$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json) Hash identifier: 26Yy3HdX54FVGVlTqe3T2IR2D6PRJee7PCix5+tnVzo= Subject key identifier: 9F:60:18:7C:FA:EA:1C:EC:FD:72:5D:45:1E:13:0F:90:CD:2E:9E:3B Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft Manifest number: 1B Signing time: Fri 25 Apr 2025 06:54:57 +0000 Manifest this update: Fri 25 Apr 2025 06:54:57 +0000 Manifest next update: Fri 02 May 2025 06:54:57 +0000 Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: c1nFRcHOAZfCqaRUbzbrD8sOSQjLyrL5pBextfIRj6c=) 2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: iG1+i+/h5uPBH8czu/MsD7AGiWboXVjY7acUxjpESco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8, serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Validity Not Before: Apr 25 06:54:57 2025 GMT Not After : May 2 06:54:57 2025 GMT Subject: CN=680b31c1-e822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:4f:c8:c3:4a:ee:a3:9e:57:bb:0f:b2:58: f5:9b:2e:00:d8:c9:e3:a2:21:12:35:ea:eb:ae:90: c9:0d:3f:ce:d5:74:bb:1f:94:2c:fa:09:f4:0c:84: 4a:a0:40:4c:f1:fd:ec:cd:ee:09:5a:f5:a5:0b:0e: ad:8e:31:d4:8e:9d:5e:6a:74:e5:00:46:85:93:8f: ed:9a:6a:3d:91:e8:e7:a1:6a:d0:39:18:03:a3:07: 1d:e7:83:3e:9c:d0:d9:78:e7:f0:9e:07:19:ee:fc: e0:70:24:76:04:21:37:3d:4b:b2:d4:96:00:1a:75: d1:55:13:e1:ba:88:76:40:d2:1e:cb:f3:52:34:ad: 46:89:54:33:95:ce:ed:c1:81:fb:cb:4d:2f:45:10: 03:11:09:69:61:e9:fe:b1:09:77:42:35:c7:8e:59: 01:84:14:0f:c1:9a:8b:18:39:92:0d:83:13:a0:a7: 74:50:f7:68:e0:21:98:bf:66:ed:ca:74:91:bc:71: b4:d9:1b:8c:30:d3:ba:be:35:a5:90:57:44:75:a3: 2c:78:29:df:bf:2a:6b:56:f0:ad:98:c4:e6:da:30: 77:78:e1:25:8f:06:18:3b:1c:32:1c:e3:c9:22:b9: 42:a2:03:69:0a:fe:cf:4d:6b:97:99:64:a7:f3:7a: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:60:18:7C:FA:EA:1C:EC:FD:72:5D:45:1E:13:0F:90:CD:2E:9E:3B X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:39:2a:ed:0b:79:c1:3d:22:90:31:52:7e:c3:0a:37:c8:56: 33:0a:9e:ec:95:c9:2e:97:81:fa:2b:e9:1e:1b:e8:88:19:fb: dc:0b:f4:e3:a4:78:0b:d4:5e:5c:d3:c1:5c:4c:9b:3d:ab:6b: bc:fc:7c:2d:15:87:80:6d:f6:3b:12:30:24:93:af:0f:2f:eb: 65:1d:9d:10:98:17:07:91:f4:ba:0f:ef:98:85:86:5c:dd:39: c1:58:15:80:ab:44:b8:09:da:12:12:44:42:6b:0f:0d:42:d8: f6:2d:2d:d0:b1:24:f6:2a:50:8c:0a:88:65:f2:5d:15:d7:b6: 4e:1b:92:3c:cb:ce:70:a5:4f:da:6e:7d:e6:78:d1:cd:3d:65: 90:07:ef:8b:be:6a:2d:c9:42:35:d3:44:6f:d8:8c:9e:ba:eb: a5:19:44:84:b6:82:d2:83:a4:18:04:f7:3b:de:9c:4c:a9:56: 9c:3e:68:24:21:7a:ca:56:ae:00:b7:2e:56:ea:51:2c:c3:8d: 53:52:cb:c0:6f:4e:e5:cc:54:db:b6:0b:c3:2d:97:a5:f9:63: 5d:1f:86:a7:5e:c5:9d:b0:d7:e3:14:d4:4f:c9:93:80:6f:19: 93:ab:39:87:7c:f4:38:f1:d9:66:95:cc:fd:99:d0:43:1a:b4: 71:a5:cf:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTA0MjUwNjU0NTdaFw0yNTA1MDIwNjU0NTdaMBgxFjAUBgNV BAMTDTY4MGIzMWMxLWU4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgVU/Iw0ruo55Xuw+yWPWbLgDYyeOiIRI16uuukMkNP87VdLsflCz6CfQMhEqg QEzx/ezN7gla9aULDq2OMdSOnV5qdOUARoWTj+2aaj2R6OehatA5GAOjBx3ngz6c 0Nl45/CeBxnu/OBwJHYEITc9S7LUlgAaddFVE+G6iHZA0h7L81I0rUaJVDOVzu3B gfvLTS9FEAMRCWlh6f6xCXdCNceOWQGEFA/BmosYOZINgxOgp3RQ92jgIZi/Zu3K dJG8cbTZG4ww07q+NaWQV0R1oyx4Kd+/KmtW8K2YxObaMHd44SWPBhg7HDIc48ki uUKiA2kK/s9Na5eZZKfzejS/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn2AYfPrq HOz9cl1FHhMPkM0unjswHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0I4LzRDNzY5RkYwRkI1QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpG cDFfVDlGMkZWbDFaSnVOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU5Ku0LecE9IpAxUn7DCjfIVjMKnuyVyS6Xgfor6R4b6IgZ+9wL9OOk eAvUXlzTwVxMmz2ra7z8fC0Vh4Bt9jsSMCSTrw8v62UdnRCYFweR9LoP75iFhlzd OcFYFYCrRLgJ2hISREJrDw1C2PYtLdCxJPYqUIwKiGXyXRXXtk4bkjzLznClT9pu feZ40c09ZZAH74u+ai3JQjXTRG/YjJ6666UZRIS2gtKDpBgE9zvenEypVpw+aCQh espWrgC3LlbqUSzDjVNSy8BvTuXMVNu2C8Mtl6X5Y10fhqdexZ2w1+MU1E/Jk4Bv GZOrOYd89Djx2WaVzP2Z0EMatHGlz/0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:45 2025 by rpki-client