$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: ZNbfc61tXQAEp2+Hztb8Lzh8nAW1VzXFUAsHYYJKkMk= Subject key identifier: 88:05:9F:74:77:31:4F:A7:81:BD:61:2D:84:B5:42:77:A9:26:FA:43 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0AF5 Signing time: Thu 24 Apr 2025 19:13:29 +0000 Manifest this update: Thu 24 Apr 2025 19:13:28 +0000 Manifest next update: Thu 01 May 2025 19:13:28 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: YP1AUnHjR7bJdJmV4NvAR8xU9WmIxO9lGWJbbkX1NvI=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Apr 24 19:13:28 2025 GMT Not After : May 1 19:13:28 2025 GMT Subject: CN=680a8d59-3eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:58:58:fb:2f:44:c7:20:1d:fd:34:82:c9: db:ca:8e:a2:5c:ee:33:47:6e:15:69:ba:f5:2d:d4: 83:79:b5:80:52:af:a7:9e:f6:7d:41:ce:05:77:28: b1:4a:4d:11:9c:d3:e7:9c:f6:50:53:32:32:6d:6d: 8e:b7:62:3d:30:27:f0:28:6a:02:a0:9f:a0:e2:40: 77:a9:d4:03:9b:bc:02:56:17:ec:02:4e:93:ff:f5: df:a2:7f:ce:a0:fe:bf:ce:b4:bb:a7:ff:32:0b:13: 51:d5:2b:ad:01:26:29:ff:bb:00:8e:ac:a6:8a:47: 83:de:bb:01:37:fb:54:3c:f2:c1:0c:44:1e:0a:d3: a4:2a:9a:77:5d:38:db:de:e4:d1:83:da:6c:5d:a4: d5:3d:fc:7c:f4:bc:b2:07:cc:5f:d1:28:1c:bb:f1: 22:1d:9f:a8:28:70:fa:9e:07:70:2b:8e:08:7d:2a: ba:6c:0b:13:ab:89:7f:21:87:ae:e8:b7:f1:e0:88: 10:27:fc:ab:f4:23:de:5f:e2:4b:23:48:28:9a:d4: c6:d7:f5:ee:32:f4:c8:b2:ea:09:5d:ac:d8:ff:a0: 05:c8:5f:3f:3c:23:a5:1f:12:79:7c:98:76:fe:bd: 7f:4f:98:d1:4c:43:21:ab:eb:76:74:71:18:86:17: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:05:9F:74:77:31:4F:A7:81:BD:61:2D:84:B5:42:77:A9:26:FA:43 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b3:07:ff:fc:0b:8c:d8:6e:53:54:f5:bf:b0:e6:a1:4a:98: 0c:b8:ca:d8:d0:b2:5f:43:98:c8:52:a8:42:88:91:8d:4d:59: 74:40:98:58:ba:a0:7c:f3:19:77:08:68:5f:22:53:01:21:e4: fe:51:3b:e6:e3:76:ee:04:a0:2e:61:ae:08:71:a5:2c:90:9b: 9f:04:78:7b:6c:31:87:92:cc:31:20:1a:5f:f1:7c:84:3f:89: 0a:6d:a0:69:56:3e:3b:dc:30:b4:d2:18:77:29:47:ec:13:e4: 75:67:da:07:47:29:e0:9f:b1:a9:73:d7:ab:77:92:c0:14:e3: 12:ed:d4:40:7d:4d:8b:c0:b1:cd:1c:c6:7f:b3:d6:c7:00:60: a9:6a:0f:f4:d7:10:b7:b5:82:7b:8b:e5:12:de:36:4c:06:42: 22:9f:d2:cb:e6:2e:4d:ca:53:20:ba:58:f1:92:2f:c1:60:7a: b4:9a:70:77:a9:b4:69:34:05:4c:68:e9:6e:6a:e0:cc:1c:15: e0:92:67:b5:c6:c3:f7:80:0b:6d:2c:2e:ff:6c:43:99:a7:7e: 22:4e:b0:35:aa:0e:18:2c:35:87:33:0b:22:2d:53:dd:18:08: af:f9:a2:35:6f:57:e4:ec:a6:0d:08:f3:50:3f:48:0a:6e:ed: 81:3f:80:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwNDI0MTkxMzI4WhcNMjUwNTAxMTkxMzI4WjAYMRYwFAYD VQQDEw02ODBhOGQ1OS0zZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvatYWPsvRMcgHf00gsnbyo6iXO4zR24Vabr1LdSDebWAUq+nnvZ9Qc4Fdyix Sk0RnNPnnPZQUzIybW2Ot2I9MCfwKGoCoJ+g4kB3qdQDm7wCVhfsAk6T//Xfon/O oP6/zrS7p/8yCxNR1SutASYp/7sAjqymikeD3rsBN/tUPPLBDEQeCtOkKpp3XTjb 3uTRg9psXaTVPfx89LyyB8xf0Sgcu/EiHZ+oKHD6ngdwK44IfSq6bAsTq4l/IYeu 6Lfx4IgQJ/yr9CPeX+JLI0gomtTG1/XuMvTIsuoJXazY/6AFyF8/PCOlHxJ5fJh2 /r1/T5jRTEMhq+t2dHEYhhdbTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgFn3R3 MU+ngb1hLYS1QnepJvpDMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZswf//AuM2G5TVPW/sOahSpgMuMrY0LJfQ5jIUqhCiJGNTVl0QJhY uqB88xl3CGhfIlMBIeT+UTvm43buBKAuYa4IcaUskJufBHh7bDGHkswxIBpf8XyE P4kKbaBpVj473DC00hh3KUfsE+R1Z9oHRyngn7Gpc9erd5LAFOMS7dRAfU2LwLHN HMZ/s9bHAGCpag/01xC3tYJ7i+US3jZMBkIin9LL5i5NylMguljxki/BYHq0mnB3 qbRpNAVMaOluauDMHBXgkme1xsP3gAttLC7/bEOZp34iTrA1qg4YLDWHMwsiLVPd GAiv+aI1b1fk7KYNCPNQP0gKbu2BP4CU -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:45 2025 by rpki-client