$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: WlCftjZ95bxo03r5Hlr9788iTVd7RfyWROTOV14FJrI= Subject key identifier: 77:AA:94:97:BB:32:53:91:AE:78:CD:45:03:B1:69:5A:8B:CF:D7:63 Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 3476 Signing time: Thu 24 Apr 2025 14:43:03 +0000 Manifest this update: Thu 24 Apr 2025 14:43:02 +0000 Manifest next update: Thu 01 May 2025 14:43:02 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: enOGlaxVa3W0jF/8SLTqfaf40OTj/Y6Abct08chLijM=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Apr 24 14:43:02 2025 GMT Not After : May 1 14:43:02 2025 GMT Subject: CN=680a4df7-008c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:ff:2b:1c:d7:80:90:04:64:9b:31:f4:19: 83:d5:69:6d:e3:71:f3:4c:da:72:79:c4:a4:9d:9e: f6:eb:60:ea:82:34:3e:5d:a1:89:78:85:e1:6c:f1: a1:3c:08:e0:9f:24:c0:2a:3a:69:01:2a:56:b3:54: 84:d6:8c:e7:5d:38:71:e1:b9:0d:2a:db:4c:1b:64: f8:1f:32:bc:24:99:0f:4d:2c:80:6e:ed:dc:74:f1: 59:c3:92:92:10:36:69:b3:de:57:86:a0:f4:27:d1: 0d:9c:34:79:7e:76:87:83:b0:69:66:7d:47:7d:87: 55:c0:a4:d3:c9:0c:f1:32:17:6d:fc:77:c4:d2:03: 16:d9:35:b5:f0:e1:aa:25:d3:6c:d5:a0:bd:38:1a: f3:e4:8d:18:35:ea:05:42:97:9d:84:f6:2f:0f:da: 97:10:e4:72:ce:64:2f:0e:4c:a3:ae:d1:ef:42:2f: 25:87:78:9e:ad:99:0a:1e:dc:05:ef:9e:fd:11:e8: b1:a5:02:67:dc:62:87:70:11:8b:90:25:03:bb:f0: 73:d3:3d:94:a3:68:c2:a3:5f:f0:20:f8:fc:02:cb: f1:f6:6e:ff:84:47:28:be:b5:98:e1:2a:e9:19:44: 31:8c:2f:ea:51:f0:f4:c6:82:68:60:ce:66:00:75: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:94:97:BB:32:53:91:AE:78:CD:45:03:B1:69:5A:8B:CF:D7:63 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:46:45:d3:ea:86:c2:de:55:2f:1d:6b:d8:1a:64:66:98:22: cc:b4:74:9a:42:2d:88:85:59:e8:c7:58:9a:43:55:17:74:21: 4d:ac:54:f3:f6:37:94:a5:87:66:57:fc:98:13:47:b9:9c:fa: a6:54:80:f5:b7:8e:2a:32:89:f2:fa:0a:1f:96:41:ca:98:97: 08:35:b2:6b:38:01:41:89:2e:8f:4e:e3:42:f8:c4:e7:10:65: 37:1b:bc:33:60:7e:e8:c5:f7:05:48:37:99:50:89:7f:3c:fd: 73:40:c4:74:fa:a6:51:2d:2a:72:2c:4a:35:8a:1f:2b:77:72: f9:94:58:b9:a6:54:2b:eb:a2:87:7d:9c:1e:96:95:85:1c:42: 25:7e:d5:dd:cc:77:8d:a5:71:da:c1:11:82:7a:86:57:25:91: b7:9c:00:f9:10:c5:8a:fb:33:d3:10:89:70:f9:09:4a:12:37: cf:2d:a7:60:4d:92:9d:8d:8d:cf:1c:52:7b:a6:8f:32:32:a7: 95:40:8b:58:c1:17:2a:18:a1:b0:94:33:25:68:72:f7:76:3e: 69:2f:a0:9c:98:8c:58:56:52:77:9c:69:8d:0f:62:13:2f:9d: 94:5e:f6:c1:8e:3a:51:39:c2:a9:c6:43:88:ce:9f:9a:e6:f5: 20:ba:fd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNDI0MTQ0MzAyWhcNMjUwNTAxMTQ0MzAyWjAYMRYwFAYD VQQDEw02ODBhNGRmNy0wMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgT/KxzXgJAEZJsx9BmD1Wlt43HzTNpyecSknZ7262DqgjQ+XaGJeIXhbPGh PAjgnyTAKjppASpWs1SE1oznXThx4bkNKttMG2T4HzK8JJkPTSyAbu3cdPFZw5KS EDZps95XhqD0J9ENnDR5fnaHg7BpZn1HfYdVwKTTyQzxMhdt/HfE0gMW2TW18OGq JdNs1aC9OBrz5I0YNeoFQpedhPYvD9qXEORyzmQvDkyjrtHvQi8lh3ierZkKHtwF 7579EeixpQJn3GKHcBGLkCUDu/Bz0z2Uo2jCo1/wIPj8Asvx9m7/hEcovrWY4Srp GUQxjC/qUfD0xoJoYM5mAHWcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeqlJe7 MlORrnjNRQOxaVqLz9djMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbRkXT6obC3lUvHWvYGmRmmCLMtHSaQi2IhVnox1iaQ1UXdCFNrFTz 9jeUpYdmV/yYE0e5nPqmVID1t44qMony+goflkHKmJcINbJrOAFBiS6PTuNC+MTn EGU3G7wzYH7oxfcFSDeZUIl/PP1zQMR0+qZRLSpyLEo1ih8rd3L5lFi5plQr66KH fZwelpWFHEIlftXdzHeNpXHawRGCeoZXJZG3nAD5EMWK+zPTEIlw+QlKEjfPLadg TZKdjY3PHFJ7po8yMqeVQItYwRcqGKGwlDMlaHL3dj5pL6CcmIxYVlJ3nGmND2IT L52UXvbBjjpROcKpxkOIzp+a5vUguv1h -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:22 2025 by rpki-client