$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: JfK2b6C19IVo2mVRj5NPxdxfx1Lol9s8qAop+oypuSw= Subject key identifier: 4F:93:4E:3D:B5:5A:23:3D:91:E1:C0:6E:58:6E:07:47:9F:7C:A4:37 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 3584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 350D Signing time: Thu 24 Apr 2025 14:30:16 +0000 Manifest this update: Thu 24 Apr 2025 14:30:16 +0000 Manifest next update: Thu 01 May 2025 14:30:16 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: U3WFyecOjb/LMnZbo1s/eys6vpTqpoZMYTXERlLeVco=) 2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: OpsjHp/vGysxlU1F4bwOY7eYj+17+oUTjlbccNSDCHo=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13700 (0x3584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Apr 24 14:30:16 2025 GMT Not After : May 1 14:30:16 2025 GMT Subject: CN=680a4af8-3ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:d2:36:54:36:a6:da:6e:c4:d1:38:7e:b9: d1:99:b9:2e:c2:4f:74:26:d8:ba:e4:e1:7c:d7:db: 9d:86:ff:53:7c:c3:93:5c:0d:be:66:3c:af:e2:b3: 68:ba:d8:0f:f0:8b:33:8d:47:ff:e1:56:db:39:c7: 82:ad:c0:7a:7a:6a:6e:c3:e1:38:43:51:66:7a:d1: 1d:b8:2b:87:c9:eb:e2:b2:2c:f0:e3:8d:ac:1b:2e: 78:f8:61:a1:a7:6a:82:41:3b:6a:45:a1:80:75:e3: 65:96:75:85:34:a2:14:43:7d:e0:b8:b1:7d:12:d7: 3e:fa:e6:6e:2f:e3:34:b2:96:8a:76:c7:fa:ef:51: 23:29:02:f0:c0:2b:dc:8d:c0:cb:97:8f:b2:fd:44: 11:38:f5:ca:97:ae:15:d3:81:bf:75:6e:41:c6:0d: 3e:77:ba:3d:56:44:6c:70:b4:9c:c9:f0:d9:6a:d9: 9d:57:6e:ad:17:6b:3a:d6:e1:59:1d:22:29:73:7f: d4:63:c4:96:52:c7:61:f8:6b:c8:18:f2:a0:e5:5d: 39:ca:8c:a6:2b:99:28:9d:70:32:0d:c8:52:e9:9f: b1:9b:3a:76:fd:50:39:b4:5a:38:d2:a5:20:81:c0: a1:9b:57:8f:f2:27:d4:67:67:01:cf:75:26:0c:54: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:93:4E:3D:B5:5A:23:3D:91:E1:C0:6E:58:6E:07:47:9F:7C:A4:37 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9a:f3:de:39:8e:e0:24:d0:ed:cf:4a:16:20:79:ea:db:cf: 9b:64:0a:58:55:d1:48:13:ae:5e:10:47:41:77:19:5f:49:e1: 92:dd:c7:b3:d0:c5:8a:dd:71:66:ea:6c:c4:df:2b:f7:f4:95: d6:a4:24:b9:5a:73:9d:c8:02:74:27:b1:0a:5e:45:f2:41:45: 5a:bd:62:3e:30:f1:e6:2e:ab:1f:b3:33:ec:57:17:a5:d9:ec: d1:ec:43:b5:66:2f:7a:75:95:60:99:47:99:f4:92:20:67:6b: cd:bf:37:50:66:97:a8:37:e1:3a:1f:2d:37:f2:e2:89:e7:7c: 7d:e3:64:64:92:c6:8d:66:be:8c:a7:41:c7:d5:b8:d1:b7:e5: f0:b7:d1:4d:f8:f6:57:5a:18:3f:f0:16:f7:78:81:21:31:94: 71:04:0a:a1:38:50:64:46:bf:fc:fb:0b:a8:0c:02:e4:03:53: 41:b7:73:90:81:d3:97:5c:2d:7c:00:af:f3:65:7c:fe:e9:74: c6:c1:3e:b4:d5:62:1b:d1:34:0e:9c:f6:ad:2f:cd:29:3a:0e: 87:44:3f:bb:0f:fb:99:d5:ec:c1:1b:43:ca:1d:c4:06:23:43: 29:22:46:59:4f:fd:80:a9:2e:ae:f4:80:01:f0:dd:0f:f9:c5: 1d:32:57:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjUwNDI0MTQzMDE2WhcNMjUwNTAxMTQzMDE2WjAYMRYwFAYD VQQDEw02ODBhNGFmOC0zZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSvSNlQ2ptpuxNE4frnRmbkuwk90Jti65OF819udhv9TfMOTXA2+Zjyv4rNo utgP8IszjUf/4VbbOceCrcB6empuw+E4Q1FmetEduCuHyevisizw442sGy54+GGh p2qCQTtqRaGAdeNllnWFNKIUQ33guLF9Etc++uZuL+M0spaKdsf671EjKQLwwCvc jcDLl4+y/UQROPXKl64V04G/dW5Bxg0+d7o9VkRscLScyfDZatmdV26tF2s61uFZ HSIpc3/UY8SWUsdh+GvIGPKg5V05yoymK5konXAyDchS6Z+xmzp2/VA5tFo40qUg gcChm1eP8ifUZ2cBz3UmDFRA0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+TTj21 WiM9keHAblhuB0effKQ3MB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAmvPeOY7gJNDtz0oWIHnq28+bZApYVdFIE65eEEdBdxlfSeGS3cez 0MWK3XFm6mzE3yv39JXWpCS5WnOdyAJ0J7EKXkXyQUVavWI+MPHmLqsfszPsVxel 2ezR7EO1Zi96dZVgmUeZ9JIgZ2vNvzdQZpeoN+E6Hy038uKJ53x942RkksaNZr6M p0HH1bjRt+Xwt9FN+PZXWhg/8Bb3eIEhMZRxBAqhOFBkRr/8+wuoDALkA1NBt3OQ gdOXXC18AK/zZXz+6XTGwT601WIb0TQOnPatL80pOg6HRD+7D/uZ1ezBG0PKHcQG I0MpIkZZT/2AqS6u9IAB8N0P+cUdMlfG -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:59 2025 by rpki-client