$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: BdVHbTufpeZOij5WyeRVL03LexYTUmG48XFMAUNGiIw= Subject key identifier: E2:EC:02:24:D7:67:D0:20:3C:37:D8:22:AF:2E:83:5B:FC:29:7D:B8 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 49 Signing time: Sat 21 Jun 2025 06:23:00 +0000 Manifest this update: Sat 21 Jun 2025 06:22:59 +0000 Manifest next update: Sat 28 Jun 2025 06:22:59 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: FjHRZmqFzAzTekkBR86hG19Y4lA9HeW/MmU6wUlmuYY=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Jun 21 06:22:59 2025 GMT Not After : Jun 28 06:22:59 2025 GMT Subject: CN=68564fc3-7594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:4e:f4:fd:4f:be:89:69:c9:67:c7:bd:d1: 28:2c:5b:52:ab:6a:56:52:6f:6e:0d:90:91:28:3a: 07:4a:bb:cb:04:4b:c4:8b:52:60:27:99:30:1d:67: 9d:97:42:9f:b4:cd:89:87:37:f1:82:7c:fb:b4:05: 83:ab:8f:18:51:b3:1a:3f:80:ee:d2:66:a3:67:6c: d8:c3:eb:d0:35:1a:f0:2a:42:78:83:79:38:d9:48: cb:23:01:c1:62:f9:4e:b1:1e:74:f5:87:84:44:74: d9:96:0d:37:b0:79:47:fe:47:68:25:7e:9b:2b:4d: 6b:6a:32:56:4f:3c:6b:4c:96:06:88:ac:bd:8d:7a: 4b:0b:f8:f6:f0:46:cb:c2:e3:b1:ac:ce:f5:c3:46: 04:da:bf:9b:89:84:ba:54:cc:31:51:5c:17:49:ba: 76:c9:f7:1c:5d:8d:64:1d:e8:e3:b2:83:a4:2e:ca: 0c:8f:e5:6c:95:10:8f:3a:b9:98:57:1f:14:c6:10: 11:4b:11:6b:76:af:ae:1d:62:ee:68:c0:af:f4:b8: b5:1a:69:ff:a0:cd:d2:51:8a:1e:d9:dc:17:31:70: 3b:ca:a0:65:da:42:3f:44:2d:74:2d:b2:b3:28:01: 27:42:b6:8b:ec:b1:56:2d:2a:2b:f3:7b:0c:ae:a2: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EC:02:24:D7:67:D0:20:3C:37:D8:22:AF:2E:83:5B:FC:29:7D:B8 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:27:b0:43:05:fc:92:65:24:fb:ca:f7:21:39:a8:dc:2b: d3:b2:1f:53:0a:ad:80:9f:db:94:89:ec:c0:1c:95:5d:99:d7: 4e:3e:ac:98:ed:65:d1:bd:e3:25:51:82:44:d3:51:79:1a:19: 8f:e8:38:71:d8:c6:76:2c:00:1e:e6:48:03:df:52:a3:f5:33: 78:f9:d3:eb:48:74:b5:d1:20:6e:04:2e:50:0a:67:33:17:93: 0b:b6:a7:94:10:44:fc:cc:4e:6b:0d:09:6d:43:13:b7:77:b6: bb:9e:d0:f2:2c:21:6b:01:c3:e0:b4:e7:80:a8:3c:b6:ad:30: 1f:7c:c9:61:52:5b:da:86:b7:aa:21:23:74:da:3a:a1:35:30: 4b:b4:a0:3d:09:d8:86:ca:7c:64:03:d9:2d:b2:b3:0f:ea:76: 12:7f:ed:52:f6:5c:65:0f:f6:8c:49:0d:34:57:e9:f5:9f:c4: 25:b1:06:67:ae:1a:98:9a:41:3d:ce:b6:e9:f4:e1:d1:96:48: 59:51:67:ba:79:08:f5:cb:dd:a9:ce:2b:fb:07:1e:3f:fd:a3: af:8d:ea:49:db:6e:a9:92:d2:85:a2:6b:08:a6:90:c7:07:69: 89:f6:cc:33:3f:6c:3b:c3:eb:2b:63:6d:ac:b1:2e:f6:18:5d: dc:01:32:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA2MjEwNjIyNTlaFw0yNTA2MjgwNjIyNTlaMBgxFjAUBgNV BAMTDTY4NTY0ZmMzLTc1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzYE70/U++iWnJZ8e90SgsW1KralZSb24NkJEoOgdKu8sES8SLUmAnmTAdZ52X Qp+0zYmHN/GCfPu0BYOrjxhRsxo/gO7SZqNnbNjD69A1GvAqQniDeTjZSMsjAcFi +U6xHnT1h4REdNmWDTeweUf+R2glfpsrTWtqMlZPPGtMlgaIrL2NeksL+PbwRsvC 47GszvXDRgTav5uJhLpUzDFRXBdJunbJ9xxdjWQd6OOyg6QuygyP5WyVEI86uZhX HxTGEBFLEWt2r64dYu5owK/0uLUaaf+gzdJRih7Z3BcxcDvKoGXaQj9ELXQtsrMo ASdCtovssVYtKivzewyuouRZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4uwCJNdn 0CA8N9giry6DW/wpfbgwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOYJ7BDBfySZST7yvchOajcK9OyH1MKrYCf25SJ7MAclV2Z104+rJjt ZdG94yVRgkTTUXkaGY/oOHHYxnYsAB7mSAPfUqP1M3j50+tIdLXRIG4ELlAKZzMX kwu2p5QQRPzMTmsNCW1DE7d3true0PIsIWsBw+C054CoPLatMB98yWFSW9qGt6oh I3TaOqE1MEu0oD0J2IbKfGQD2S2ysw/qdhJ/7VL2XGUP9oxJDTRX6fWfxCWxBmeu GpiaQT3Otun04dGWSFlRZ7p5CPXL3anOK/sHHj/9o6+N6knbbqmS0oWiawimkMcH aYn2zDM/bDvD6ytjbayxLvYYXdwBMmk= -----END CERTIFICATE-----Generated at Sat Jun 21 16:00:41 2025 by rpki-client