$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: +9fMtKDOl5J/GVhkX91eYJZF0dS0ZV0oqrC/ppCSBII= Subject key identifier: 4E:E4:DF:4A:C5:59:E6:D5:1D:09:6E:E9:8F:82:96:93:8D:50:BD:0F Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0C4D Signing time: Thu 24 Apr 2025 18:15:56 +0000 Manifest this update: Thu 24 Apr 2025 18:15:56 +0000 Manifest next update: Thu 01 May 2025 18:15:56 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: Dw34M/XE4BGp9dxOyfvR7I6WpLfbtduVbosag86SbLU=) 2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: wgxBqTOXaVBqDTXi3QmSfIMhu4UE3inSSK8gOm0zVzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Apr 24 18:15:56 2025 GMT Not After : May 1 18:15:56 2025 GMT Subject: CN=680a7fdc-40ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:c4:ac:81:b0:f2:1a:0e:c6:6b:50:2d:49: dc:1c:30:88:2f:1d:4d:f0:46:09:72:de:25:a0:b1: f9:c6:da:b1:01:ac:09:d6:a4:5f:3e:50:9a:85:dd: 78:a4:a8:3b:18:b3:58:03:74:0e:ad:0f:b3:aa:d1: d5:a9:87:aa:e6:ee:c0:93:3c:7b:9f:cd:89:ee:6c: de:f7:ca:c7:a1:ac:b6:1c:46:77:57:ad:51:70:f8: 47:d2:fe:5c:24:01:8d:9a:ad:c4:93:29:32:e2:16: 56:47:c9:08:57:db:60:f2:0a:c4:31:91:03:41:f7: 05:47:a3:1b:7a:ac:14:34:08:5f:52:9c:1d:b7:20: c7:ac:5c:4c:44:04:b6:7d:bc:13:7e:3a:20:f1:e6: 5d:a5:fb:c2:f2:f6:3d:dd:c8:72:18:d3:2e:b5:6d: e0:0f:39:02:53:f9:4c:b3:80:51:13:51:f8:f4:a1: 0d:ed:07:8d:1f:d2:71:df:a7:ad:e7:dc:ee:f2:50: 43:70:2b:81:6e:5a:98:db:d9:a5:e5:66:c7:c7:1b: 5a:bf:07:7b:a3:c8:8b:6d:6c:b2:b4:98:4c:99:47: bc:3e:3d:cc:f0:12:7d:d9:d5:02:33:9b:29:01:e3: 1b:a5:10:cf:78:fb:62:19:4a:2f:17:a5:b8:43:5f: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:DF:4A:C5:59:E6:D5:1D:09:6E:E9:8F:82:96:93:8D:50:BD:0F X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:92:df:c3:ac:7c:d8:42:e6:06:73:2a:17:b0:fd:b4:c6:20: aa:cf:59:a9:be:76:85:e3:fc:1c:a1:17:be:c5:b2:f9:7b:c7: 49:6b:d6:b5:09:82:8a:b0:c8:77:b9:ef:fd:87:66:68:73:06: b9:0c:0d:1c:8c:bd:c2:01:d8:04:55:f5:61:d1:08:db:9f:3c: 9b:a5:76:b5:1e:cd:58:81:b6:f8:c7:81:4b:34:be:ee:d3:2a: f1:f5:da:a5:8a:54:8e:ef:90:03:44:84:f9:44:3a:f5:2b:92: d3:b9:67:5d:b4:3d:7b:0f:4f:59:da:4f:0a:24:c5:36:ec:48: 07:ef:e2:8b:b6:00:e9:71:1e:ad:9f:cc:dc:04:d7:5b:04:83: b1:78:aa:69:4c:62:84:1a:69:43:45:b9:58:7e:7c:5a:c4:74: 29:4e:85:4c:25:65:5d:ea:75:36:3d:fa:55:7e:00:01:f9:de: ce:69:47:39:95:27:c4:2b:1f:f2:70:38:be:a1:97:d7:fa:88: 91:6a:30:e3:4b:53:3f:82:07:ea:9a:aa:1f:6a:e2:c3:99:b0: da:55:c4:30:45:f9:fb:99:23:c0:8f:ed:ca:0d:9e:ba:78:9b: 7f:68:e3:fe:19:92:5c:62:c1:df:de:c1:30:c4:e7:26:09:cc: 9a:53:b4:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUwNDI0MTgxNTU2WhcNMjUwNTAxMTgxNTU2WjAYMRYwFAYD VQQDEw02ODBhN2ZkYy00MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxarErIGw8hoOxmtQLUncHDCILx1N8EYJct4loLH5xtqxAawJ1qRfPlCahd14 pKg7GLNYA3QOrQ+zqtHVqYeq5u7Akzx7n82J7mze98rHoay2HEZ3V61RcPhH0v5c JAGNmq3Ekyky4hZWR8kIV9tg8grEMZEDQfcFR6MbeqwUNAhfUpwdtyDHrFxMRAS2 fbwTfjog8eZdpfvC8vY93chyGNMutW3gDzkCU/lMs4BRE1H49KEN7QeNH9Jx36et 59zu8lBDcCuBblqY29ml5WbHxxtavwd7o8iLbWyytJhMmUe8Pj3M8BJ92dUCM5sp AeMbpRDPePtiGUovF6W4Q1/9bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7k30rF WebVHQlu6Y+ClpONUL0PMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPkt/DrHzYQuYGcyoXsP20xiCqz1mpvnaF4/wcoRe+xbL5e8dJa9a1 CYKKsMh3ue/9h2Zocwa5DA0cjL3CAdgEVfVh0QjbnzybpXa1Hs1Ygbb4x4FLNL7u 0yrx9dqlilSO75ADRIT5RDr1K5LTuWddtD17D09Z2k8KJMU27EgH7+KLtgDpcR6t n8zcBNdbBIOxeKppTGKEGmlDRblYfnxaxHQpToVMJWVd6nU2PfpVfgAB+d7OaUc5 lSfEKx/ycDi+oZfX+oiRajDjS1M/ggfqmqofauLDmbDaVcQwRfn7mSPAj+3KDZ66 eJt/aOP+GZJcYsHf3sEwxOcmCcyaU7Tx -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:34 2025 by rpki-client