$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: X8CpdIhNB4bQb3NQsJms8ezrc2SFLiJDfijUwuJiriw= Subject key identifier: 07:4E:89:08:EA:51:F1:E7:BA:E9:65:73:46:F9:D7:D2:79:60:F8:C7 Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 07CB Signing time: Thu 24 Apr 2025 20:53:45 +0000 Manifest this update: Thu 24 Apr 2025 20:53:44 +0000 Manifest next update: Thu 01 May 2025 20:53:44 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: aq1x5jU74xqwCp2JcbdMPMzEcc/Gm+bSls0w2W7VZA8=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: Apr 24 20:53:44 2025 GMT Not After : May 1 20:53:44 2025 GMT Subject: CN=680aa4d8-5b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:1c:ee:fc:23:a1:f8:7a:0a:6b:9f:67:09: 33:e3:18:48:c6:58:67:59:86:39:ad:93:7f:97:a8: 35:94:29:6d:27:b9:8b:b9:b5:fc:50:83:6a:a2:03: dc:e4:01:06:5b:1b:ae:f9:0d:8e:02:f3:d2:d8:ce: dd:c9:35:b4:08:95:99:c1:5c:e8:a6:71:1b:32:23: 64:1f:1e:df:f5:3d:77:3d:04:a1:09:de:67:29:d1: 8c:56:d3:b7:5d:29:58:1d:a5:a0:43:b1:84:42:37: 4f:05:90:a4:c1:6f:53:7d:77:c1:1a:7a:48:0e:8b: ca:33:55:e6:df:27:50:6d:03:13:54:57:f3:e2:a0: 82:54:9d:66:dc:9a:8e:ed:06:27:12:fa:46:6b:f2: 23:c6:ab:da:82:68:65:00:8f:83:2a:14:df:18:7c: ef:ce:76:db:9c:b4:e1:fb:5c:d3:bc:fb:a1:01:f7: 2d:ed:53:44:71:c0:df:30:35:8b:17:05:63:85:32: 2b:34:d5:4a:ac:fd:86:3c:af:28:a1:51:83:f3:da: b9:22:0d:41:63:98:2b:ba:40:9e:fa:27:fc:53:01: b0:2a:4a:12:32:8a:5f:72:29:bf:e4:7d:8c:66:6f: 43:33:a4:79:f2:b1:b6:2d:01:b4:48:bf:88:5b:6f: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:89:08:EA:51:F1:E7:BA:E9:65:73:46:F9:D7:D2:79:60:F8:C7 X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:65:dc:96:fa:27:a6:fc:29:0b:63:13:fe:88:24:48:9f: 09:9d:71:44:15:68:11:0c:9c:12:85:d9:48:6b:bf:8f:fc:56: a3:96:95:83:6c:14:0e:df:60:b0:7c:cf:dc:37:e0:2c:23:e0: 30:65:8d:47:e1:86:2c:0b:7f:7c:07:3c:00:74:fb:14:de:a7: 8f:21:a6:b2:74:0e:09:b3:52:44:f1:86:4c:44:14:67:f9:8b: 9a:43:08:cc:25:2a:43:c2:b4:c1:50:8f:95:c0:fb:67:37:75: e7:40:9f:04:b3:23:34:6a:4d:9f:67:bd:c0:4b:f0:6d:4c:ce: 3b:a7:05:fe:54:d7:5d:90:75:80:4c:d0:a8:e0:64:31:ba:ea: c6:9f:00:c4:ff:6e:4a:90:02:76:3e:82:04:3e:f4:b2:99:b9: 45:fe:c6:3d:fe:c7:6e:11:06:7b:44:8a:85:44:1e:57:bd:00: d0:e4:62:fc:5b:69:b7:49:b6:e8:bd:b8:92:12:43:30:cd:e1: 71:8c:39:86:09:94:42:72:48:bb:ff:68:fe:4f:d6:1f:3a:e1: 8a:2e:60:f0:7e:d7:7d:e8:40:d6:87:93:17:f9:f8:90:b1:bb: 43:0b:08:61:8c:4b:8f:8f:c4:7b:7c:9c:df:bb:4b:3e:1c:32: f4:bf:3e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwNDI0MjA1MzQ0WhcNMjUwNTAxMjA1MzQ0WjAYMRYwFAYD VQQDEw02ODBhYTRkOC01YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AQc7vwjofh6CmufZwkz4xhIxlhnWYY5rZN/l6g1lCltJ7mLubX8UINqogPc 5AEGWxuu+Q2OAvPS2M7dyTW0CJWZwVzopnEbMiNkHx7f9T13PQShCd5nKdGMVtO3 XSlYHaWgQ7GEQjdPBZCkwW9TfXfBGnpIDovKM1Xm3ydQbQMTVFfz4qCCVJ1m3JqO 7QYnEvpGa/IjxqvagmhlAI+DKhTfGHzvznbbnLTh+1zTvPuhAfct7VNEccDfMDWL FwVjhTIrNNVKrP2GPK8ooVGD89q5Ig1BY5grukCe+if8UwGwKkoSMopfcim/5H2M Zm9DM6R58rG2LQG0SL+IW2+5jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdOiQjq UfHnuullc0b519J5YPjHMB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIRmXclvonpvwpC2MT/ogkSJ8JnXFEFWgRDJwShdlIa7+P/FajlpWD bBQO32CwfM/cN+AsI+AwZY1H4YYsC398BzwAdPsU3qePIaaydA4Js1JE8YZMRBRn +YuaQwjMJSpDwrTBUI+VwPtnN3XnQJ8EsyM0ak2fZ73AS/BtTM47pwX+VNddkHWA TNCo4GQxuurGnwDE/25KkAJ2PoIEPvSymblF/sY9/sduEQZ7RIqFRB5XvQDQ5GL8 W2m3SbbovbiSEkMwzeFxjDmGCZRCcki7/2j+T9YfOuGKLmDwftd96EDWh5MX+fiQ sbtDCwhhjEuPj8R7fJzfu0s+HDL0vz6M -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:48 2025 by rpki-client