$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: 4GHTI6YCz8X8YctbivfIQ+GrhQ2+3VTWkWZ6iv8ja8U= Subject key identifier: 00:10:12:99:5F:40:80:24:9E:0F:BF:04:FE:60:1C:E3:B6:4D:BB:59 Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 0373 Signing time: Fri 25 Apr 2025 00:42:23 +0000 Manifest this update: Fri 25 Apr 2025 00:42:22 +0000 Manifest next update: Fri 02 May 2025 00:42:22 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: KRFyzeS0JVtijSJIzVVE5jGAXTCL3AzgQU36Wm6z9U8=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Apr 25 00:42:22 2025 GMT Not After : May 2 00:42:22 2025 GMT Subject: CN=680ada6e-d871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:b1:ef:3a:fb:96:a3:b5:98:c0:fc:15:ff: cb:de:b5:d2:3b:52:05:4e:95:6e:ea:79:2f:e4:89: 44:cb:4b:a2:c3:49:0d:81:9f:b3:91:ca:55:8d:1c: 4b:04:c9:56:64:bc:8a:97:34:6a:0f:75:52:73:54: 37:e1:a2:61:70:13:3a:d2:ec:21:9a:96:13:7a:76: 40:cc:dc:8d:f8:2a:18:9f:85:c7:95:d5:b2:bb:9c: e2:c5:45:80:98:5e:db:26:82:3c:88:ea:4d:5a:2c: 83:54:e8:e4:ef:8e:01:6b:c5:e0:65:d2:cb:16:dc: 84:be:26:77:50:6f:25:f8:60:68:95:55:87:70:bb: 7c:50:02:76:b5:7b:75:84:d1:88:b9:7d:8e:2d:0b: 87:e7:8e:50:de:2d:c3:e4:1a:93:6c:27:44:1d:2c: 90:95:83:34:17:05:51:9b:fa:da:10:24:ea:40:94: f3:3e:e2:77:f5:8e:83:ca:1d:e8:da:40:23:d7:07: 8a:4f:a7:4e:45:35:5e:29:23:71:3b:7f:e8:64:45: 1c:97:ea:e8:17:69:cd:d5:7a:b6:86:72:aa:b8:89: aa:be:fd:90:75:c5:df:c2:2c:ce:37:74:63:ef:45: 89:46:cd:81:8a:6f:ba:36:99:92:f5:de:65:a2:d5: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:12:99:5F:40:80:24:9E:0F:BF:04:FE:60:1C:E3:B6:4D:BB:59 X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:97:74:e9:df:16:4a:71:8a:e5:75:c5:6c:a1:c7:1b:36:13: 8f:07:a3:81:a0:e6:d9:f2:8b:68:c5:88:8a:ab:22:66:c5:9f: 2e:fc:43:c3:ed:89:72:68:ed:01:8f:af:56:c3:63:b4:e4:8a: e1:80:92:86:68:c9:e3:98:4e:f3:55:b6:ed:2d:c2:ec:3c:53: 12:ec:17:6a:34:7f:de:90:52:63:27:b0:60:0f:0b:86:97:ce: 55:c4:87:be:11:1e:de:e5:2e:88:9a:7a:db:1a:7e:79:1f:73: 1b:33:ee:6c:ab:19:30:db:36:ac:ad:65:1f:5f:34:51:a4:d1: 68:a4:53:b1:be:d0:d9:a2:8c:f2:53:80:8f:0b:bd:00:a5:28: ff:9a:bd:41:d5:73:76:76:84:86:d4:5a:96:ab:bb:98:55:6a: 4f:da:28:9c:5d:a5:8e:21:a0:3d:55:9b:14:25:fe:2e:19:20: 38:40:dd:6d:5d:23:05:cc:c6:7f:b5:ca:d3:d6:70:79:72:2f: 2e:64:b6:60:b2:26:7c:11:ef:6b:f4:ea:de:34:08:7b:e6:c7: 8e:6b:0d:bb:0a:91:d8:7c:85:00:c8:c6:dc:f5:f7:b9:bd:a9: 40:56:62:dc:d1:bf:28:b0:fb:c9:6d:34:b0:9c:9a:80:f8:b8: 96:0a:23:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUwNDI1MDA0MjIyWhcNMjUwNTAyMDA0MjIyWjAYMRYwFAYD VQQDEw02ODBhZGE2ZS1kODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dux7zr7lqO1mMD8Ff/L3rXSO1IFTpVu6nkv5IlEy0uiw0kNgZ+zkcpVjRxL BMlWZLyKlzRqD3VSc1Q34aJhcBM60uwhmpYTenZAzNyN+CoYn4XHldWyu5zixUWA mF7bJoI8iOpNWiyDVOjk744Ba8XgZdLLFtyEviZ3UG8l+GBolVWHcLt8UAJ2tXt1 hNGIuX2OLQuH545Q3i3D5BqTbCdEHSyQlYM0FwVRm/raECTqQJTzPuJ39Y6Dyh3o 2kAj1weKT6dORTVeKSNxO3/oZEUcl+roF2nN1Xq2hnKquImqvv2QdcXfwizON3Rj 70WJRs2Bim+6NpmS9d5lotWdIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAQEplf QIAkng+/BP5gHOO2TbtZMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcl3Tp3xZKcYrldcVsoccbNhOPB6OBoObZ8otoxYiKqyJmxZ8u/EPD 7YlyaO0Bj69Ww2O05IrhgJKGaMnjmE7zVbbtLcLsPFMS7BdqNH/ekFJjJ7BgDwuG l85VxIe+ER7e5S6ImnrbGn55H3MbM+5sqxkw2zasrWUfXzRRpNFopFOxvtDZoozy U4CPC70ApSj/mr1B1XN2doSG1FqWq7uYVWpP2iicXaWOIaA9VZsUJf4uGSA4QN1t XSMFzMZ/tcrT1nB5ci8uZLZgsiZ8Ee9r9OreNAh75seOaw27CpHYfIUAyMbc9fe5 valAVmLc0b8osPvJbTSwnJqA+LiWCiMc -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:24 2025 by rpki-client