$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: nEvoJ7+v1+LAj89w7ZxRLq+R2IdOvFH7b13VpaESToQ= Subject key identifier: 25:1C:62:0C:45:A0:10:3B:81:86:5E:E8:F6:3D:87:18:A0:DC:55:76 Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 01E0 Signing time: Fri 25 Apr 2025 01:53:23 +0000 Manifest this update: Fri 25 Apr 2025 01:53:23 +0000 Manifest next update: Fri 02 May 2025 01:53:23 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: II+fzEctPbxEIT8ESk0LtX/vKTwcXpw9o/KRbuVjCjY=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Apr 25 01:53:23 2025 GMT Not After : May 2 01:53:23 2025 GMT Subject: CN=680aeb13-eef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:c8:12:fc:ba:fd:9c:23:14:1f:7a:de:d3: bd:be:ce:a1:79:f7:04:7d:7e:b8:f3:24:b9:9c:18: b2:f0:81:db:4e:88:07:76:ee:8d:13:e0:f7:c9:48: 80:77:33:9a:47:d4:6b:7c:c6:33:a5:df:95:6c:e2: b9:ae:a0:ca:5d:d0:33:91:0e:77:56:ed:ac:46:0f: 64:5d:c7:f8:22:12:42:97:9e:99:76:cc:3f:48:85: 0c:df:0a:00:26:eb:67:dc:d3:8c:57:eb:51:3b:ec: 61:2d:5c:77:a9:1d:01:3e:87:ea:b5:10:26:55:26: 09:8a:26:17:fc:94:cb:92:a5:9f:23:c4:cf:b0:26: 0d:b9:0e:16:6d:d4:a6:e5:10:b0:43:25:d8:6b:ba: 12:71:f7:31:df:bf:0a:a6:cc:67:60:25:70:6f:c5: 9e:7e:73:3e:7e:1e:32:30:6b:52:34:b9:46:70:36: 9c:38:b3:10:53:49:55:dc:1c:19:38:5b:c7:c9:96: db:a6:d4:68:b1:40:d5:08:43:69:4e:c9:16:61:92: b4:66:89:0c:b0:f5:c0:6f:a8:93:99:d4:bd:2f:48: c5:cc:da:dc:e4:4b:7c:95:b7:b3:9f:e3:49:02:84: 98:1d:1a:b5:b6:2f:0f:17:23:c1:ec:f8:99:0f:65: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1C:62:0C:45:A0:10:3B:81:86:5E:E8:F6:3D:87:18:A0:DC:55:76 X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:e5:f4:66:09:93:5f:86:f3:86:d0:e0:f7:ed:b9:d2:e4: d5:cd:c5:01:e7:86:f3:9a:21:f1:9c:58:5a:a5:a9:24:2a:26: 08:f0:d7:f7:25:91:c1:4c:bb:a6:e9:62:ad:f3:90:71:63:39: a0:a1:ce:cd:20:67:2b:80:3d:3b:25:89:53:05:cb:c0:da:6a: c7:cf:f2:3f:49:9a:4e:38:a6:b1:b3:78:38:e1:64:b2:cb:51: 62:2c:bc:cf:73:be:2d:97:97:7b:1e:9b:ff:aa:99:3f:73:14: 28:8f:47:b7:14:1f:cf:90:cc:68:b1:18:6d:5e:a7:8d:4b:a7: 14:49:12:48:66:a6:2a:26:93:78:f5:ef:5e:4e:90:66:0f:8d: db:19:73:8c:45:0c:b7:78:55:77:07:11:20:70:99:17:8f:9e: 3d:cc:5a:cc:f3:e0:79:d6:d5:88:59:4b:1f:64:8d:b9:38:41: 83:f4:a2:d1:a0:64:80:01:c7:11:df:93:52:66:46:0b:41:ee: d2:04:1a:8f:47:12:dd:df:70:95:90:5a:1a:a5:6f:d9:ab:74: 47:bb:99:dc:e1:a6:15:eb:30:83:33:a9:7d:94:07:cd:ad:f2: 77:02:f5:37:bb:48:f0:dc:c5:ed:0d:80:e6:ca:0f:82:98:7f: ad:1a:e7:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUwNDI1MDE1MzIzWhcNMjUwNTAyMDE1MzIzWjAYMRYwFAYD VQQDEw02ODBhZWIxMy1lZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgDIEvy6/ZwjFB963tO9vs6hefcEfX648yS5nBiy8IHbTogHdu6NE+D3yUiA dzOaR9RrfMYzpd+VbOK5rqDKXdAzkQ53Vu2sRg9kXcf4IhJCl56Zdsw/SIUM3woA Jutn3NOMV+tRO+xhLVx3qR0BPofqtRAmVSYJiiYX/JTLkqWfI8TPsCYNuQ4WbdSm 5RCwQyXYa7oScfcx378KpsxnYCVwb8WefnM+fh4yMGtSNLlGcDacOLMQU0lV3BwZ OFvHyZbbptRosUDVCENpTskWYZK0ZokMsPXAb6iTmdS9L0jFzNrc5Et8lbezn+NJ AoSYHRq1ti8PFyPB7PiZD2V3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUcYgxF oBA7gYZe6PY9hxig3FV2MB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7j+X0ZgmTX4bzhtDg9+250uTVzcUB54bzmiHxnFhapakkKiYI8Nf3 JZHBTLum6WKt85BxYzmgoc7NIGcrgD07JYlTBcvA2mrHz/I/SZpOOKaxs3g44WSy y1FiLLzPc74tl5d7Hpv/qpk/cxQoj0e3FB/PkMxosRhtXqeNS6cUSRJIZqYqJpN4 9e9eTpBmD43bGXOMRQy3eFV3BxEgcJkXj549zFrM8+B51tWIWUsfZI25OEGD9KLR oGSAAccR35NSZkYLQe7SBBqPRxLd33CVkFoapW/Zq3RHu5nc4aYV6zCDM6l9lAfN rfJ3AvU3u0jw3MXtDYDmyg+CmH+tGufc -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:39 2025 by rpki-client