$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft File: vejnZNDzasWboDNpTTo883QGugk.mft (raw, json) Hash identifier: rTU+at4jo0N2mPwjKXrMN/U12voyTbr4gDw54UTp5zo= Subject key identifier: C6:35:D8:73:A1:5F:BA:21:DA:80:0E:1F:5A:C8:96:A2:2C:50:BE:05 Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 Certificate issuer: /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft Manifest number: 04E4 Signing time: Thu 24 Apr 2025 23:31:39 +0000 Manifest this update: Thu 24 Apr 2025 23:31:39 +0000 Manifest next update: Thu 01 May 2025 23:31:39 +0000 Files and hashes: 1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: yLnxJz7e/Bpj/EBSy9vFzleqrGIvcdgQh3qA0/1Z1Es=) 2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: L8/HXBwqySwlOhLxO82Zr1Wb19RHvnnX8QYHJjZFrIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Validity Not Before: Apr 24 23:31:39 2025 GMT Not After : May 1 23:31:39 2025 GMT Subject: CN=680ac9db-92cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:6e:1b:7b:46:41:91:64:a7:cf:0e:f5:3c: 9f:92:f0:5b:d0:cb:74:43:0e:28:26:b0:8c:ca:c3: cd:28:35:bf:8f:96:65:e8:cb:f7:af:24:07:66:8a: 8a:c5:29:97:71:f8:b6:27:29:1f:fb:2c:90:f2:e0: 0e:27:83:46:89:dd:90:5a:bd:5a:15:9a:fb:78:1e: 70:c6:85:ee:57:50:96:ee:7a:48:ee:6d:2a:e1:8a: dd:80:b6:10:e0:c3:ac:b3:6e:8e:1a:3b:8c:48:61: 56:1e:aa:fc:16:f1:8f:76:55:3c:38:8c:2f:91:06: 56:42:c7:23:46:4f:50:c1:86:e7:07:3e:9c:0b:96: f8:cc:89:5d:30:73:51:84:7f:b1:93:c0:81:d9:6a: 84:ae:f9:a0:b7:96:74:54:fc:f4:cf:6a:98:6a:db: 4f:f4:e8:fb:5a:f5:ff:05:d1:11:bd:d0:ae:77:30: 9b:f0:50:70:f5:d1:63:d7:99:a3:e2:d9:17:07:a1: 29:8a:7f:27:87:bd:d4:bd:c0:c1:d2:32:e5:74:da: 3d:3a:7d:4c:f5:08:d7:ed:ac:26:cc:8b:6c:aa:4f: 9d:25:da:c6:0c:07:00:17:41:a0:6b:2e:ac:1b:60: c9:67:1f:50:70:ad:c1:fc:94:f5:93:d5:7e:2b:5c: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:35:D8:73:A1:5F:BA:21:DA:80:0E:1F:5A:C8:96:A2:2C:50:BE:05 X509v3 Authority Key Identifier: keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:81:14:a8:9e:d8:12:7f:c4:89:54:b0:58:5f:2b:7d:f2: ac:a1:a5:20:76:40:82:5f:8b:98:6f:90:bc:50:25:fa:6f:75: 78:f8:87:82:53:a7:b9:f5:97:62:47:22:33:62:ae:c5:9b:77: 49:8c:e2:d7:eb:1a:ac:86:8f:4e:a3:6e:5d:cc:5d:e3:1c:f4: 31:e9:f2:91:eb:4d:29:23:7d:e6:20:08:68:37:f4:3e:8e:64: be:00:47:75:99:a6:49:aa:d9:fd:22:b7:db:19:7a:02:1c:96: 20:73:4a:74:df:ce:05:bc:dd:18:df:2b:25:b4:9e:9c:b4:ac: 8f:c0:02:cf:75:a2:31:d8:1e:64:4b:e0:ab:cd:28:57:b9:04: ae:c2:4d:01:d7:5b:04:16:b1:b0:94:63:47:3c:18:f8:94:88: 91:55:34:5c:2a:99:a1:4e:3d:ee:fa:be:ed:c2:0e:0c:c7:d9: 79:eb:2d:27:f6:3d:b1:c4:68:26:3b:d4:1b:28:25:77:62:fb: e9:70:fc:89:00:d5:73:89:33:fa:62:fd:ba:f8:44:3f:26:09: 8c:4b:80:85:71:23:3e:ed:6f:8c:ec:2b:29:00:26:70:0c:78: cd:f7:2a:7c:9e:3f:97:af:ba:f5:43:dc:52:3e:60:48:04:0a: f6:6c:b5:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz NzQwNkJBMDkwHhcNMjUwNDI0MjMzMTM5WhcNMjUwNTAxMjMzMTM5WjAYMRYwFAYD VQQDEw02ODBhYzlkYi05MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX1uG3tGQZFkp88O9TyfkvBb0Mt0Qw4oJrCMysPNKDW/j5Zl6Mv3ryQHZoqK xSmXcfi2Jykf+yyQ8uAOJ4NGid2QWr1aFZr7eB5wxoXuV1CW7npI7m0q4YrdgLYQ 4MOss26OGjuMSGFWHqr8FvGPdlU8OIwvkQZWQscjRk9QwYbnBz6cC5b4zIldMHNR hH+xk8CB2WqErvmgt5Z0VPz0z2qYattP9Oj7WvX/BdERvdCudzCb8FBw9dFj15mj 4tkXB6Epin8nh73UvcDB0jLldNo9On1M9QjX7awmzItsqk+dJdrGDAcAF0Ggay6s G2DJZx9QcK3B/JT1k9V+K1wYiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY12HOh X7oh2oAOH1rIlqIsUL4FMB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUmIEUqJ7YEn/EiVSwWF8rffKsoaUgdkCCX4uYb5C8UCX6b3V4+IeC U6e59ZdiRyIzYq7Fm3dJjOLX6xqsho9Oo25dzF3jHPQx6fKR600pI33mIAhoN/Q+ jmS+AEd1maZJqtn9IrfbGXoCHJYgc0p0384FvN0Y3ysltJ6ctKyPwALPdaIx2B5k S+CrzShXuQSuwk0B11sEFrGwlGNHPBj4lIiRVTRcKpmhTj3u+r7twg4Mx9l56y0n 9j2xxGgmO9QbKCV3YvvpcPyJANVziTP6Yv26+EQ/JgmMS4CFcSM+7W+M7CspACZw DHjN9yp8nj+Xr7r1Q9xSPmBIBAr2bLVH -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:50 2025 by rpki-client