$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: 3rkyp1BnJlp6g2gCJ5/DLtL/E15HdD0tEzqT1atVJwM= Subject key identifier: BF:8E:78:E3:33:D7:A9:DB:CF:FE:F7:F8:D8:7F:96:5A:74:FF:10:E2 Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: 9C Signing time: Sat 03 May 2025 05:40:56 +0000 Manifest this update: Sat 03 May 2025 05:40:56 +0000 Manifest next update: Sat 10 May 2025 05:40:56 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: cTl3tKl0t1KcKzxs5vDADs9iHDw0g5hO5myBnqN35Ug=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: May 3 05:40:56 2025 GMT Not After : May 10 05:40:56 2025 GMT Subject: CN=6815ac68-879a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:51:26:16:c8:73:87:10:9f:55:4d:62:9d: 8e:2a:e6:cf:58:49:00:0c:96:80:9e:bc:32:ae:88: 67:01:9e:29:15:ec:04:85:bf:72:c5:97:8b:05:af: 49:42:93:24:b0:b2:8a:39:96:6b:46:a6:82:1f:6b: 0a:f7:1e:97:5d:14:bc:1e:98:f6:b2:58:9a:df:54: d7:74:1a:77:a3:5d:19:8c:5e:75:4c:c7:97:63:14: 90:f6:9c:29:28:06:24:77:83:e2:44:f2:51:91:11: a4:6f:ec:d6:40:96:ed:b4:6a:ca:a2:18:03:30:91: 5a:80:de:8b:cd:de:ba:94:9a:b3:c7:68:d3:a0:9c: 83:a8:14:b9:2e:a6:22:30:bc:8e:38:a3:7f:cb:0d: c4:be:6c:06:3e:a3:88:95:b4:1c:a1:e4:01:51:95: 75:c3:f9:75:23:15:af:fb:c1:2e:6d:0c:cd:16:a0: b1:fb:03:b3:b1:f2:3f:86:c2:18:39:eb:ef:65:74: 16:ec:5d:ea:9a:1b:01:55:11:18:99:46:50:71:66: d6:7b:8c:31:10:51:a3:95:bf:74:ae:0a:e8:37:73: b5:82:90:0f:f9:1d:fb:d0:e3:15:0a:03:4e:ec:d7: da:2d:3f:ea:a3:46:e9:0c:1c:1e:25:10:08:ab:7a: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:78:E3:33:D7:A9:DB:CF:FE:F7:F8:D8:7F:96:5A:74:FF:10:E2 X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f2:89:f2:22:4a:c2:a2:34:d2:d7:b1:8e:57:e2:1a:35:92: 3d:3d:e1:73:f6:79:c8:23:39:3f:bc:c8:dc:5b:54:36:5a:a3: 1d:b6:0d:7c:72:d0:fd:ba:c8:b4:d6:e8:04:1f:6c:5c:83:ce: 29:c3:47:18:7f:68:97:4c:d8:1b:84:f7:77:4a:02:45:d3:a9: b2:e0:f7:38:de:4f:b6:45:a0:07:e7:ac:80:cc:1a:cd:78:ac: bf:58:06:59:0d:ee:05:62:69:78:07:e8:9c:67:7f:4b:e5:a0: e2:b8:7e:3d:e4:86:56:99:99:91:56:4d:bd:fa:b6:17:48:d3: 49:ba:06:0a:77:df:b9:e6:3a:51:6b:1a:ea:d4:b5:c6:1b:96: 2d:a8:32:06:b4:6b:e9:f2:22:9d:d5:31:69:2d:89:61:7f:8e: 03:00:ea:f9:b3:fc:e8:ce:1d:80:81:a0:8c:49:e2:e4:db:82: bc:e1:dd:da:ec:40:11:2e:77:d1:4b:88:b1:fa:0c:0d:ee:a2: 45:78:c8:58:e8:8b:8c:75:97:26:44:86:6a:ea:e9:f9:39:65: ad:d5:a3:a3:96:b4:44:bc:27:91:27:84:c9:b6:63:e9:ec:41: c9:6f:4e:72:3e:a6:b5:56:ed:56:74:4f:72:f6:78:83:86:9d: 9e:d8:94:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwNTAzMDU0MDU2WhcNMjUwNTEwMDU0MDU2WjAYMRYwFAYD VQQDEw02ODE1YWM2OC04NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn69RJhbIc4cQn1VNYp2OKubPWEkADJaAnrwyrohnAZ4pFewEhb9yxZeLBa9J QpMksLKKOZZrRqaCH2sK9x6XXRS8Hpj2slia31TXdBp3o10ZjF51TMeXYxSQ9pwp KAYkd4PiRPJRkRGkb+zWQJbttGrKohgDMJFagN6Lzd66lJqzx2jToJyDqBS5LqYi MLyOOKN/yw3EvmwGPqOIlbQcoeQBUZV1w/l1IxWv+8EubQzNFqCx+wOzsfI/hsIY OevvZXQW7F3qmhsBVREYmUZQcWbWe4wxEFGjlb90rgroN3O1gpAP+R370OMVCgNO 7NfaLT/qo0bpDBweJRAIq3p65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+OeOMz 16nbz/73+Nh/llp0/xDiMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq8onyIkrCojTS17GOV+IaNZI9PeFz9nnIIzk/vMjcW1Q2WqMdtg18 ctD9usi01ugEH2xcg84pw0cYf2iXTNgbhPd3SgJF06my4Pc43k+2RaAH56yAzBrN eKy/WAZZDe4FYml4B+icZ39L5aDiuH495IZWmZmRVk29+rYXSNNJugYKd9+55jpR axrq1LXGG5YtqDIGtGvp8iKd1TFpLYlhf44DAOr5s/zozh2AgaCMSeLk24K84d3a 7EARLnfRS4ix+gwN7qJFeMhY6IuMdZcmRIZq6un5OWWt1aOjlrREvCeRJ4TJtmPp 7EHJb05yPqa1Vu1WdE9y9niDhp2e2JQH -----END CERTIFICATE-----Generated at Sun May 4 05:23:53 2025 by rpki-client