$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft File: V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json) Hash identifier: TtdodOkOfVysyQ5EkM4Ox3ZKaDKLr83lp4rrc3f5kEU= Subject key identifier: 1F:F4:C3:AB:CA:B7:60:41:5C:E3:F9:D8:46:D7:8A:ED:46:AE:64:45 Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 1097 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft Manifest number: 108C Signing time: Thu 24 Apr 2025 17:21:08 +0000 Manifest this update: Thu 24 Apr 2025 17:21:08 +0000 Manifest next update: Thu 01 May 2025 17:21:08 +0000 Files and hashes: 1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: qANGv5q7Ym9JoRkp0aYVkOGBiW1A9Kxuatu6X/v80ow=) 2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: qxrPSY85HQzoS5SwzTHbqWN+Z7CNWTWllsLf46VBiDQ=) 3: A2BA75081C1211F099751029C4F9AE02.roa (hash: hcW1O4hMbQJ9D96SY/+mKlNT2B+dI5MJ4LZJbYGgdIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B, serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: Apr 24 17:21:08 2025 GMT Not After : May 1 17:21:08 2025 GMT Subject: CN=680a7304-54d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:c1:c5:0d:bd:b3:33:38:d5:7b:64:55:f8: 8e:38:81:3b:e0:7c:ec:8a:33:9c:7b:dc:b6:e7:cc: 3b:8e:46:3e:cc:f2:cf:a5:ba:65:bc:97:5b:70:ad: f4:ce:7a:79:46:9a:b4:8b:4c:72:29:34:98:40:66: ab:d9:e7:5c:c6:ea:cc:e4:c0:14:3b:91:fe:dd:e8: 98:06:ce:dd:0e:7e:a5:af:0c:e9:cd:4e:b2:86:ee: 07:4e:f7:81:63:80:23:86:e0:b3:9e:93:4e:c2:4d: 89:95:2e:dd:2f:c0:44:7e:97:ec:5f:66:37:88:66: 2f:d3:9d:57:9c:3b:ea:bf:9c:c0:88:c1:66:21:89: ef:57:9b:a1:32:71:50:66:60:9f:99:ee:a3:16:e3: 4c:0e:47:2f:63:44:7e:4b:3f:39:b8:50:2f:bb:4c: d4:ae:6b:be:14:e2:6a:0c:8d:eb:0c:7a:c3:31:36: f9:09:e4:44:e2:8a:3d:ea:65:94:cb:f9:c5:99:07: ff:ee:d8:0b:75:93:d8:da:f4:75:4d:5c:6f:58:a3: 7c:17:96:c9:0d:77:3e:be:67:b4:9d:21:3d:ab:1a: 58:0f:cc:a3:1e:ab:b0:32:8c:2c:f3:18:e6:7f:02: 72:01:de:ff:86:01:73:66:09:c9:a1:34:6f:86:b0: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:C3:AB:CA:B7:60:41:5C:E3:F9:D8:46:D7:8A:ED:46:AE:64:45 X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:69:fc:dd:2f:ad:b3:9e:ce:63:a3:50:cc:e5:71:c8:d7:6e: 10:71:5e:53:d2:c5:da:ee:d2:e9:c1:72:0e:c9:d1:82:91:ca: 86:a4:bd:3d:5a:db:d7:b8:44:ab:85:d2:0a:e2:f4:97:cb:9c: ec:a9:af:b9:d4:f5:56:2a:8d:3b:b5:4f:45:7a:fe:10:2d:91: de:94:ac:8d:0c:11:1a:8e:d0:c4:e1:1b:bc:77:e2:c9:18:41: 90:d4:7b:b5:9e:c5:25:dd:ab:f1:96:84:7b:2c:43:60:d5:68: 88:2f:f3:cd:38:fe:aa:da:e8:99:be:66:4d:1c:44:e6:25:5a: 20:b5:82:36:3e:8d:61:eb:7f:b7:ab:eb:59:c6:3f:69:cc:3d: 16:6a:59:01:8a:30:8d:18:b6:4b:61:cf:04:ef:51:d2:54:0b: 97:fb:1b:62:b7:00:b2:68:93:29:27:e6:66:ac:1f:65:87:f7: 90:72:f9:e2:77:ff:30:4f:8f:ea:58:e6:83:1d:f8:11:d2:56: 52:49:00:83:21:be:43:18:6c:2b:31:4e:da:5c:75:c0:c9:7d: 1b:ea:93:b0:e0:73:6e:59:d2:04:d1:08:58:37:cc:53:69:14: 63:97:84:d8:b1:58:e7:1a:73:68:25:2b:28:8f:de:d0:c0:fc: bb:c3:ed:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjUwNDI0MTcyMTA4WhcNMjUwNTAxMTcyMTA4WjAYMRYwFAYD VQQDEw02ODBhNzMwNC01NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZTBxQ29szM41XtkVfiOOIE74HzsijOce9y258w7jkY+zPLPpbplvJdbcK30 znp5Rpq0i0xyKTSYQGar2edcxurM5MAUO5H+3eiYBs7dDn6lrwzpzU6yhu4HTveB Y4AjhuCznpNOwk2JlS7dL8BEfpfsX2Y3iGYv051XnDvqv5zAiMFmIYnvV5uhMnFQ ZmCfme6jFuNMDkcvY0R+Sz85uFAvu0zUrmu+FOJqDI3rDHrDMTb5CeRE4oo96mWU y/nFmQf/7tgLdZPY2vR1TVxvWKN8F5bJDXc+vme0nSE9qxpYD8yjHquwMows8xjm fwJyAd7/hgFzZgnJoTRvhrCvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/0w6vK t2BBXOP52EbXiu1GrmRFMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA1Qi9CMzE5NjZDNDJDNUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2 aFpqaDlGX0dNM21hZXgwUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcafzdL62zns5jo1DM5XHI124QcV5T0sXa7tLpwXIOydGCkcqGpL09 WtvXuESrhdIK4vSXy5zsqa+51PVWKo07tU9Fev4QLZHelKyNDBEajtDE4Ru8d+LJ GEGQ1Hu1nsUl3avxloR7LENg1WiIL/PNOP6q2uiZvmZNHETmJVogtYI2Po1h63+3 q+tZxj9pzD0WalkBijCNGLZLYc8E71HSVAuX+xtitwCyaJMpJ+ZmrB9lh/eQcvni d/8wT4/qWOaDHfgR0lZSSQCDIb5DGGwrMU7aXHXAyX0b6pOw4HNuWdIE0QhYN8xT aRRjl4TYsVjnGnNoJSsoj97QwPy7w+31 -----END CERTIFICATE-----Generated at Sat Apr 26 17:26:04 2025 by rpki-client