$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: a7ORBbOXE2RgXK7ivmagB3/TKyXSyGoj2sVhCPLdHbE= Subject key identifier: ED:33:C9:BC:B5:14:38:94:59:A3:94:CD:0C:AD:C5:5C:01:4F:55:EF Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 0662 Signing time: Thu 24 Apr 2025 22:10:21 +0000 Manifest this update: Thu 24 Apr 2025 22:10:20 +0000 Manifest next update: Thu 01 May 2025 22:10:20 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: E93N5bq+gO8qx7tx6bgHLBndwaAo7AEiFjwuI/9EbQ8=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Apr 24 22:10:20 2025 GMT Not After : May 1 22:10:20 2025 GMT Subject: CN=680ab6cc-17fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:80:a6:8e:04:05:5c:69:f8:6b:ed:86:60: d5:4f:8d:67:dc:27:68:c6:82:89:4b:90:68:3a:38: bf:2f:29:27:9f:db:9b:3c:01:fd:41:67:1f:f7:8b: 8c:e2:e4:3b:55:1e:da:d3:a6:25:03:ab:df:81:63: ab:d8:05:32:d8:73:96:bf:83:cc:fb:96:16:b1:8a: 4d:3e:0c:ae:cf:73:a4:9b:54:6c:1f:92:79:76:ec: 38:86:1d:62:30:e1:9a:88:4e:a0:d8:9c:f0:ca:63: 23:ad:7c:c5:8d:03:a8:30:10:97:33:24:0d:1b:66: c9:10:73:87:b8:e7:0c:51:5e:f5:62:6a:48:e1:f1: 75:4a:4d:0a:5a:0f:2d:a2:9c:17:a0:95:a0:bc:6b: 48:3d:9c:16:3f:e4:cf:c4:e9:62:4e:67:b9:a8:b0: 2a:ec:b0:18:91:63:6a:7b:2b:b6:7b:36:83:8d:e7: 33:5f:3b:00:b2:7b:cf:f0:a5:ea:10:6d:4a:d6:ba: 1a:ff:60:d1:cb:56:1f:d4:4e:5e:ab:fe:c9:9a:3a: 69:51:28:ad:4f:86:45:5e:40:85:32:7d:7e:01:47: ac:43:60:a4:bd:15:b1:42:ec:cf:dc:78:85:f5:85: 7d:51:2e:49:77:9f:e2:85:03:ed:af:ac:0e:35:53: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:C9:BC:B5:14:38:94:59:A3:94:CD:0C:AD:C5:5C:01:4F:55:EF X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:55:6b:2c:50:56:b3:15:16:86:b5:46:3e:7a:c6:1d:5a:90: 5b:c2:29:ec:d9:e4:cb:da:79:eb:57:93:b2:23:f3:53:78:24: 4c:a9:64:d4:37:af:d3:ad:35:6e:02:78:7c:5e:d8:2c:23:1e: 0f:86:eb:ea:35:2d:6b:94:aa:4e:b1:9a:3e:ba:68:31:aa:83: ac:17:ac:4d:8b:1a:c9:5b:ff:5a:c2:21:8f:d2:e4:63:a7:d5: b2:88:e8:b0:87:91:39:4b:6a:c4:20:1d:a7:fa:19:d9:05:8f: d4:02:13:cf:11:fd:93:68:71:50:44:3f:01:20:5b:61:61:87: 63:36:7a:e0:e3:a2:c9:15:76:2d:1c:c2:3f:b4:ed:79:84:ad: 82:3f:4a:19:de:c7:8f:56:1a:a0:34:5c:74:f3:95:90:f0:2e: c6:42:a4:d9:f6:25:cd:b5:1e:a7:ca:8f:72:80:91:0b:1a:27: 31:9a:74:bf:76:c8:8c:44:06:fd:20:7f:b9:e4:79:05:66:9e: f7:df:4f:6b:7d:56:51:85:c8:1d:2c:4e:ee:e8:59:34:70:f7: d2:91:c8:f4:c2:ad:55:b0:ad:13:32:6d:b1:91:2f:45:d4:6c: 52:3a:a6:10:c3:6e:36:93:7e:e6:97:68:86:29:45:d0:66:8f: 6b:a3:01:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwNDI0MjIxMDIwWhcNMjUwNTAxMjIxMDIwWjAYMRYwFAYD VQQDEw02ODBhYjZjYy0xN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp82Apo4EBVxp+GvthmDVT41n3CdoxoKJS5BoOji/Lyknn9ubPAH9QWcf94uM 4uQ7VR7a06YlA6vfgWOr2AUy2HOWv4PM+5YWsYpNPgyuz3Okm1RsH5J5duw4hh1i MOGaiE6g2JzwymMjrXzFjQOoMBCXMyQNG2bJEHOHuOcMUV71YmpI4fF1Sk0KWg8t opwXoJWgvGtIPZwWP+TPxOliTme5qLAq7LAYkWNqeyu2ezaDjeczXzsAsnvP8KXq EG1K1roa/2DRy1Yf1E5eq/7JmjppUSitT4ZFXkCFMn1+AUesQ2CkvRWxQuzP3HiF 9YV9US5Jd5/ihQPtr6wONVOf4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0zyby1 FDiUWaOUzQytxVwBT1XvMB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGVWssUFazFRaGtUY+esYdWpBbwins2eTL2nnrV5OyI/NTeCRMqWTU N6/TrTVuAnh8XtgsIx4PhuvqNS1rlKpOsZo+umgxqoOsF6xNixrJW/9awiGP0uRj p9WyiOiwh5E5S2rEIB2n+hnZBY/UAhPPEf2TaHFQRD8BIFthYYdjNnrg46LJFXYt HMI/tO15hK2CP0oZ3sePVhqgNFx085WQ8C7GQqTZ9iXNtR6nyo9ygJELGicxmnS/ dsiMRAb9IH+55HkFZp73309rfVZRhcgdLE7u6Fk0cPfSkcj0wq1VsK0TMm2xkS9F 1GxSOqYQw242k37ml2iGKUXQZo9rowHU -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:44 2025 by rpki-client