$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: CM4dq83xFhfxGxQFfq1S8LtRPwFgt0ZKC9t/9V1QhXQ= Subject key identifier: 56:54:B5:01:8F:24:E1:74:3A:03:D9:04:B9:63:30:7A:EB:DA:C5:A9 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 07CF Signing time: Thu 24 Apr 2025 20:52:42 +0000 Manifest this update: Thu 24 Apr 2025 20:52:42 +0000 Manifest next update: Thu 01 May 2025 20:52:42 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: yCjaaPhZPtW2C0SQozj8j2+k5XM2e8NmSt4QbIK3jjg=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Apr 24 20:52:42 2025 GMT Not After : May 1 20:52:42 2025 GMT Subject: CN=680aa49a-0695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:e6:1f:d9:c4:06:aa:c9:a9:4d:71:e4:1e: b4:3e:0b:14:b9:64:12:81:51:bb:95:0e:99:f7:58: 31:54:20:4b:f6:3d:f4:a8:88:92:f0:67:c2:43:26: 9a:04:4c:84:7a:8f:75:a8:26:18:94:33:3d:76:b9: 81:3d:49:74:fc:6f:57:3a:bb:53:4c:55:13:70:20: b5:12:77:bf:1c:ee:5d:ba:96:d1:00:b0:c8:e9:65: c3:0b:f6:0d:a9:24:b7:70:05:fc:22:a7:a0:12:ef: 43:51:90:81:e1:2f:0b:57:2c:9c:8d:45:c5:27:0a: a1:07:0d:0a:27:3c:55:52:cd:a3:c8:72:8c:5f:1d: 63:67:56:fe:67:49:bd:5f:4d:05:f7:4e:4d:94:8c: 3a:b3:c5:0a:d3:8b:d7:52:11:b3:aa:af:59:fc:78: 10:59:6e:d8:dd:d0:cb:95:ed:21:b4:59:09:34:48: 15:d8:74:98:f6:e6:49:4f:af:c9:d5:e9:e0:0f:1e: 08:cf:c2:76:da:b0:4c:f8:d3:15:23:fc:c9:99:fa: ea:92:74:03:b4:35:99:6f:a6:3a:72:96:bc:bd:6f: 0c:cd:ec:56:ae:9b:65:05:3b:cf:82:7d:3e:e1:3a: e1:ec:62:52:d7:35:2d:11:53:4a:f7:8a:44:64:a4: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:54:B5:01:8F:24:E1:74:3A:03:D9:04:B9:63:30:7A:EB:DA:C5:A9 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:73:0e:0a:4b:ad:7d:0b:68:d1:15:e0:b0:5b:c3:c3:ba:30: df:8e:c6:f7:c3:f2:ab:ba:87:fc:06:21:bc:9f:12:6a:8b:41: 5c:6d:e0:80:a4:df:a0:c3:da:b0:42:d3:93:28:90:7a:c1:e4: dd:f6:89:d5:99:81:be:30:17:4c:3b:43:87:5e:cd:cc:6e:d8: 80:8d:2e:8c:2e:55:55:87:f3:32:2e:f3:46:04:5c:92:51:98: 93:85:2c:b9:b5:7e:fa:ec:ff:87:91:13:80:e7:f5:79:4c:28: 92:7f:8c:85:af:54:45:22:01:34:f6:f4:6c:46:c5:a3:f6:1e: 10:b9:6e:f0:24:27:01:ed:6c:01:af:74:34:e1:b0:73:65:0a: 54:14:7b:2e:c8:ef:0e:af:7b:64:40:69:94:86:50:eb:79:1e: d6:7e:66:4c:28:cf:51:ee:7f:6c:99:7a:01:9d:45:c9:c8:6f: 93:a7:6d:b3:6b:10:0c:a7:d3:8d:7c:51:16:59:5a:df:a8:d2: 15:72:64:3b:f6:75:67:2b:f7:45:1c:41:ac:0a:86:e6:22:94: e1:f3:13:d8:a1:84:a1:33:5c:ee:ae:c6:97:81:5b:db:ee:e5: e4:c2:24:0f:4e:51:28:58:20:a9:37:e5:bc:84:01:e6:0e:6a: ba:00:62:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwNDI0MjA1MjQyWhcNMjUwNTAxMjA1MjQyWjAYMRYwFAYD VQQDEw02ODBhYTQ5YS0wNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1InmH9nEBqrJqU1x5B60PgsUuWQSgVG7lQ6Z91gxVCBL9j30qIiS8GfCQyaa BEyEeo91qCYYlDM9drmBPUl0/G9XOrtTTFUTcCC1Ene/HO5dupbRALDI6WXDC/YN qSS3cAX8IqegEu9DUZCB4S8LVyycjUXFJwqhBw0KJzxVUs2jyHKMXx1jZ1b+Z0m9 X00F905NlIw6s8UK04vXUhGzqq9Z/HgQWW7Y3dDLle0htFkJNEgV2HSY9uZJT6/J 1engDx4Iz8J22rBM+NMVI/zJmfrqknQDtDWZb6Y6cpa8vW8MzexWrptlBTvPgn0+ 4Trh7GJS1zUtEVNK94pEZKTzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZUtQGP JOF0OgPZBLljMHrr2sWpMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwcw4KS619C2jRFeCwW8PDujDfjsb3w/Kruof8BiG8nxJqi0FcbeCA pN+gw9qwQtOTKJB6weTd9onVmYG+MBdMO0OHXs3MbtiAjS6MLlVVh/MyLvNGBFyS UZiThSy5tX767P+HkROA5/V5TCiSf4yFr1RFIgE09vRsRsWj9h4QuW7wJCcB7WwB r3Q04bBzZQpUFHsuyO8Or3tkQGmUhlDreR7WfmZMKM9R7n9smXoBnUXJyG+Tp22z axAMp9ONfFEWWVrfqNIVcmQ79nVnK/dFHEGsCobmIpTh8xPYoYShM1zursaXgVvb 7uXkwiQPTlEoWCCpN+W8hAHmDmq6AGJJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:10 2025 by rpki-client