$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: J2dXv9FO+t6MnGECEdNslyY2rfMce8oj2REhX0fuM9c= Subject key identifier: 86:33:E8:E0:E3:08:F9:6D:95:D7:C6:49:BF:84:17:BA:9F:AD:28:BF Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 030C Signing time: Wed 07 May 2025 01:02:59 +0000 Manifest this update: Wed 07 May 2025 01:02:59 +0000 Manifest next update: Wed 14 May 2025 01:02:59 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: 5v8TOO0nJvjhsHF5REhVhfk6nF20nQJluFb8Fe98mgE=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: ATHtpOo5iB32fJStBSLmEkpBLzW5yPkGZ3s+RacPoK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: May 7 01:02:59 2025 GMT Not After : May 14 01:02:59 2025 GMT Subject: CN=681ab143-cade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:41:c3:86:23:92:6e:48:f1:73:cf:a4:40: ad:73:3e:8b:22:b5:1b:ee:61:4a:48:cd:26:55:f5: 51:4f:7d:6a:8c:a6:eb:8f:4f:93:52:c5:e1:7c:6b: 1a:5c:2a:86:fc:e5:f5:7a:29:49:d2:8a:41:a5:59: 3c:2a:ee:43:2c:e7:c9:bb:b2:17:97:e7:68:15:66: f4:c8:54:90:08:06:47:62:f9:fd:85:5f:e9:b5:d4: 90:a8:19:68:63:c0:26:07:3c:bb:5d:45:bf:1c:dd: e4:c8:fe:72:a2:88:dd:6c:b7:02:6f:b2:f8:2b:c8: 5d:13:0c:0c:74:20:f1:68:0a:a0:4d:0c:8b:cc:2c: 1c:0f:18:bf:f3:3b:3d:f6:f8:25:72:23:60:7e:2c: b2:6f:97:9e:d0:c7:3e:a8:3c:20:b3:d1:0a:3f:0f: 17:34:d1:55:16:cf:d9:0d:dc:bf:ad:50:6f:4e:32: 8b:52:c5:2c:21:d5:4b:8b:18:f9:59:d5:7b:47:9b: 91:52:ac:1a:2f:34:5c:60:ca:36:06:1e:a1:ba:3c: 97:12:11:53:7a:cf:f2:74:09:ad:f7:94:6d:cf:9d: b2:a4:07:dd:6d:ae:aa:b9:1d:cc:d9:9a:a7:66:2f: 50:ee:8c:0d:d7:8d:03:c3:7c:83:5f:8c:89:21:eb: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:E8:E0:E3:08:F9:6D:95:D7:C6:49:BF:84:17:BA:9F:AD:28:BF X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1c:74:09:15:7c:26:1e:8b:f6:7b:96:7a:3a:37:74:7b:90: 67:71:36:ef:d9:e4:93:a9:10:a7:f4:76:d7:6e:7f:3f:84:3a: cf:22:fd:5e:2b:23:cd:d3:30:bb:80:bd:d6:78:fe:9f:30:e4: 5a:e0:e6:9d:53:e2:d2:8e:9c:61:5f:b9:06:dc:d9:da:1d:e9: 64:22:b0:51:99:1e:fa:7d:ad:1d:3f:20:b6:42:37:72:64:fb: 9b:66:bc:32:79:ee:6a:74:b9:7c:d3:8e:9e:19:bb:46:b5:ce: b0:3f:dd:fb:a9:40:10:d3:26:cb:60:f5:3b:b4:b7:85:8d:e3: bf:59:37:9d:47:6f:0f:54:11:24:ac:ed:b3:eb:1e:0d:08:e4: 17:4d:4a:1b:8c:0e:dd:e1:cb:92:b7:d1:f2:b7:f7:0d:c1:e0: d6:58:03:d0:78:56:fa:52:f6:a3:44:79:0e:ba:b0:54:05:10: fc:43:65:5e:08:28:fb:50:26:d8:1c:ed:02:49:bb:7a:96:dd: 74:bd:79:b3:61:f8:d0:b0:88:25:15:90:60:89:99:f0:b2:c0: 25:f9:e5:71:3f:90:16:b0:c9:99:df:7b:2e:c9:48:df:0c:78: ba:71:62:6f:0f:c2:6a:5f:47:8b:2e:26:70:3d:63:d0:e6:65: 18:14:a5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjUwNTA3MDEwMjU5WhcNMjUwNTE0MDEwMjU5WjAYMRYwFAYD VQQDEw02ODFhYjE0My1jYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0xBw4Yjkm5I8XPPpECtcz6LIrUb7mFKSM0mVfVRT31qjKbrj0+TUsXhfGsa XCqG/OX1eilJ0opBpVk8Ku5DLOfJu7IXl+doFWb0yFSQCAZHYvn9hV/ptdSQqBlo Y8AmBzy7XUW/HN3kyP5yoojdbLcCb7L4K8hdEwwMdCDxaAqgTQyLzCwcDxi/8zs9 9vglciNgfiyyb5ee0Mc+qDwgs9EKPw8XNNFVFs/ZDdy/rVBvTjKLUsUsIdVLixj5 WdV7R5uRUqwaLzRcYMo2Bh6hujyXEhFTes/ydAmt95Rtz52ypAfdba6quR3M2Zqn Zi9Q7owN140Dw3yDX4yJIes3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYz6ODj CPltldfGSb+EF7qfrSi/MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HHQJFXwmHov2e5Z6Ojd0e5BncTbv2eSTqRCn9HbXbn8/hDrPIv1e KyPN0zC7gL3WeP6fMORa4OadU+LSjpxhX7kG3NnaHelkIrBRmR76fa0dPyC2Qjdy ZPubZrwyee5qdLl8046eGbtGtc6wP937qUAQ0ybLYPU7tLeFjeO/WTedR28PVBEk rO2z6x4NCOQXTUobjA7d4cuSt9Hyt/cNweDWWAPQeFb6UvajRHkOurBUBRD8Q2Ve CCj7UCbYHO0CSbt6lt10vXmzYfjQsIglFZBgiZnwssAl+eVxP5AWsMmZ33suyUjf DHi6cWJvD8JqX0eLLiZwPWPQ5mUYFKU8 -----END CERTIFICATE-----Generated at Wed May 7 04:19:03 2025 by rpki-client