$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json) Hash identifier: GOsEzKo9nIe2Cs6a4b6YXxK3JPDVynGm0HIhpixV++4= Subject key identifier: 1C:84:85:4C:08:E4:27:52:D1:59:D7:F3:F4:A7:DF:C8:B1:66:FD:21 Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 Certificate issuer: /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft Manifest number: 065D Signing time: Thu 24 Apr 2025 22:12:05 +0000 Manifest this update: Thu 24 Apr 2025 22:12:04 +0000 Manifest next update: Thu 01 May 2025 22:12:04 +0000 Files and hashes: 1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: ku4QfldcCKXkM2EupnXTD6lm3/5JvpbZMzLQTgT+610=) 2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: aQZNfhiseoXahMcYa1mO4OhpMyMyYPdZKpX7ChBPpY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B27, serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Validity Not Before: Apr 24 22:12:04 2025 GMT Not After : May 1 22:12:04 2025 GMT Subject: CN=680ab735-561e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:3e:ae:16:a7:34:2d:c4:32:f6:9c:68:17: f0:da:38:2e:82:21:69:01:2f:bb:ae:e7:4d:8b:f0: a0:ed:5a:4e:9d:4b:b1:0a:8e:d0:4b:d6:2b:de:17: 70:32:9f:9c:3c:13:29:6b:49:7b:50:7e:42:61:8c: 74:0a:5d:65:57:1e:3c:57:33:80:9f:3c:c1:51:70: f4:d8:8a:e2:1d:ef:9a:cd:6a:09:40:8c:7a:5b:df: f8:41:89:88:30:cd:11:71:7f:1e:6f:ca:66:ad:24: 07:e1:52:58:33:5f:ad:2d:03:fe:32:13:48:16:4f: a2:63:ee:36:3c:f1:06:98:1f:82:99:1e:ce:fa:e8: f4:b6:c3:54:c2:4b:53:01:01:ae:c7:b5:92:e4:fd: a2:bd:02:1e:d4:0f:7a:1f:c0:f6:37:50:cb:bd:97: 86:ff:7e:36:78:93:90:e2:95:1b:50:0d:15:f2:ad: f1:28:b3:f9:e3:09:f5:04:57:e2:05:09:28:e1:9a: 81:99:3a:91:db:ca:23:4c:d7:07:6b:22:8d:39:77: 85:a1:95:b6:c8:1a:ad:c2:cc:f9:c1:69:71:87:c2: 2e:0a:68:38:50:f5:24:e9:27:5f:ae:5c:7a:36:0e: e4:be:69:7e:7d:dc:f8:e9:bb:27:5c:bf:e3:82:16: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:84:85:4C:08:E4:27:52:D1:59:D7:F3:F4:A7:DF:C8:B1:66:FD:21 X509v3 Authority Key Identifier: keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f3:f1:34:c3:3b:28:4f:50:4a:ae:38:c7:dc:ee:9c:98:86: 88:94:6c:1d:e3:45:36:e8:ac:20:0f:56:57:b9:90:0a:9b:56: b0:f0:ad:c4:54:d5:bd:0d:61:dd:11:e8:72:16:f5:2a:fc:70: 97:e3:d1:a5:e8:2e:2d:f4:cc:b4:2b:9d:d5:f8:de:45:ab:cb: 30:35:da:76:bf:90:bb:5f:53:cd:eb:09:68:77:dc:cc:f7:41: d1:13:dc:42:4b:b7:79:0a:89:93:e8:92:23:4a:b9:dc:53:26: 16:02:c6:81:05:ca:da:6b:ed:d3:ca:fc:2a:f3:ed:a8:92:d0: a3:3c:e4:00:9a:00:ff:98:83:8e:09:be:55:63:f1:bb:c5:7d: d0:56:31:52:1a:eb:df:81:29:6c:a1:ff:8a:2c:fb:ac:41:c6: 61:01:bb:3f:60:74:0d:fb:1c:4c:e6:2b:b1:96:b4:1a:4e:cb: 29:09:4b:b2:2c:d0:0e:75:13:13:02:62:ee:a4:84:7c:a9:f4: d9:21:e6:76:f7:14:b6:cc:4f:b2:65:2e:92:7c:06:bb:d4:34: 0d:e5:fb:6b:28:be:93:5f:7c:e2:e9:bd:1c:45:5f:cf:ef:bf: d0:92:a2:e9:87:de:32:5c:10:fa:4d:d0:59:c9:9e:57:bf:8d: 56:6d:60:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3 ODc2QkRCOTMwHhcNMjUwNDI0MjIxMjA0WhcNMjUwNTAxMjIxMjA0WjAYMRYwFAYD VQQDEw02ODBhYjczNS01NjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2s+rhanNC3EMvacaBfw2jgugiFpAS+7rudNi/Cg7VpOnUuxCo7QS9Yr3hdw Mp+cPBMpa0l7UH5CYYx0Cl1lVx48VzOAnzzBUXD02IriHe+azWoJQIx6W9/4QYmI MM0RcX8eb8pmrSQH4VJYM1+tLQP+MhNIFk+iY+42PPEGmB+CmR7O+uj0tsNUwktT AQGux7WS5P2ivQIe1A96H8D2N1DLvZeG/342eJOQ4pUbUA0V8q3xKLP54wn1BFfi BQko4ZqBmTqR28ojTNcHayKNOXeFoZW2yBqtwsz5wWlxh8IuCmg4UPUk6Sdfrlx6 Ng7kvml+fdz46bsnXL/jghZuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByEhUwI 5CdS0VnX8/Sn38ixZv0hMB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu8/E0wzsoT1BKrjjH3O6cmIaIlGwd40U26KwgD1ZXuZAKm1aw8K3E VNW9DWHdEehyFvUq/HCX49Gl6C4t9My0K53V+N5Fq8swNdp2v5C7X1PN6wlod9zM 90HRE9xCS7d5ComT6JIjSrncUyYWAsaBBcraa+3Tyvwq8+2oktCjPOQAmgD/mIOO Cb5VY/G7xX3QVjFSGuvfgSlsof+KLPusQcZhAbs/YHQN+xxM5iuxlrQaTsspCUuy LNAOdRMTAmLupIR8qfTZIeZ29xS2zE+yZS6SfAa71DQN5ftrKL6TX3zi6b0cRV/P 77/QkqLph94yXBD6TdBZyZ5Xv41WbWCz -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client