$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json) Hash identifier: Tt/7whr9DiayO9F+cDBHcADg/7jqLk5xqe/jlcdjrqU= Subject key identifier: 77:DC:DB:0A:1A:2F:EA:DC:E0:BD:FB:FD:B8:4D:AE:36:20:AE:A1:C4 Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft Manifest number: 02BD Signing time: Sun 27 Apr 2025 01:03:47 +0000 Manifest this update: Sun 27 Apr 2025 01:03:46 +0000 Manifest next update: Sun 04 May 2025 01:03:46 +0000 Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: CEm85WHDeXBNXStXXa2BKKbwnHt3PBb2oAanO5qZ+P0=) 2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: +bhmDLl/B0RomjsU7MW7xevtY9GqNCpc/xDljwJVPAo=) 3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: OqHjS/HS8e7S5i/skx8l2IsJyhS/M18aAyJkpcYv//Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: Apr 27 01:03:46 2025 GMT Not After : May 4 01:03:46 2025 GMT Subject: CN=680d8273-cf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:e5:5f:7c:ce:58:44:60:ff:37:6e:c0:f7: 14:1c:bb:3a:5c:72:3b:1a:2c:66:a5:a2:76:4e:00: 90:39:d3:8f:34:ee:2d:f0:b4:34:e7:ac:8b:63:d8: 02:ad:64:06:18:2f:ce:85:cd:00:78:63:b8:a5:0c: e3:dc:58:b8:64:36:fb:8e:13:3a:47:cb:04:58:a8: 62:5a:7a:25:26:62:85:7c:9f:a9:18:0f:42:11:e8: 80:30:00:0d:5d:7a:52:8a:fa:9d:4d:3c:6f:06:ec: 1e:79:47:98:5f:b6:24:6b:ca:06:e3:21:6c:30:5a: 6d:35:dd:b1:cf:16:5b:11:5e:64:b2:ed:4b:53:5a: 3b:d8:76:8e:ec:0c:1e:a0:e1:bf:0a:85:e0:e1:59: 84:75:88:b0:dd:69:04:87:73:f0:f3:57:b7:2d:8a: 80:88:ab:37:8c:e1:89:c4:dc:77:39:b3:db:92:16: 7a:71:4d:9f:36:fd:26:e8:61:17:e6:49:e4:61:65: e6:52:74:1f:3d:24:5e:db:2d:97:7f:32:b8:74:43: 23:58:05:e2:63:92:3f:3b:e3:bf:15:70:07:ad:a4: c0:1b:d1:ea:a7:7a:73:d4:af:cc:ee:bd:49:7e:12: 4b:03:a4:9d:eb:8f:3b:ad:f4:b7:f0:a2:e7:b7:7e: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:DB:0A:1A:2F:EA:DC:E0:BD:FB:FD:B8:4D:AE:36:20:AE:A1:C4 X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:21:1c:6d:ab:55:34:04:dd:a3:37:38:1c:ab:88:92:13:a1: 51:d6:88:97:29:1e:d1:1d:8f:d4:c3:86:59:5b:c7:74:b4:09: a1:62:df:43:33:93:67:a7:71:69:28:58:e7:d5:7d:aa:1c:1b: 8e:cb:d6:a9:f0:38:62:49:5a:91:3d:7a:72:b6:33:a3:12:c1: cd:ff:e2:ab:6c:e9:84:5f:8a:1e:28:89:42:8c:f6:27:8d:98: d4:00:1c:8b:c9:21:ad:71:33:4d:4a:f6:d3:d8:3a:d4:75:3f: d9:e5:e4:db:0b:24:b4:c7:49:d8:56:fb:2a:0d:7e:8e:3d:35: 92:ff:7a:a9:2a:48:91:8f:15:04:fc:cc:f9:1c:92:b9:b0:ea: 3a:00:16:42:c4:1e:90:7c:43:ba:0e:be:a1:69:6c:66:67:e0: 8b:f4:32:d0:e9:1b:36:91:cd:67:eb:49:70:bd:c2:8f:93:ac: 01:3f:1f:8b:7a:06:30:62:7f:fa:ae:9e:f7:9e:f1:5b:de:64: 65:eb:05:24:6e:ee:7a:a1:ea:40:40:1c:ba:2c:8b:5e:8d:83: 1f:65:5b:81:31:72:fd:16:8b:b3:db:91:9a:1f:e3:df:8d:57: cf:41:bf:cf:41:f2:ae:0c:d7:68:89:7d:4a:d3:7a:a6:c6:cf: fb:8e:7a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjUwNDI3MDEwMzQ2WhcNMjUwNTA0MDEwMzQ2WjAYMRYwFAYD VQQDEw02ODBkODI3My1jZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ILlX3zOWERg/zduwPcUHLs6XHI7GixmpaJ2TgCQOdOPNO4t8LQ056yLY9gC rWQGGC/Ohc0AeGO4pQzj3Fi4ZDb7jhM6R8sEWKhiWnolJmKFfJ+pGA9CEeiAMAAN XXpSivqdTTxvBuweeUeYX7Yka8oG4yFsMFptNd2xzxZbEV5ksu1LU1o72HaO7Awe oOG/CoXg4VmEdYiw3WkEh3Pw81e3LYqAiKs3jOGJxNx3ObPbkhZ6cU2fNv0m6GEX 5knkYWXmUnQfPSRe2y2XfzK4dEMjWAXiY5I/O+O/FXAHraTAG9Hqp3pz1K/M7r1J fhJLA6Sd6487rfS38KLnt35P/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfc2woa L+rc4L37/bhNrjYgrqHEMB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6 a1BNcUNxUHpZVWVGcjg1OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+IRxtq1U0BN2jNzgcq4iSE6FR1oiXKR7RHY/Uw4ZZW8d0tAmhYt9D M5Nnp3FpKFjn1X2qHBuOy9ap8DhiSVqRPXpytjOjEsHN/+KrbOmEX4oeKIlCjPYn jZjUAByLySGtcTNNSvbT2DrUdT/Z5eTbCyS0x0nYVvsqDX6OPTWS/3qpKkiRjxUE /Mz5HJK5sOo6ABZCxB6QfEO6Dr6haWxmZ+CL9DLQ6Rs2kc1n60lwvcKPk6wBPx+L egYwYn/6rp73nvFb3mRl6wUkbu56oepAQBy6LItejYMfZVuBMXL9Fouz25GaH+Pf jVfPQb/PQfKuDNdoiX1K03qmxs/7jno6 -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:29 2025 by rpki-client