$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: Tu75gEyXcalEPn1Hj9VuC1+jspqYxuZFDn9uQrGDpDA= Subject key identifier: 5A:31:88:DC:81:9A:25:DA:F9:F2:F5:7A:64:0C:D6:7A:66:05:88:C5 Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 01D1 Signing time: Fri 25 Apr 2025 02:01:05 +0000 Manifest this update: Fri 25 Apr 2025 02:01:05 +0000 Manifest next update: Fri 02 May 2025 02:01:05 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: dLxwI6cDdGbE1i4n411jKpJaBuHKmRSINJ2uuI7yABU=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Apr 25 02:01:05 2025 GMT Not After : May 2 02:01:05 2025 GMT Subject: CN=680aece1-21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:5a:b5:b6:05:19:5e:7e:71:d1:02:12:bc: 78:76:d3:4c:26:57:61:9b:3c:dc:3e:5c:df:4d:8c: 3c:92:cf:90:73:8a:3c:fa:5e:a0:9a:37:94:07:12: 1e:78:3c:6c:1e:3b:3c:98:80:70:a5:0d:a5:ef:02: 57:22:82:06:e2:8a:04:93:3f:52:92:9a:9f:44:16: ad:d3:51:21:e9:d4:83:07:bc:42:5e:1a:8d:0a:18: 4d:74:5d:41:d8:19:49:ee:cb:f7:7a:a2:7b:e6:9b: 76:9c:34:70:64:72:db:a7:8c:8b:8a:06:1b:2e:e8: b7:30:e9:4f:72:49:ef:d9:81:91:8d:ab:77:f3:31: 3c:fb:5c:33:a1:63:85:9b:7a:c2:0f:2d:9b:d6:ec: e0:2c:e2:ea:3e:1d:7e:ff:b1:fa:54:e9:d3:0c:61: 20:1b:0f:29:43:9d:62:19:31:5b:ba:11:e1:d6:48: 5b:c3:74:7e:80:25:79:64:82:99:a6:53:9e:2d:ab: 50:f8:2f:21:d9:0a:43:c5:6a:52:34:5f:da:a2:d4: b9:2f:1a:ea:40:49:1a:03:71:0d:c3:cf:ee:b4:7b: fa:e0:d0:c9:6d:3d:29:fe:94:7f:f3:c0:52:6f:ec: f4:e2:48:a0:0e:d9:ec:5c:59:3b:28:1e:e0:78:3b: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:88:DC:81:9A:25:DA:F9:F2:F5:7A:64:0C:D6:7A:66:05:88:C5 X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c2:d1:3f:0b:17:db:23:83:67:f0:4f:d2:b1:ae:71:9c:bb: 57:a7:a7:86:08:91:b7:e7:eb:e6:8b:eb:32:2e:bc:27:34:4f: 36:14:9e:e5:d0:53:60:66:5b:e5:23:42:b1:35:86:98:a0:8a: 2f:95:a8:c4:49:91:57:67:a0:2b:82:3e:37:6d:1b:79:cb:d2: f8:bb:31:1a:fe:0d:4d:cc:05:66:06:a6:da:76:51:ab:30:1c: 81:58:69:97:86:df:ba:c0:1d:b5:d1:50:85:d9:55:93:20:98: 3d:3c:2d:3c:14:96:2c:f2:6a:e5:16:56:66:47:97:fa:77:66: 27:1b:42:38:d1:88:84:e8:0a:56:02:f2:46:bc:e3:ae:59:96: 77:c0:2f:29:1f:b3:ca:81:dc:19:f7:d1:7b:91:b0:ce:49:73: 13:3a:32:58:0c:f8:cc:6b:ca:03:2b:c6:7a:c7:7d:c7:3b:da: b2:85:f8:d9:d0:18:9f:77:85:b1:d5:0c:db:1e:29:47:0a:83: 16:b2:18:a2:f6:f0:2b:ef:6a:fa:02:73:05:f0:00:7a:24:a4: 6d:ad:3e:52:1e:ad:42:1f:63:75:2a:bb:67:06:5f:ec:00:70: a1:ee:e2:83:da:1a:12:2a:e9:e1:74:0d:5a:25:48:07:a1:99: 3f:b6:46:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwNDI1MDIwMTA1WhcNMjUwNTAyMDIwMTA1WjAYMRYwFAYD VQQDEw02ODBhZWNlMS0yMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHBatbYFGV5+cdECErx4dtNMJldhmzzcPlzfTYw8ks+Qc4o8+l6gmjeUBxIe eDxsHjs8mIBwpQ2l7wJXIoIG4ooEkz9SkpqfRBat01Eh6dSDB7xCXhqNChhNdF1B 2BlJ7sv3eqJ75pt2nDRwZHLbp4yLigYbLui3MOlPcknv2YGRjat38zE8+1wzoWOF m3rCDy2b1uzgLOLqPh1+/7H6VOnTDGEgGw8pQ51iGTFbuhHh1khbw3R+gCV5ZIKZ plOeLatQ+C8h2QpDxWpSNF/aotS5LxrqQEkaA3ENw8/utHv64NDJbT0p/pR/88BS b+z04kigDtnsXFk7KB7geDtT9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoxiNyB miXa+fL1emQM1npmBYjFMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0wtE/CxfbI4Nn8E/Ssa5xnLtXp6eGCJG35+vmi+syLrwnNE82FJ7l 0FNgZlvlI0KxNYaYoIovlajESZFXZ6Argj43bRt5y9L4uzEa/g1NzAVmBqbadlGr MByBWGmXht+6wB210VCF2VWTIJg9PC08FJYs8mrlFlZmR5f6d2YnG0I40YiE6ApW AvJGvOOuWZZ3wC8pH7PKgdwZ99F7kbDOSXMTOjJYDPjMa8oDK8Z6x33HO9qyhfjZ 0Bifd4Wx1QzbHilHCoMWshii9vAr72r6AnMF8AB6JKRtrT5SHq1CH2N1KrtnBl/s AHCh7uKD2hoSKunhdA1aJUgHoZk/tkaF -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:13 2025 by rpki-client