKFQsogdWc0jytMoNm0a +kWdo6sSoGKfg/7N29dDNn3IUYwvZia8JrFX06jCKTKKofzFwVbvCzy4Fy+1chJe SK/ej/szIdY+Q/7SoJFRj1ZItTcbpbdi -----END CERTIFICATE-----Generated at Sun May 11 01:47:09 2025 by rpki-client