$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: 5urmeR0Zkz8Crhf+FORubxl7nkZYp26Pjtau6zbbiUI= Subject key identifier: A4:37:49:20:33:7F:92:33:E3:4B:F7:D5:74:F1:C3:D8:A9:4A:27:B8 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01C9 Signing time: Thu 24 Apr 2025 19:55:41 +0000 Manifest this update: Thu 24 Apr 2025 19:55:41 +0000 Manifest next update: Thu 01 May 2025 19:55:41 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: c4FZ0AK8/CAil8qNRp5pFb55pGr7GKU8Fk3woSuLu0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Apr 24 19:55:41 2025 GMT Not After : May 1 19:55:41 2025 GMT Subject: CN=680a973d-d68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:27:23:b9:c9:00:1b:f7:c7:d3:1b:c4:24: e2:22:aa:98:b6:bf:6d:11:19:f0:e5:cb:5f:10:9e: 09:44:54:81:58:dd:2d:bc:35:54:5e:f7:a4:90:1d: 08:4c:c6:59:30:b0:09:5f:e4:29:5b:2d:b2:6d:1c: 9a:84:8e:b5:3a:bb:e7:35:a4:52:2c:46:2c:a2:e4: 0f:d8:d6:ff:27:01:a7:44:c9:32:11:d5:67:48:ac: a0:3e:16:1d:c2:08:a8:97:f9:6c:61:fe:05:9f:f7: 23:d0:29:06:93:6f:be:0c:30:de:51:82:58:05:d9: 7c:8f:b5:41:8b:9a:e0:4b:80:db:dc:78:20:76:23: 8d:23:66:2c:ca:5a:5f:d4:2f:86:6a:d1:c8:79:80: fd:99:d8:01:a7:8c:e5:aa:20:4f:4f:b1:0b:d3:f1: 37:85:d6:29:65:a4:dc:b7:9a:09:63:a1:ef:73:19: 4f:c6:d7:bf:87:51:fa:32:fc:20:d5:70:e3:fc:ec: 1c:2a:df:0a:57:e7:fe:86:90:a0:6e:97:06:7d:ca: 47:95:e0:bb:3c:ac:6d:ba:5e:ef:a7:0a:ab:c3:9a: d0:c5:6b:c7:1f:94:7d:c2:64:28:80:87:a0:15:89: bc:75:bf:5d:19:0d:f5:56:f4:d8:86:f7:5d:35:f6: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:49:20:33:7F:92:33:E3:4B:F7:D5:74:F1:C3:D8:A9:4A:27:B8 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:0b:5d:43:2f:df:99:c7:f8:9c:19:db:c0:f8:0f:0a:a2: fe:09:59:50:20:1c:e0:9a:e3:3e:8a:af:80:8a:52:ff:e4:88: 85:af:dd:7d:23:d7:c0:67:83:f6:27:48:14:66:a9:82:08:b8: 89:7d:95:aa:9d:da:2e:08:03:67:57:4c:74:02:01:d0:24:99: ac:1f:92:da:92:d5:ba:b5:18:23:98:fa:1c:f8:85:bf:75:33: dc:90:25:1b:48:a0:86:14:87:ac:fd:4c:46:3e:95:9f:83:71: 14:b1:62:68:4c:ab:36:9a:30:5c:ef:fd:8d:ba:f7:b0:94:eb: 1d:90:08:fc:3f:35:9e:cc:83:59:9f:66:41:74:2e:9f:f7:6a: be:0d:58:b5:77:76:e9:e5:b6:79:5d:4d:d8:4d:2c:7a:e8:33: df:a2:26:8a:3a:60:cc:05:d8:cf:65:df:c3:1a:7a:26:06:6f: 7b:87:81:f4:18:ee:96:25:67:3d:43:7e:9d:05:2b:4e:ef:a0: e5:27:ca:c3:90:f1:a4:fc:a7:07:af:da:8f:4f:ad:73:af:a3: a7:92:e6:29:0b:fe:98:40:de:81:6e:69:0b:a3:49:f1:9b:96: 3b:57:de:7f:bf:b1:6c:69:6c:c9:a8:22:ce:ec:51:f4:37:9d: e2:f7:8f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNDI0MTk1NTQxWhcNMjUwNTAxMTk1NTQxWjAYMRYwFAYD VQQDEw02ODBhOTczZC1kNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0honI7nJABv3x9MbxCTiIqqYtr9tERnw5ctfEJ4JRFSBWN0tvDVUXvekkB0I TMZZMLAJX+QpWy2ybRyahI61OrvnNaRSLEYsouQP2Nb/JwGnRMkyEdVnSKygPhYd wgiol/lsYf4Fn/cj0CkGk2++DDDeUYJYBdl8j7VBi5rgS4Db3HggdiONI2Ysylpf 1C+GatHIeYD9mdgBp4zlqiBPT7EL0/E3hdYpZaTct5oJY6HvcxlPxte/h1H6Mvwg 1XDj/OwcKt8KV+f+hpCgbpcGfcpHleC7PKxtul7vpwqrw5rQxWvHH5R9wmQogIeg FYm8db9dGQ31VvTYhvddNfbNewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ3SSAz f5Iz40v31XTxw9ipSie4MB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/gtdQy/fmcf4nBnbwPgPCqL+CVlQIBzgmuM+iq+AilL/5IiFr919 I9fAZ4P2J0gUZqmCCLiJfZWqndouCANnV0x0AgHQJJmsH5LaktW6tRgjmPoc+IW/ dTPckCUbSKCGFIes/UxGPpWfg3EUsWJoTKs2mjBc7/2NuvewlOsdkAj8PzWezINZ n2ZBdC6f92q+DVi1d3bp5bZ5XU3YTSx66DPfoiaKOmDMBdjPZd/DGnomBm97h4H0 GO6WJWc9Q36dBStO76DlJ8rDkPGk/KcHr9qPT61zr6OnkuYpC/6YQN6BbmkLo0nx m5Y7V95/v7FsaWzJqCLO7FH0N53i94/V -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:54 2025 by rpki-client