$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: HenCl38QFPU9tJlNFuOCo1F01G19ok4P3UTBD7uz0DM= Subject key identifier: 43:9C:FA:F6:23:62:A0:E3:31:48:C3:80:09:E4:89:B9:C6:45:CC:06 Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 01DF Signing time: Fri 25 Apr 2025 01:52:34 +0000 Manifest this update: Fri 25 Apr 2025 01:52:34 +0000 Manifest next update: Fri 02 May 2025 01:52:34 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: 4kmIYugkQ5LJajuBribrwAT3Q3OcSVv7Kb36OtULheY=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: Apr 25 01:52:34 2025 GMT Not After : May 2 01:52:34 2025 GMT Subject: CN=680aeae2-6d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:1f:48:96:d9:f3:a0:51:1a:1a:d9:4d:82: 19:68:ea:7b:c5:a8:78:96:e7:65:a6:24:69:e4:8b: 13:2b:8e:74:4a:85:1c:db:86:d7:91:99:69:3b:f7: 2b:db:eb:6d:f9:51:a3:3c:73:7d:65:04:fd:79:cb: af:18:73:71:fb:ac:ad:71:ca:49:87:51:62:03:66: 81:b7:bc:ef:de:db:04:1e:09:f5:4c:f0:81:cf:d5: 27:c8:69:27:0f:fe:a0:bc:f3:0d:ff:bc:61:e5:95: b7:0a:26:b8:d6:a8:13:a2:d6:29:fd:ff:59:24:08: 60:1e:ed:fd:72:67:c0:f1:32:ed:ad:d8:db:34:81: d6:34:94:ae:9f:39:8a:51:6a:c3:12:f7:5e:b3:dd: d1:48:2a:15:7a:b7:de:7a:3c:54:e3:c3:c5:6c:5d: cb:47:88:90:05:c2:dc:7e:a9:7b:b2:73:fb:a1:c7: a7:d1:05:18:20:2c:2a:9e:35:2b:a0:cf:04:f7:7a: 72:0e:18:de:6a:b1:6e:4a:3a:09:d1:24:0f:d1:84: 9e:3c:da:85:aa:2e:5c:6a:0e:e9:b7:f6:0d:89:1e: 4a:ff:a8:e3:31:a0:bb:79:a1:72:ce:3f:e2:32:0d: 23:12:ed:47:f6:c7:4d:0e:e9:fb:9d:7e:33:59:d1: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:FA:F6:23:62:A0:E3:31:48:C3:80:09:E4:89:B9:C6:45:CC:06 X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8b:9f:fa:91:1a:e1:69:92:09:8a:65:76:d8:ea:d1:bd:15: 5e:e1:1d:aa:65:94:37:c4:95:90:1d:ca:80:60:b9:10:63:86: 22:6b:df:e4:db:d1:a1:9c:25:f1:1f:f2:60:0b:5a:a0:65:b4: c8:4b:a7:d9:a0:18:10:db:59:e9:79:7a:a1:50:53:4f:f8:19: 7a:1b:69:a8:4a:67:22:46:ac:b3:5d:2e:ab:8f:d6:71:0f:d1: b5:14:61:03:1e:82:fa:a9:b5:b7:e1:e9:09:1d:df:f1:85:33: 30:08:10:ef:92:d0:fb:b9:13:13:c6:52:40:35:c7:de:55:e9: a7:33:a7:f6:73:07:28:07:f7:5c:32:a0:4f:12:2d:6b:7f:96: d9:84:e6:fb:1b:98:63:5c:3e:b5:05:08:55:af:61:b0:18:64: 5d:63:a1:c9:3a:7d:ac:ca:a4:b9:e0:18:82:f2:04:68:a9:c6: 9d:3d:1d:b4:4e:4c:34:87:c6:ce:f6:41:97:5e:a1:92:8e:5f: c9:ed:1a:07:d8:15:2b:ae:57:dd:8b:92:19:00:7b:b1:73:ec: b6:5d:fa:38:ce:ff:57:ca:30:83:fb:58:e7:d0:ad:37:41:6e: 8d:5a:d3:16:f4:d4:b9:d5:cb:50:ea:80:1b:c6:70:9b:b4:e8: 9b:eb:14:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjUwNDI1MDE1MjM0WhcNMjUwNTAyMDE1MjM0WjAYMRYwFAYD VQQDEw02ODBhZWFlMi02ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEQfSJbZ86BRGhrZTYIZaOp7xah4ludlpiRp5IsTK450SoUc24bXkZlpO/cr 2+tt+VGjPHN9ZQT9ecuvGHNx+6ytccpJh1FiA2aBt7zv3tsEHgn1TPCBz9UnyGkn D/6gvPMN/7xh5ZW3Cia41qgTotYp/f9ZJAhgHu39cmfA8TLtrdjbNIHWNJSunzmK UWrDEvdes93RSCoVerfeejxU48PFbF3LR4iQBcLcfql7snP7ocen0QUYICwqnjUr oM8E93pyDhjearFuSjoJ0SQP0YSePNqFqi5cag7pt/YNiR5K/6jjMaC7eaFyzj/i Mg0jEu1H9sdNDun7nX4zWdFXHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOc+vYj YqDjMUjDgAnkibnGRcwGMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3i5/6kRrhaZIJimV22OrRvRVe4R2qZZQ3xJWQHcqAYLkQY4Yia9/k 29GhnCXxH/JgC1qgZbTIS6fZoBgQ21npeXqhUFNP+Bl6G2moSmciRqyzXS6rj9Zx D9G1FGEDHoL6qbW34ekJHd/xhTMwCBDvktD7uRMTxlJANcfeVemnM6f2cwcoB/dc MqBPEi1rf5bZhOb7G5hjXD61BQhVr2GwGGRdY6HJOn2syqS54BiC8gRoqcadPR20 Tkw0h8bO9kGXXqGSjl/J7RoH2BUrrlfdi5IZAHuxc+y2Xfo4zv9XyjCD+1jn0K03 QW6NWtMW9NS51ctQ6oAbxnCbtOib6xR1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:36 2025 by rpki-client