$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json) Hash identifier: amkpUKQqOBSCPHNNWSwD9OEHQAYEun+CNjgEidnhXRU= Subject key identifier: B3:B4:78:D7:B1:A7:73:82:EA:98:C1:62:BC:EA:13:85:6C:3E:0C:DC Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft Manifest number: 3D Signing time: Thu 01 May 2025 06:33:20 +0000 Manifest this update: Thu 01 May 2025 06:33:19 +0000 Manifest next update: Thu 08 May 2025 06:33:19 +0000 Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: dFF8y2odddCAONsOCVjVVR1sFFihSXXv+5Ion5XV7+8=) 2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Validity Not Before: May 1 06:33:19 2025 GMT Not After : May 8 06:33:19 2025 GMT Subject: CN=681315b0-a2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:67:65:21:d3:76:cc:8b:f0:a3:a9:9e:ac: a2:b2:00:85:eb:40:08:79:dc:2b:42:fa:3e:06:94: 1a:93:96:7e:f8:a1:72:b7:c1:dc:39:50:ce:d5:d5: 1e:c0:92:23:2b:14:49:da:68:ed:f7:e0:90:9a:d2: f0:60:11:95:17:ca:44:4a:09:5f:6e:e2:4c:4e:3a: 9b:30:04:d2:d3:09:e8:69:fe:4d:0d:fe:c9:df:f5: 62:ce:1b:64:69:88:6d:9f:7f:2c:7f:17:56:76:c9: df:70:c1:4b:b9:7d:66:47:e4:0c:c5:3d:51:73:9d: 48:61:55:8d:bd:b7:a9:d8:6b:0c:ce:c4:e4:c9:c4: 88:e1:b3:fd:c6:73:fb:4b:98:d6:fa:52:50:f6:dc: 3f:e0:aa:4d:9b:a4:9f:34:27:23:ba:18:65:fa:b5: 56:af:78:00:c7:e0:3c:57:f3:d7:b8:41:c4:75:55: ae:28:f7:94:68:b2:75:e8:57:a1:fa:77:e5:85:3c: dd:b6:7d:58:7b:b6:2c:38:24:87:c6:f8:91:85:e1: 81:99:78:a2:a0:c9:35:40:67:22:e6:30:bd:13:c3: 0f:e5:3f:ef:77:e4:21:80:93:fc:56:93:9b:c8:ec: f9:c0:76:f3:1d:e2:84:70:4e:e6:fb:d0:1a:9d:1b: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B4:78:D7:B1:A7:73:82:EA:98:C1:62:BC:EA:13:85:6C:3E:0C:DC X509v3 Authority Key Identifier: keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6a:9f:29:f4:5d:dd:9a:81:a0:4e:1d:98:e3:74:76:a6:6c: 18:c9:c3:e4:7a:41:05:cb:7d:2d:08:58:5a:02:a2:65:66:7a: bf:f3:39:b7:67:e7:7e:00:32:8f:eb:64:6b:30:4b:e4:fe:44: f1:f9:fc:5e:b3:79:96:43:ba:08:bb:28:aa:e5:72:09:78:a0: d8:ba:a6:b1:be:81:60:5f:6f:42:02:3e:8a:24:9d:50:97:6d: bf:2b:86:11:27:05:b8:4e:d5:4f:7c:21:a2:05:af:a9:ed:97: 12:db:b7:78:ad:15:d2:6c:c3:54:82:e7:d6:be:8e:d3:53:95: 26:93:96:e2:e2:29:1a:3c:38:97:7b:b3:cd:8d:6c:a6:55:1a: bb:c3:99:ac:26:59:43:db:f0:a3:47:4a:bb:25:73:3e:d0:68: e5:83:47:39:24:54:05:36:8b:cb:cf:ad:77:57:3e:f1:d7:c3: 22:15:9d:4b:1e:81:bb:10:80:70:87:6d:14:5f:e7:c6:1c:8e: 8b:57:13:c2:83:0c:55:c4:df:06:21:21:20:e7:c3:04:e4:7b: 34:07:22:47:99:39:de:de:d2:fd:7a:e9:8a:55:25:7a:25:2c: 08:a7:cc:68:6b:67:ae:ea:66:26:1a:64:90:f3:8b:fc:7f:b5: 4e:37:34:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTg4NDExMC8GA1UEBRMoQkUzQkZCMjc4REI5QTAzREVBMzg1NkQ3RkUyMjkyMTgz NzREOEZDMDAeFw0yNTA1MDEwNjMzMTlaFw0yNTA1MDgwNjMzMTlaMBgxFjAUBgNV BAMTDTY4MTMxNWIwLWEyYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY4GdlIdN2zIvwo6merKKyAIXrQAh53CtC+j4GlBqTln74oXK3wdw5UM7V1R7A kiMrFEnaaO334JCa0vBgEZUXykRKCV9u4kxOOpswBNLTCehp/k0N/snf9WLOG2Rp iG2ffyx/F1Z2yd9wwUu5fWZH5AzFPVFznUhhVY29t6nYawzOxOTJxIjhs/3Gc/tL mNb6UlD23D/gqk2bpJ80JyO6GGX6tVaveADH4DxX89e4QcR1Va4o95RosnXoV6H6 d+WFPN22fVh7tiw4JIfG+JGF4YGZeKKgyTVAZyLmML0Tww/lP+935CGAk/xWk5vI 7PnAdvMd4oRwTub70BqdG+z/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs7R417Gn c4LqmMFivOoThWw+DNwwHwYDVR0jBBgwFoAUvjv7J425oD3qOFbX/iKSGDdNj8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1ODg0LzYxQjA3MDVBQ0RF QjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmp2N0o0MjVvRDNxT0ZiWF9pS1NHRGROajhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 ODg0LzYxQjA3MDVBQ0RFQjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0Qz cU9GYlhfaUtTR0RkTmo4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxqnyn0Xd2agaBOHZjjdHambBjJw+R6QQXLfS0IWFoComVmer/zObdn 534AMo/rZGswS+T+RPH5/F6zeZZDugi7KKrlcgl4oNi6prG+gWBfb0ICPooknVCX bb8rhhEnBbhO1U98IaIFr6ntlxLbt3itFdJsw1SC59a+jtNTlSaTluLiKRo8OJd7 s82NbKZVGrvDmawmWUPb8KNHSrslcz7QaOWDRzkkVAU2i8vPrXdXPvHXwyIVnUse gbsQgHCHbRRf58YcjotXE8KDDFXE3wYhISDnwwTkezQHIkeZOd7e0v166YpVJXol LAinzGhrZ67qZiYaZJDzi/x/tU43NNY= -----END CERTIFICATE-----Generated at Thu May 1 23:58:22 2025 by rpki-client