$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: PMzrviTKZFCwXmaPEJjZp2q+m0BWN0sBpW4sJjkEKeg= Subject key identifier: 1F:EA:EC:13:4B:50:EA:C6:08:FE:95:62:BF:7E:11:1C:A3:37:49:F5 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 2D Signing time: Fri 25 Apr 2025 06:41:34 +0000 Manifest this update: Fri 25 Apr 2025 06:41:34 +0000 Manifest next update: Fri 02 May 2025 06:41:34 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 3PM2yc32M6gD9wS1BexnCK4yW4i+tHal7ZeW6jmjwkk=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Apr 25 06:41:34 2025 GMT Not After : May 2 06:41:34 2025 GMT Subject: CN=680b2e9e-7e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:99:91:f9:d7:31:67:0d:eb:7d:b5:28:19: 64:b2:55:ae:a0:95:57:96:6d:e3:03:72:7b:34:6f: 2a:ba:e7:34:9e:08:17:ef:f1:f1:26:da:05:8c:83: 23:75:da:66:7a:01:d6:cc:53:c7:83:60:9c:56:fa: 83:fd:0f:17:88:bd:58:a2:a1:d5:88:36:96:69:ba: d6:83:d3:3a:04:20:38:f6:df:d3:5f:5d:21:89:13: 27:ce:32:6e:30:4f:ec:1d:b8:dd:7b:4c:19:87:fe: 36:0c:3d:1c:86:b2:1b:4b:32:d3:fe:fb:e6:3d:e5: cd:ea:e1:6e:87:17:e0:b3:93:fa:0d:6a:d2:1d:9c: 54:a0:db:5f:7e:72:72:4c:d2:b1:8d:d8:d3:b8:0a: 35:82:de:16:0d:6e:32:6d:0a:71:8a:70:a0:ad:11: eb:7d:d9:74:6a:fd:7e:f2:43:5b:a3:4a:d9:bd:af: df:6c:37:7e:fc:5a:42:8d:05:df:78:92:66:17:9b: 00:e6:30:76:88:cb:55:f1:bb:b5:a6:14:d0:d4:2c: ba:46:f0:85:a8:fb:cd:cc:ab:3f:0c:8d:dd:4a:d6: 6a:85:ec:26:2f:5f:25:78:f5:04:9c:c4:d3:60:b3: 1c:8d:bd:58:ff:a8:4b:5d:70:59:dc:b9:c6:52:65: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EA:EC:13:4B:50:EA:C6:08:FE:95:62:BF:7E:11:1C:A3:37:49:F5 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:aa:33:3a:48:e0:4b:7c:9b:37:5d:35:3a:4e:88:a5:e4:90: c5:a1:79:8c:df:02:ec:51:fa:f2:52:83:13:91:bc:40:72:78: 0f:b0:59:3b:d0:7e:61:c6:ed:ee:e9:2b:e6:e2:ef:be:79:84: 80:f9:30:ff:fd:19:80:40:f3:4b:4d:3d:4c:62:4c:1f:c8:fd: 9c:31:1d:b6:90:0b:e3:71:83:cf:20:04:d7:48:28:ff:b2:a9: 2c:2a:ec:e8:e1:31:0e:dd:7e:d2:94:be:bd:a4:bb:1c:ea:55: 8b:a4:cf:19:b5:80:af:d5:a9:01:55:0d:ce:ad:b4:3a:21:9f: 9c:23:b9:6c:e3:d8:e5:b1:fd:ef:84:d1:f6:33:57:d2:d8:e5: 7a:51:cd:95:49:15:ba:53:b2:49:3e:ba:c5:b5:8a:5e:27:0b: 0c:70:bd:91:15:41:79:94:b1:cb:41:f9:75:30:00:1d:74:b4: 72:9d:6b:8e:6a:2d:0c:4a:74:66:7f:78:d2:72:78:7c:cd:3c: cd:95:38:1d:4a:a7:98:71:f3:29:cd:d8:89:2e:80:6a:aa:9e: 91:8b:d0:ef:b8:c7:33:58:f1:7d:fc:c2:4e:08:00:bf:f3:54: 5b:f3:ce:f7:26:24:f8:c3:bb:c8:57:e6:d7:84:5d:25:07:d8: 8f:e0:ae:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA0MjUwNjQxMzRaFw0yNTA1MDIwNjQxMzRaMBgxFjAUBgNV BAMTDTY4MGIyZTllLTdlMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGnJmR+dcxZw3rfbUoGWSyVa6glVeWbeMDcns0byq65zSeCBfv8fEm2gWMgyN1 2mZ6AdbMU8eDYJxW+oP9DxeIvViiodWINpZputaD0zoEIDj239NfXSGJEyfOMm4w T+wduN17TBmH/jYMPRyGshtLMtP+++Y95c3q4W6HF+Czk/oNatIdnFSg219+cnJM 0rGN2NO4CjWC3hYNbjJtCnGKcKCtEet92XRq/X7yQ1ujStm9r99sN378WkKNBd94 kmYXmwDmMHaIy1Xxu7WmFNDULLpG8IWo+83Mqz8Mjd1K1mqF7CYvXyV49QScxNNg sxyNvVj/qEtdcFncucZSZVHvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH+rsE0tQ 6sYI/pViv34RHKM3SfUwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALKqMzpI4Et8mzddNTpOiKXkkMWheYzfAuxR+vJSgxORvEByeA+wWTvQ fmHG7e7pK+bi7755hID5MP/9GYBA80tNPUxiTB/I/ZwxHbaQC+Nxg88gBNdIKP+y qSwq7OjhMQ7dftKUvr2kuxzqVYukzxm1gK/VqQFVDc6ttDohn5wjuWzj2OWx/e+E 0fYzV9LY5XpRzZVJFbpTskk+usW1il4nCwxwvZEVQXmUsctB+XUwAB10tHKda45q LQxKdGZ/eNJyeHzNPM2VOB1Kp5hx8ynN2IkugGqqnpGL0O+4xzNY8X38wk4IAL/z VFvzzvcmJPjDu8hX5teEXSUH2I/grtE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:36 2025 by rpki-client