$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: ryv3LuGzEjAnZmMbNhp8A39XGDkpTswMEOazy15pCuA= Subject key identifier: 0C:B0:1E:A3:E8:C5:BC:BA:13:3A:0F:9D:DE:9A:B3:D4:CC:7A:FC:77 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: F5 Signing time: Fri 25 Apr 2025 04:16:33 +0000 Manifest this update: Fri 25 Apr 2025 04:16:32 +0000 Manifest next update: Fri 02 May 2025 04:16:32 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: 5CdHJnR5MgAV5ffi5ZfCdTp9IYD5/UUQy0ovKyMwm3Y=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Apr 25 04:16:32 2025 GMT Not After : May 2 04:16:32 2025 GMT Subject: CN=680b0ca0-c4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:f6:60:a4:ad:20:84:37:1a:e4:71:ec:5a: 18:28:92:0e:6e:f5:61:df:fd:e2:ce:a5:52:f0:3f: 78:d8:36:9e:ad:a9:13:45:4a:da:29:c5:9d:0b:4d: ad:70:f6:d1:65:8a:1c:db:c1:b0:f8:2b:3f:e4:f0: 73:1e:35:c7:92:1f:46:d3:74:7b:6f:4a:57:38:d3: 73:88:03:70:86:50:40:66:28:54:64:82:54:57:c3: 38:eb:02:ec:4a:9d:1f:e9:25:54:30:b8:27:33:7d: c6:32:87:ff:30:9b:a6:eb:07:53:4e:b1:e5:4f:2a: af:e1:32:2a:b9:f7:37:e6:f4:f7:b4:4e:f2:f7:86: 72:d8:76:6b:0f:18:f7:9d:de:74:9f:95:53:0f:1f: 6f:23:45:05:23:22:39:ab:e0:2f:ce:78:a7:0d:fc: b1:ac:7a:72:4c:cc:bd:d8:a1:e8:ba:7b:7b:63:04: f8:84:55:41:f0:e9:fd:48:c6:4f:1d:94:c7:dd:70: 46:29:33:ef:d7:80:42:51:22:46:d0:72:c7:7e:5b: c9:98:80:ea:52:97:cd:b0:5a:1c:b2:84:34:63:9d: 2d:5d:fb:ed:f6:2c:b1:a7:36:36:69:a2:7b:9a:04: f3:0b:e5:31:3c:a7:54:04:25:c4:09:44:5a:50:99: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:1E:A3:E8:C5:BC:BA:13:3A:0F:9D:DE:9A:B3:D4:CC:7A:FC:77 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1f:9e:a7:16:5f:57:30:fd:26:d9:57:52:87:41:cd:1f:28: 84:9b:6a:56:65:18:14:84:84:7a:bd:d2:86:35:d1:b1:ed:9f: 01:70:a8:47:c8:17:54:ad:c0:25:f6:b4:e2:a6:4f:68:e1:bb: 55:0b:51:bb:07:70:16:2c:d0:ba:1b:c8:24:e7:ad:ea:ec:7c: 8f:b8:91:a6:ed:51:8d:c9:86:c1:a6:c0:b3:f8:2b:5c:84:af: 31:28:52:cf:c8:9d:61:33:0e:59:68:46:07:04:3a:d8:31:21: 78:e0:22:88:da:a9:ba:ab:50:16:52:ee:e7:40:5a:44:33:2b: 64:b1:04:2a:98:6a:6d:bf:4c:e8:a7:00:be:64:29:71:c9:b6: 34:9d:85:ff:52:39:40:b6:14:30:73:4e:75:92:11:5d:71:62: 33:30:44:fa:98:6a:43:70:13:47:e5:74:07:81:7e:67:46:d3: 20:2c:6d:2a:1c:34:f3:56:77:3f:57:8c:7c:44:34:1d:80:19: 4c:30:75:f7:23:03:fb:b2:f3:43:2d:7f:ab:09:73:3d:a0:0a: 8d:76:83:3c:92:5c:d9:b7:eb:00:6d:c1:1d:2e:c6:6f:07:e1: 3e:64:9c:72:82:57:2a:14:06:3f:47:f5:aa:fd:51:a9:9a:fa: 60:34:0a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwNDI1MDQxNjMyWhcNMjUwNTAyMDQxNjMyWjAYMRYwFAYD VQQDEw02ODBiMGNhMC1jNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF32YKStIIQ3GuRx7FoYKJIObvVh3/3izqVS8D942DaerakTRUraKcWdC02t cPbRZYoc28Gw+Cs/5PBzHjXHkh9G03R7b0pXONNziANwhlBAZihUZIJUV8M46wLs Sp0f6SVUMLgnM33GMof/MJum6wdTTrHlTyqv4TIqufc35vT3tE7y94Zy2HZrDxj3 nd50n5VTDx9vI0UFIyI5q+AvzninDfyxrHpyTMy92KHount7YwT4hFVB8On9SMZP HZTH3XBGKTPv14BCUSJG0HLHflvJmIDqUpfNsFocsoQ0Y50tXfvt9iyxpzY2aaJ7 mgTzC+UxPKdUBCXECURaUJm0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAywHqPo xby6EzoPnd6as9TMevx3MB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxH56nFl9XMP0m2VdSh0HNHyiEm2pWZRgUhIR6vdKGNdGx7Z8BcKhH yBdUrcAl9rTipk9o4btVC1G7B3AWLNC6G8gk563q7HyPuJGm7VGNyYbBpsCz+Ctc hK8xKFLPyJ1hMw5ZaEYHBDrYMSF44CKI2qm6q1AWUu7nQFpEMytksQQqmGptv0zo pwC+ZClxybY0nYX/UjlAthQwc051khFdcWIzMET6mGpDcBNH5XQHgX5nRtMgLG0q HDTzVnc/V4x8RDQdgBlMMHX3IwP7svNDLX+rCXM9oAqNdoM8klzZt+sAbcEdLsZv B+E+ZJxyglcqFAY/R/Wq/VGpmvpgNApN -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:23 2025 by rpki-client