$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft File: V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json) Hash identifier: HTeGuCuOmr0gLbumL3IZ8JkwJTCMWnVeSGWwxZ+MHqw= Subject key identifier: 62:A8:C3:7F:D9:74:56:1E:7A:F4:CB:92:E7:71:66:01:77:E1:92:2E Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft Manifest number: 0643 Signing time: Thu 24 Apr 2025 14:46:40 +0000 Manifest this update: Thu 24 Apr 2025 14:46:40 +0000 Manifest next update: Thu 01 May 2025 14:46:40 +0000 Files and hashes: 1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: kf4gkLOAHcwWe61tKIH16XskeVUt/gtG/idJM2AarH0=) 2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Validity Not Before: Apr 24 14:46:40 2025 GMT Not After : May 1 14:46:40 2025 GMT Subject: CN=680a4ed0-15cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:50:f0:87:78:55:a2:aa:34:da:75:39:44: 38:0c:c6:ce:be:53:99:f5:b2:de:70:f5:fa:f2:49: aa:a7:7e:0d:3d:38:29:d7:d4:4b:6e:d1:25:0b:8c: c4:e4:dd:5f:6d:38:40:a4:d6:e3:35:71:9f:19:7b: 94:77:58:92:80:c3:5f:8b:1b:df:2c:b6:16:07:33: 8a:8f:be:22:15:19:58:98:04:6d:fb:d2:03:d9:d5: 04:b1:a3:ea:b3:c3:ba:5b:33:56:7a:7d:42:02:33: cb:0c:fc:b9:e4:91:40:67:f6:3e:5c:7f:62:ae:b1: 0b:27:36:a3:31:e8:ae:09:99:95:54:d8:54:38:41: dc:72:ff:38:42:2d:df:55:16:6f:5b:16:30:67:4e: 29:47:3f:56:d3:2a:02:c9:bf:c4:1a:f6:19:d4:83: 17:7b:c5:c6:d7:6d:30:03:71:2b:6f:43:c6:0a:fb: 98:8d:d4:c4:39:3b:53:6f:46:22:0f:a7:bb:22:f4: 00:6b:7f:9b:40:06:f3:1a:1e:5c:54:79:91:b6:88: 63:39:97:ca:57:e7:98:57:19:28:8d:ce:fa:d8:cf: 0d:12:3a:c0:73:b6:ac:f3:13:a5:84:58:a8:f9:e4: f5:2d:10:7b:66:20:26:23:25:dc:14:f2:9f:9c:36: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A8:C3:7F:D9:74:56:1E:7A:F4:CB:92:E7:71:66:01:77:E1:92:2E X509v3 Authority Key Identifier: keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:41:43:d0:7e:c2:e8:5d:9c:7c:20:54:1b:d6:e9:f8:5e:81: f4:3d:e3:92:00:10:d9:a9:9d:fa:60:c2:1a:cd:4f:ed:fd:a9: c4:7e:ac:36:7d:13:2b:08:c1:42:7c:9b:2b:68:e7:68:07:73: f9:16:38:46:96:50:77:4d:b1:0c:7f:f0:09:29:0f:4e:cb:1d: b9:82:c7:72:91:c2:3e:5b:61:93:95:aa:da:69:51:91:01:c4: cc:87:b3:54:8d:38:43:c6:ac:0d:b1:a7:54:a5:75:b7:e4:9d: 7a:12:8f:4a:61:f0:f6:3b:bd:8a:88:eb:34:3b:3f:d3:99:01: 76:ef:d1:c8:2d:79:bb:50:3e:68:56:95:a1:66:27:3c:cc:4f: 5d:4d:27:e6:ad:3b:e0:8e:72:bd:16:d2:f9:42:8d:f2:1d:fa: a1:7f:dc:05:a1:03:01:2c:7f:3f:ac:6a:9b:f2:66:08:71:72: 30:ef:ee:52:71:8c:1b:d4:2e:b6:3e:1e:f4:ee:c8:28:ff:c1: 6d:b8:49:29:39:24:2f:33:23:79:c3:5b:e6:79:dd:fb:23:2c: 49:3f:3c:81:7a:e8:92:58:d3:1e:4a:53:be:83:94:c0:6d:c8: d0:b4:55:4c:6a:05:c1:17:90:92:40:67:29:50:27:c1:05:d4: 88:a0:b7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF NTdCODlBRkIwHhcNMjUwNDI0MTQ0NjQwWhcNMjUwNTAxMTQ0NjQwWjAYMRYwFAYD VQQDEw02ODBhNGVkMC0xNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HdQ8Id4VaKqNNp1OUQ4DMbOvlOZ9bLecPX68kmqp34NPTgp19RLbtElC4zE 5N1fbThApNbjNXGfGXuUd1iSgMNfixvfLLYWBzOKj74iFRlYmARt+9ID2dUEsaPq s8O6WzNWen1CAjPLDPy55JFAZ/Y+XH9irrELJzajMeiuCZmVVNhUOEHccv84Qi3f VRZvWxYwZ04pRz9W0yoCyb/EGvYZ1IMXe8XG120wA3Erb0PGCvuYjdTEOTtTb0Yi D6e7IvQAa3+bQAbzGh5cVHmRtohjOZfKV+eYVxkojc762M8NEjrAc7as8xOlhFio +eT1LRB7ZiAmIyXcFPKfnDZuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKow3/Z dFYeevTLkudxZgF34ZIuMB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC8zQTA3RTBCQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcx T082bnl5MVdvMHZsZTRtdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQUPQfsLoXZx8IFQb1un4XoH0PeOSABDZqZ36YMIazU/t/anEfqw2 fRMrCMFCfJsraOdoB3P5FjhGllB3TbEMf/AJKQ9Oyx25gsdykcI+W2GTlaraaVGR AcTMh7NUjThDxqwNsadUpXW35J16Eo9KYfD2O72KiOs0Oz/TmQF279HILXm7UD5o VpWhZic8zE9dTSfmrTvgjnK9FtL5Qo3yHfqhf9wFoQMBLH8/rGqb8mYIcXIw7+5S cYwb1C62Ph707sgo/8FtuEkpOSQvMyN5w1vmed37IyxJPzyBeuiSWNMeSlO+g5TA bcjQtFVMagXBF5CSQGcpUCfBBdSIoLe4 -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:48 2025 by rpki-client