$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft File: VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json) Hash identifier: lqjed8NjwvjsnZ5/XYUx4tyTCjxG4yWBVc+AjuSlpNA= Subject key identifier: 37:2F:C0:E5:A1:05:6A:FB:22:A3:99:AA:AA:B2:86:60:B1:A2:91:03 Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft Manifest number: 0656 Signing time: Thu 24 Apr 2025 22:18:15 +0000 Manifest this update: Thu 24 Apr 2025 22:18:14 +0000 Manifest next update: Thu 01 May 2025 22:18:14 +0000 Files and hashes: 1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: HqHlFjwAyEUKGN8NQSiXS1Ap3QmM1CSH4I+dml8qIIU=) 2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=) 3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=) 4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=) 5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Apr 24 22:18:14 2025 GMT Not After : May 1 22:18:14 2025 GMT Subject: CN=680ab8a7-df02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:66:88:94:76:22:43:57:49:7c:31:00:13: 0d:8e:24:a8:ec:e9:7c:ba:f0:bc:4c:61:4e:69:bb: f8:05:c7:4d:08:b9:36:74:2f:5d:2a:d1:50:19:23: 6a:15:31:33:2a:1e:3f:f8:84:e4:d5:cd:cd:ce:96: 3a:23:f2:ff:5f:73:a4:12:13:90:9f:10:a8:02:eb: ae:04:bb:91:eb:d5:2b:8f:0c:a3:7a:ec:98:95:43: 76:6f:6a:04:11:7d:c1:ad:1c:bb:41:1c:07:fc:6d: fa:95:ad:e3:22:51:60:b9:1d:81:75:7f:56:cb:a1: 59:00:9e:4e:58:88:40:1d:41:95:26:d1:44:54:d2: ac:a0:f4:08:a2:d8:b5:bb:66:8d:91:a7:8f:5e:59: b7:7f:28:42:18:5a:04:9c:a0:9f:cd:40:c0:10:73: fd:f5:4b:99:dc:0b:cd:69:b9:5e:f3:70:1a:cd:06: b9:18:7f:72:64:01:df:fb:0d:7b:e0:97:84:2b:77: 1d:1e:36:8e:df:32:a4:f8:f4:78:2f:bb:7f:f0:31: 86:f7:68:44:19:21:d1:03:26:c9:ea:12:43:7b:57: 4c:6c:18:0e:26:1a:d2:2d:80:4f:a3:34:9a:f5:db: 6b:ea:c8:88:13:0e:2c:d5:b3:99:9f:e5:16:e3:7a: ac:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2F:C0:E5:A1:05:6A:FB:22:A3:99:AA:AA:B2:86:60:B1:A2:91:03 X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:eb:2c:ee:07:3f:97:a8:fa:e3:28:c8:63:22:72:14:e3:c0: 3f:b0:fd:0b:69:b9:62:1d:9a:45:70:d0:c9:7e:ca:f2:d0:a3: 11:2d:d3:64:03:0e:a3:37:55:c3:a5:5a:f1:e7:bb:f0:f3:bd: 10:eb:0c:1b:bf:ff:49:3b:b3:c5:d8:c7:56:19:86:35:da:d7: c0:33:e0:a8:37:72:fa:4a:18:0f:7d:a7:b1:60:3a:cb:b4:7e: 8b:7d:32:ab:2b:db:67:b8:93:b9:55:e7:ae:7d:d0:d3:ef:71: 77:a3:34:b5:f4:b4:32:8b:56:77:aa:ea:dc:a8:a9:06:ea:1a: b5:72:fe:b6:5f:3e:3d:d4:50:60:7d:31:6e:19:a1:30:be:77: 9c:af:ae:bd:58:6c:93:cd:eb:36:2e:a2:67:ca:2f:84:88:58: ae:8a:cd:e4:16:07:7f:90:9a:bc:b5:63:b2:1e:6a:98:7f:e8: 06:4e:47:e4:47:53:11:ed:bc:8f:86:9b:a9:bb:1a:31:68:e7: 73:f0:62:96:f7:3f:2a:47:9b:84:2d:c9:3b:98:3e:64:8e:32: 57:ca:91:ff:1a:37:16:a2:94:a6:e1:d0:bd:39:cf:b9:9f:05: d7:74:a8:4a:82:d9:cf:e4:6f:03:f0:84:45:a0:8e:ef:f1:2c: d7:1f:e5:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUwNDI0MjIxODE0WhcNMjUwNTAxMjIxODE0WjAYMRYwFAYD VQQDEw02ODBhYjhhNy1kZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIFmiJR2IkNXSXwxABMNjiSo7Ol8uvC8TGFOabv4BcdNCLk2dC9dKtFQGSNq FTEzKh4/+ITk1c3NzpY6I/L/X3OkEhOQnxCoAuuuBLuR69UrjwyjeuyYlUN2b2oE EX3BrRy7QRwH/G36la3jIlFguR2BdX9Wy6FZAJ5OWIhAHUGVJtFEVNKsoPQIoti1 u2aNkaePXlm3fyhCGFoEnKCfzUDAEHP99UuZ3AvNable83AazQa5GH9yZAHf+w17 4JeEK3cdHjaO3zKk+PR4L7t/8DGG92hEGSHRAybJ6hJDe1dMbBgOJhrSLYBPozSa 9dtr6siIEw4s1bOZn+UW43qs/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcvwOWh BWr7IqOZqqqyhmCxopEDMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBDMy84NTUzMDVFMjgyQzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tk UTFhSXItUElyQ2VfMlJFcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+6yzuBz+XqPrjKMhjInIU48A/sP0LabliHZpFcNDJfsry0KMRLdNk Aw6jN1XDpVrx57vw870Q6wwbv/9JO7PF2MdWGYY12tfAM+CoN3L6ShgPfaexYDrL tH6LfTKrK9tnuJO5VeeufdDT73F3ozS19LQyi1Z3qurcqKkG6hq1cv62Xz491FBg fTFuGaEwvnecr669WGyTzes2LqJnyi+EiFiuis3kFgd/kJq8tWOyHmqYf+gGTkfk R1MR7byPhpupuxoxaOdz8GKW9z8qR5uELck7mD5kjjJXypH/GjcWopSm4dC9Oc+5 nwXXdKhKgtnP5G8D8IRFoI7v8SzXH+UO -----END CERTIFICATE-----Generated at Sat Apr 26 03:49:48 2025 by rpki-client