$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json) Hash identifier: VCyiYXk5QpRA5tktHY5G6dN4Xol08wrSnTo4W9aEJ7I= Subject key identifier: 8B:3B:92:57:38:01:75:DE:7F:4E:1A:D8:B8:A3:4D:F9:74:A5:64:CC Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft Manifest number: 88 Signing time: Fri 25 Apr 2025 05:34:43 +0000 Manifest this update: Fri 25 Apr 2025 05:34:43 +0000 Manifest next update: Fri 02 May 2025 05:34:43 +0000 Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: nxJE9zwbEWGy25Xci0IxyNEcr1nHgtSICCbPzuIGvcw=) 2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=) 3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=) 4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Validity Not Before: Apr 25 05:34:43 2025 GMT Not After : May 2 05:34:43 2025 GMT Subject: CN=680b1ef3-605e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:b1:90:09:69:79:56:55:9e:b4:62:09:39: 3e:5a:35:8d:1b:d5:94:0b:71:09:40:30:77:b6:7c: 52:42:40:f7:5c:21:e8:48:ad:51:84:4d:92:9b:f3: d3:49:6c:6a:90:5d:01:46:cd:a8:a7:69:b4:a1:66: 26:ea:8d:9c:83:cb:b5:31:6d:16:b6:4e:1f:d1:1f: 22:a4:ac:4c:a8:9a:10:84:27:7b:20:7e:8e:a2:ea: a9:5e:a6:71:99:2b:73:c8:9d:48:4d:0f:d7:9b:f4: 48:f2:9b:07:bc:d7:e0:4f:f2:a2:89:4d:79:6b:ef: 7d:71:5f:8b:41:5a:57:eb:8b:a1:1e:8d:0b:5d:b8: 07:79:41:c7:15:fc:1f:d4:41:57:4a:6f:12:79:c6: ea:15:59:34:23:85:73:a9:ea:bc:03:8c:17:17:b5: 09:62:ea:fa:0e:4c:c0:07:58:c4:9d:1c:30:05:ca: ff:d5:32:7c:a0:34:ee:1d:2b:34:8b:d5:99:50:58: 01:b7:fe:14:9d:c5:56:7d:52:2f:a3:83:8e:d8:31: 6f:fb:43:cb:36:31:f6:03:e0:5d:80:75:4f:94:1a: 36:ed:29:6e:72:35:e3:15:f2:d5:d5:d3:cb:5f:23: 1e:e7:30:97:76:07:dc:f9:4a:8a:92:a0:65:54:58: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:92:57:38:01:75:DE:7F:4E:1A:D8:B8:A3:4D:F9:74:A5:64:CC X509v3 Authority Key Identifier: keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:13:78:fb:ad:7a:b6:ac:d5:b5:81:bc:a3:97:23:51:b1:95: ad:98:8a:3d:de:38:40:a4:3d:fc:5c:76:03:74:a8:2f:cd:33: 1e:cc:5c:93:fe:4e:b5:aa:a4:4f:57:cd:46:17:7c:9d:c8:3b: 5d:f9:6d:84:73:e1:c8:5d:67:c8:60:b6:2e:c3:9a:24:cc:9c: 6d:b6:19:9f:e8:c9:38:ed:6a:93:22:cd:44:eb:46:cb:33:61: fc:4e:9c:65:4e:41:1e:b4:38:bd:33:a3:02:d2:13:4d:fd:ac: cb:a7:6a:07:33:15:c0:ca:9b:a5:39:35:8f:c3:fb:c4:21:6d: ef:ee:88:6f:33:19:12:db:fa:f8:4e:d5:72:01:ee:48:ac:26: 94:39:7a:de:46:a3:8e:be:20:98:03:d2:75:0a:fa:37:94:3a: 69:87:4f:9a:ed:90:27:a5:9e:00:89:9f:f2:45:3e:4d:17:40: 9e:96:f5:97:c8:3b:ee:3e:65:b3:9d:d2:fd:2f:3a:86:15:de: cd:bb:70:a9:6c:1d:51:09:92:4b:6e:ea:b7:23:26:b6:4a:c0: c6:9d:ff:ce:e0:bc:12:bf:d7:12:cf:b8:ac:8c:d7:28:3d:03: 36:2d:4f:1b:a9:34:50:29:b8:59:53:18:91:45:98:58:78:0d: dd:0a:48:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0 RENFNzhBNDYwHhcNMjUwNDI1MDUzNDQzWhcNMjUwNTAyMDUzNDQzWjAYMRYwFAYD VQQDEw02ODBiMWVmMy02MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXWxkAlpeVZVnrRiCTk+WjWNG9WUC3EJQDB3tnxSQkD3XCHoSK1RhE2Sm/PT SWxqkF0BRs2op2m0oWYm6o2cg8u1MW0Wtk4f0R8ipKxMqJoQhCd7IH6OouqpXqZx mStzyJ1ITQ/Xm/RI8psHvNfgT/KiiU15a+99cV+LQVpX64uhHo0LXbgHeUHHFfwf 1EFXSm8SecbqFVk0I4Vzqeq8A4wXF7UJYur6DkzAB1jEnRwwBcr/1TJ8oDTuHSs0 i9WZUFgBt/4UncVWfVIvo4OO2DFv+0PLNjH2A+BdgHVPlBo27SlucjXjFfLV1dPL XyMe5zCXdgfc+UqKkqBlVFjFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIs7klc4 AXXef04a2LijTfl0pWTMMB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgw d3Z5V3J4bUx4WGhOem5pa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxE3j7rXq2rNW1gbyjlyNRsZWtmIo93jhApD38XHYDdKgvzTMezFyT /k61qqRPV81GF3ydyDtd+W2Ec+HIXWfIYLYuw5okzJxtthmf6Mk47WqTIs1E60bL M2H8TpxlTkEetDi9M6MC0hNN/azLp2oHMxXAypulOTWPw/vEIW3v7ohvMxkS2/r4 TtVyAe5IrCaUOXreRqOOviCYA9J1Cvo3lDpph0+a7ZAnpZ4AiZ/yRT5NF0CelvWX yDvuPmWzndL9LzqGFd7Nu3CpbB1RCZJLbuq3Iya2SsDGnf/O4LwSv9cSz7isjNco PQM2LU8bqTRQKbhZUxiRRZhYeA3dCkgr -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:31 2025 by rpki-client