$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json) Hash identifier: ZEIHn66592/+wZbVF9394hvk+Pj7Phhsx8BaKw5HWcs= Subject key identifier: 9E:37:65:9F:5A:4E:BF:8E:2F:CB:C0:F2:C4:D8:2D:E3:C7:84:2B:E0 Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft Manifest number: 0C2A Signing time: Thu 24 Apr 2025 18:29:30 +0000 Manifest this update: Thu 24 Apr 2025 18:29:29 +0000 Manifest next update: Thu 01 May 2025 18:29:29 +0000 Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: retTr5uBy0NnUAdYHBKxzt3O/g//sxTE1EUOFfr+V28=) 2: 9591475A4F6011EFAF26AF63C4F9AE02.roa (hash: jD0yN6uuFJ5mI/OZ4NsQia/Tm8YVXocqzyMVWBg9ukI=) 3: D18A05124F6011EF92961F64C4F9AE02.roa (hash: kl/EG3COlGaPdFGuJ2x1JJcaum31G+ST8VWwLB103oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Validity Not Before: Apr 24 18:29:29 2025 GMT Not After : May 1 18:29:29 2025 GMT Subject: CN=680a830a-65e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:3c:d6:09:94:7b:0e:01:d3:c6:88:25:9b: 97:a2:da:5a:c3:17:4e:86:1b:34:37:c2:73:cb:8e: 8b:98:2d:ff:45:7f:28:aa:35:e1:07:c6:49:3a:81: 1e:85:0d:0b:7a:38:a7:cd:f9:c5:0d:dc:f6:86:9c: ad:b1:2f:5d:ed:f0:77:d6:33:a6:a6:dd:2c:99:a4: dc:f9:f6:15:1e:76:cb:2d:4d:b4:73:76:6b:11:1e: df:d0:11:a6:e4:cf:1f:dd:a1:1a:a6:44:41:2c:19: 22:33:85:fe:77:72:04:14:08:20:9f:cd:35:17:45: 22:04:a4:fd:1f:ab:ff:d8:3c:9e:93:86:86:41:e5: b3:4f:12:53:52:bb:26:fd:55:8b:83:4f:de:28:0e: 46:56:5f:bc:eb:48:49:c1:b2:99:19:17:b4:77:68: 4e:8b:6c:1f:78:83:e8:07:7a:58:c9:b2:25:d2:55: 42:c8:ec:8a:ee:4f:19:90:dc:1c:a0:b4:2b:97:15: 6c:c1:ed:97:08:a6:30:7a:75:c7:a0:3c:69:9e:dc: f7:c1:df:ca:9c:de:36:23:28:5e:29:ab:e6:2b:3c: 98:0e:49:06:a8:e8:1a:ca:83:c8:44:c7:f2:8d:21: c2:b8:56:f9:a8:fc:70:6d:9c:da:c1:8f:1e:4d:4f: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:37:65:9F:5A:4E:BF:8E:2F:CB:C0:F2:C4:D8:2D:E3:C7:84:2B:E0 X509v3 Authority Key Identifier: keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:29:98:56:91:70:ab:0c:70:ca:99:32:ef:82:60:f6:3a:3f: 5b:e6:99:d4:06:cc:72:57:1a:fc:56:ee:04:7f:3e:17:50:0b: 21:5b:e0:d1:c8:8c:dc:8c:1c:77:f4:9e:12:07:8d:f5:dc:e0: c5:36:9f:e0:70:c8:00:c5:23:39:1d:42:da:e6:ad:88:66:26: ce:50:81:54:35:20:f0:03:8e:97:67:38:30:05:e0:d1:15:12: 3d:3a:f9:d3:e3:2e:43:cf:42:3c:56:bd:f4:6b:2c:6e:e2:4a: 70:d5:5a:bb:08:33:ca:ac:b6:f7:d5:f8:e3:0d:cc:b3:48:22: 97:e2:78:0f:0d:31:6f:d7:c8:fe:1c:11:cc:81:86:6b:c9:12: ee:f5:50:e9:ba:da:f8:af:c3:3e:60:c0:a2:37:1d:1e:4a:04: e8:ff:43:9e:d8:21:2a:46:4f:46:76:78:9a:07:73:01:9f:ef: bb:11:52:a3:58:5e:8f:e8:6b:9e:7b:aa:9d:17:3b:6e:ca:11: e6:9d:15:c2:ea:dc:1a:32:7c:12:92:b5:6a:85:00:44:88:51: 1b:86:71:bc:92:30:3e:3e:c3:08:c4:a7:2b:46:cf:e2:46:c0: 9a:be:df:a8:79:1c:95:0c:dc:a1:80:08:0d:14:df:1e:e0:1a: 33:40:2e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF MUZEQjg2RTYwHhcNMjUwNDI0MTgyOTI5WhcNMjUwNTAxMTgyOTI5WjAYMRYwFAYD VQQDEw02ODBhODMwYS02NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvY81gmUew4B08aIJZuXotpawxdOhhs0N8Jzy46LmC3/RX8oqjXhB8ZJOoEe hQ0LejinzfnFDdz2hpytsS9d7fB31jOmpt0smaTc+fYVHnbLLU20c3ZrER7f0BGm 5M8f3aEapkRBLBkiM4X+d3IEFAggn801F0UiBKT9H6v/2Dyek4aGQeWzTxJTUrsm /VWLg0/eKA5GVl+860hJwbKZGRe0d2hOi2wfeIPoB3pYybIl0lVCyOyK7k8ZkNwc oLQrlxVswe2XCKYwenXHoDxpntz3wd/KnN42IyheKavmKzyYDkkGqOgayoPIRMfy jSHCuFb5qPxwbZzawY8eTU+I3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ43ZZ9a Tr+OL8vA8sTYLePHhCvgMB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4 NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU2OS9GRTg5OUQ1RTA4NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnpp ajNzdm1aTkM5UnpoX2JodVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4KZhWkXCrDHDKmTLvgmD2Oj9b5pnUBsxyVxr8Vu4Efz4XUAshW+DR yIzcjBx39J4SB4313ODFNp/gcMgAxSM5HULa5q2IZibOUIFUNSDwA46XZzgwBeDR FRI9OvnT4y5Dz0I8Vr30ayxu4kpw1Vq7CDPKrLb31fjjDcyzSCKX4ngPDTFv18j+ HBHMgYZryRLu9VDputr4r8M+YMCiNx0eSgTo/0Oe2CEqRk9GdniaB3MBn++7EVKj WF6P6Guee6qdFztuyhHmnRXC6twaMnwSkrVqhQBEiFEbhnG8kjA+PsMIxKcrRs/i RsCavt+oeRyVDNyhgAgNFN8e4BozQC4R -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:12 2025 by rpki-client