$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json) Hash identifier: LmAHTabE0TFxJcsgnRp/caTr4bqSvvTRdYNvvW4AMPA= Subject key identifier: B1:BD:A7:6B:21:BA:E6:8C:BA:47:BE:94:18:31:7D:83:DA:0C:F1:19 Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 Certificate issuer: /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft Manifest number: E5 Signing time: Sun 27 Apr 2025 04:19:12 +0000 Manifest this update: Sun 27 Apr 2025 04:19:11 +0000 Manifest next update: Sun 04 May 2025 04:19:11 +0000 Files and hashes: 1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: I0zXgecNLqf92H+QPRYiWZ46iBScWeDvpjnjDcVEpN8=) 2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Validity Not Before: Apr 27 04:19:11 2025 GMT Not After : May 4 04:19:11 2025 GMT Subject: CN=680db040-1ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:22:9d:a8:90:a8:52:07:50:86:0b:c5:d1: 24:23:7f:20:ac:bd:0b:61:ba:5c:2d:05:20:3b:94: 06:ff:5e:f2:3d:2a:4f:26:70:0b:f4:21:38:e3:a9: 5d:74:3c:43:d0:a9:de:77:e9:fb:78:13:84:ce:02: a7:a1:0c:cd:15:9d:0d:43:60:1f:c1:14:e5:17:84: 1e:f6:05:37:d6:8a:74:ac:21:30:2e:1e:93:74:30: 26:90:ef:6d:91:f7:c7:40:c3:4f:41:66:c0:b2:c9: f8:15:7a:64:b7:1e:3d:93:82:c1:e1:e4:ff:d6:f4: 64:51:a9:48:d5:cd:a7:e9:5f:99:79:b0:d3:6f:cc: 89:e6:17:46:01:e8:f0:c0:10:53:88:a1:ee:7b:28: 86:9d:e9:75:54:fb:6c:52:4d:63:32:19:37:da:e8: 05:fb:8a:9f:3e:3a:23:69:95:1d:09:5d:ca:ef:4d: a9:64:e9:1a:99:9e:38:e3:e6:ca:3d:37:9b:2e:14: 63:be:86:b1:77:07:90:14:e9:ec:79:e6:74:43:9c: fc:a0:15:88:b0:07:c9:1b:5b:1d:4d:eb:72:43:fb: d5:3a:93:0f:84:14:92:c5:f4:f3:ea:c5:b7:bf:61: 2b:f8:68:41:de:a9:8b:f4:36:72:98:02:10:d9:72: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BD:A7:6B:21:BA:E6:8C:BA:47:BE:94:18:31:7D:83:DA:0C:F1:19 X509v3 Authority Key Identifier: keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:62:c8:56:e3:b5:08:23:8f:aa:5a:a5:e7:5d:f1:d3:ec:b5: e4:0e:26:35:88:ab:fc:08:cb:40:8f:c4:6c:f0:34:24:53:6a: cb:f4:48:f4:18:55:09:b7:e6:4e:9d:df:54:f4:96:3d:91:1e: ee:1b:00:ec:49:51:59:e5:33:d3:55:c4:05:9a:59:72:1e:d9: 57:4c:e5:dd:19:35:59:e9:4b:0d:b0:e6:2c:3f:53:e5:78:6d: ae:19:6e:68:52:01:de:83:a5:d2:64:1c:c5:48:77:0f:69:8c: e1:8b:5c:6d:c7:92:2b:e0:a7:25:c2:90:98:53:42:69:2e:cd: 83:bd:17:1a:a3:c5:64:03:4b:8b:4d:d5:02:61:be:43:f1:1b: 84:e1:d4:6d:de:de:3a:77:24:82:84:54:ad:c3:e7:ca:72:5b: 5e:ef:91:c3:1a:ee:99:ee:35:88:a2:66:fe:e0:d9:d1:6e:ac: 15:42:bc:79:95:92:c2:65:43:a3:8d:b0:f3:91:3c:f7:95:0d: 57:84:55:cd:45:21:fd:b8:8d:c7:c0:19:a8:14:da:e7:6f:79: 8d:02:f6:8d:de:e5:b0:93:9f:dd:7f:a1:e6:97:a5:35:6c:d8: 72:8b:d8:c8:36:24:f7:43:65:dd:bf:2c:54:53:26:30:e8:60: 1e:dc:a8:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKEIxNTJBNzlGMUJFOTc4MzNDMkE2RkNENkY0OUY5REJG RDg0M0M5ODMwHhcNMjUwNDI3MDQxOTExWhcNMjUwNTA0MDQxOTExWjAYMRYwFAYD VQQDEw02ODBkYjA0MC0xZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWcinaiQqFIHUIYLxdEkI38grL0LYbpcLQUgO5QG/17yPSpPJnAL9CE446ld dDxD0Kned+n7eBOEzgKnoQzNFZ0NQ2AfwRTlF4Qe9gU31op0rCEwLh6TdDAmkO9t kffHQMNPQWbAssn4FXpktx49k4LB4eT/1vRkUalI1c2n6V+ZebDTb8yJ5hdGAejw wBBTiKHueyiGnel1VPtsUk1jMhk32ugF+4qfPjojaZUdCV3K702pZOkamZ444+bK PTebLhRjvoaxdweQFOnseeZ0Q5z8oBWIsAfJG1sdTetyQ/vVOpMPhBSSxfTz6sW3 v2Er+GhB3qmL9DZymAIQ2XIZ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG9p2sh uuaMuke+lBgxfYPaDPEZMB8GA1UdIwQYMBaAFLFSp58b6Xgzwqb81vSfnb/YQ8mD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DNTk4MTJGOEM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9zVktubnh2cGVEUENwdnpXOUotZHY5aER5 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NWS25ueHZwZURQQ3B2elc5Si1kdjloRHlZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DNTk4MTJGOEM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9zVktubnh2cGVE UENwdnpXOUotZHY5aER5WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtYshW47UII4+qWqXnXfHT7LXkDiY1iKv8CMtAj8Rs8DQkU2rL9Ej0 GFUJt+ZOnd9U9JY9kR7uGwDsSVFZ5TPTVcQFmllyHtlXTOXdGTVZ6UsNsOYsP1Pl eG2uGW5oUgHeg6XSZBzFSHcPaYzhi1xtx5Ir4KclwpCYU0JpLs2DvRcao8VkA0uL TdUCYb5D8RuE4dRt3t46dySChFStw+fKclte75HDGu6Z7jWIomb+4NnRbqwVQrx5 lZLCZUOjjbDzkTz3lQ1XhFXNRSH9uI3HwBmoFNrnb3mNAvaN3uWwk5/df6Hml6U1 bNhyi9jINiT3Q2XdvyxUUyYw6GAe3KjY -----END CERTIFICATE-----Generated at Mon Apr 28 04:59:12 2025 by rpki-client