$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: rsVUEvxnayitPuxYO1b28Wo48gnxtRodtlyRB/oPsbs= Subject key identifier: 5F:2A:6A:F8:B0:17:42:A8:59:75:D3:A6:2B:A5:32:7D:54:CA:38:7E Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 1362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 135B Signing time: Sat 26 Apr 2025 16:56:23 +0000 Manifest this update: Sat 26 Apr 2025 16:56:23 +0000 Manifest next update: Sat 03 May 2025 16:56:23 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: Ykh7+UVyKVQa+nJfockcdbDwmqDd+QPROH4yF4LWVc8=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Apr 26 16:56:23 2025 GMT Not After : May 3 16:56:23 2025 GMT Subject: CN=680d1037-9213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:9d:b3:4b:18:6c:74:2f:d2:40:e6:70:0e: ab:c0:17:e8:fb:e3:5a:e6:f4:86:36:6b:93:a2:db: d1:c2:0f:ce:ce:93:24:e5:39:ca:67:a2:75:26:29: 7a:20:ad:51:ce:73:cc:53:49:21:1e:cb:49:ac:cc: 45:ef:01:75:2a:51:e0:7d:a2:4d:4d:6a:e1:8f:f6: e0:e6:58:d7:27:f6:45:5a:a9:59:89:99:72:80:8c: a1:f9:9b:cb:71:3c:f7:ea:7a:06:6c:98:e4:cd:8f: 66:4e:17:5e:86:25:b0:d1:7e:63:db:63:dd:6c:02: 40:12:49:8a:b3:1d:0b:23:51:5f:5a:49:66:05:9a: eb:89:6a:44:63:6a:a7:8c:96:1b:2f:74:b6:0a:cd: e2:d3:9d:8f:70:fd:9a:8a:b6:58:5a:80:8e:ab:c4: 08:d9:4e:43:41:c4:d5:95:44:67:fa:c6:b5:13:1f: d8:0a:c2:bb:2f:10:03:15:41:dd:02:19:6b:6b:53: 17:4d:2f:52:4e:e5:9d:62:d8:05:36:7c:4a:4a:aa: ea:70:81:16:15:f5:cf:22:5e:fd:4b:8d:29:46:3c: 0e:d5:cc:9d:19:cb:d8:e8:7c:81:63:30:6f:af:9b: df:d8:78:de:80:31:45:4c:d5:ee:4a:08:a3:59:c5: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:6A:F8:B0:17:42:A8:59:75:D3:A6:2B:A5:32:7D:54:CA:38:7E X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:00:6f:12:cb:44:95:52:0e:18:10:80:ce:97:f8:cf:65:bb: 09:b0:62:04:4c:77:a5:32:cd:4b:6f:f8:2c:df:cb:cf:3f:62: 54:e1:67:43:df:b7:de:51:eb:2d:f8:46:4f:08:32:d9:dd:2b: 76:f2:13:9a:98:fe:d9:bb:30:78:55:be:1e:8f:92:1e:17:a8: 32:11:0c:cb:75:d8:7e:97:d1:41:08:0f:ff:b7:09:a4:6f:7d: eb:57:ba:ea:d6:d7:58:e8:cb:82:a9:0c:38:2a:66:91:ab:87: c8:1c:e8:4d:bf:61:28:41:46:ca:99:ec:88:80:d0:8d:b2:a7: 53:f4:32:e3:ae:4c:04:07:b2:e7:4b:71:6c:d9:6a:45:03:3c: 38:5f:c1:55:49:78:9f:55:74:32:60:59:9a:69:3d:28:fa:ae: fe:31:a4:a9:bc:4b:52:57:01:6b:12:d6:63:b5:78:6a:29:ea: 6e:d0:4e:49:09:9a:ea:91:e9:2d:5d:ff:1e:64:3d:86:2b:2b: eb:60:30:12:32:0c:62:75:6d:6d:cf:e1:17:fd:9d:b1:8c:d2: 31:9f:7c:0e:26:9e:79:02:f0:db:e9:1d:c6:c6:95:fa:ee:f5: 1e:ca:95:06:d7:d8:b5:10:c1:07:e8:8a:37:b0:fb:4d:2e:34: 09:3f:c9:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwNDI2MTY1NjIzWhcNMjUwNTAzMTY1NjIzWjAYMRYwFAYD VQQDEw02ODBkMTAzNy05MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPyds0sYbHQv0kDmcA6rwBfo++Na5vSGNmuTotvRwg/OzpMk5TnKZ6J1Jil6 IK1RznPMU0khHstJrMxF7wF1KlHgfaJNTWrhj/bg5ljXJ/ZFWqlZiZlygIyh+ZvL cTz36noGbJjkzY9mThdehiWw0X5j22PdbAJAEkmKsx0LI1FfWklmBZrriWpEY2qn jJYbL3S2Cs3i052PcP2airZYWoCOq8QI2U5DQcTVlURn+sa1Ex/YCsK7LxADFUHd Ahlra1MXTS9STuWdYtgFNnxKSqrqcIEWFfXPIl79S40pRjwO1cydGcvY6HyBYzBv r5vf2HjegDFFTNXuSgijWcWhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8qaviw F0KoWXXTpiulMn1Uyjh+MB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHAG8Sy0SVUg4YEIDOl/jPZbsJsGIETHelMs1Lb/gs38vPP2JU4WdD 37feUest+EZPCDLZ3St28hOamP7ZuzB4Vb4ej5IeF6gyEQzLddh+l9FBCA//twmk b33rV7rq1tdY6MuCqQw4KmaRq4fIHOhNv2EoQUbKmeyIgNCNsqdT9DLjrkwEB7Ln S3Fs2WpFAzw4X8FVSXifVXQyYFmaaT0o+q7+MaSpvEtSVwFrEtZjtXhqKepu0E5J CZrqkektXf8eZD2GKyvrYDASMgxidW1tz+EX/Z2xjNIxn3wOJp55AvDb6R3GxpX6 7vUeypUG19i1EMEH6Io3sPtNLjQJP8nd -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:35 2025 by rpki-client