$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: zZme0F1J3s2CUbDqogaMatrLgT68MbCEdSs82KOtdWA= Subject key identifier: 2F:95:76:E9:9F:38:FC:85:AD:9D:48:AA:2F:B8:EB:62:F9:25:70:59 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 1282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 127B Signing time: Thu 24 Apr 2025 17:07:10 +0000 Manifest this update: Thu 24 Apr 2025 17:07:09 +0000 Manifest next update: Thu 01 May 2025 17:07:09 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: TSaAWNt0sjabhRW71m+5oUMlvxW9PUTrDwDhz9wCg3I=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: Apr 24 17:07:09 2025 GMT Not After : May 1 17:07:09 2025 GMT Subject: CN=680a6fbe-8844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:a2:b2:9a:c4:76:fb:dd:d0:80:7f:c8:ae: 71:c8:5e:53:26:88:ff:1f:98:e9:31:6a:58:07:b6: bd:de:b5:02:e6:c4:13:5b:24:34:92:e1:63:f2:0c: 5a:b1:0b:90:a5:32:91:3e:3c:91:9d:61:4f:0d:64: c8:67:1c:e1:65:3b:98:e4:a3:da:3d:87:1e:e2:e7: 13:75:45:7e:f2:e0:fc:d2:f1:3b:a9:42:d6:37:f5: b5:ec:de:17:e8:80:c3:bd:ba:e3:37:5e:87:cd:da: 57:42:c8:b8:c3:bc:b3:e1:4b:9a:9f:e9:a3:84:5b: 2f:9c:89:e5:d9:a3:6f:01:4e:ad:70:24:75:c1:37: 7d:51:c3:ff:a7:03:88:96:40:7e:8b:13:31:85:04: 29:f7:e3:22:2b:17:d4:dd:3f:3b:f1:ba:18:3f:f8: ff:0d:f1:eb:25:19:b5:fc:a1:6a:7e:e9:a7:7a:8d: f1:a4:dd:63:b7:ac:b2:c5:b5:87:81:1b:cd:dc:48: 68:d6:59:ce:9d:66:36:ef:7c:8e:0c:65:7b:e3:03: db:ff:5b:42:5f:6c:56:3b:04:8f:cf:49:89:b9:70: bc:0e:31:8f:67:8d:17:21:22:3f:55:4e:90:c7:3e: d4:92:fb:7d:91:1a:71:85:82:5e:06:6f:5a:c6:68: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:95:76:E9:9F:38:FC:85:AD:9D:48:AA:2F:B8:EB:62:F9:25:70:59 X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d8:2e:df:3b:7c:b2:5e:0a:34:3e:b8:66:17:b9:9f:a0:41: 60:76:6e:f3:1b:fe:4b:db:ba:c2:e3:6a:7a:9c:8c:d9:e5:25: 79:17:ff:ef:cf:9f:70:37:15:07:40:7a:91:1d:fd:8c:95:75: 25:c7:66:44:27:3b:22:80:b7:b8:98:3f:91:85:c9:14:2d:78: 1d:f5:44:74:35:09:cc:de:e7:17:a6:26:0e:70:bd:f8:41:c9: f2:3d:ad:d3:73:76:75:6b:02:25:2f:4c:a9:f7:41:ac:bd:d3: e8:2f:37:70:ba:7b:f1:b6:8c:c6:2d:c4:ea:9c:85:45:22:d9: b1:e6:00:40:4c:dd:c7:10:f3:67:1b:4f:1e:08:5e:75:d9:b5: 9b:b5:9d:7b:63:88:88:7d:3a:5c:78:b4:26:5a:5f:07:08:86: 43:13:e9:99:b1:15:2f:2e:9f:b4:4d:45:65:e5:eb:bb:b8:d8: cc:2a:47:7f:76:06:dd:cf:e7:f0:9e:9d:48:3b:4f:7b:47:04: 34:86:b2:23:52:f4:41:9f:9c:cf:61:d1:93:66:08:31:09:bb: 1f:13:12:1d:b3:c5:e4:5b:dc:30:64:57:6a:8f:71:4b:c8:26: 9f:e3:3e:f4:8e:3d:db:f1:3e:55:3b:f7:6a:77:83:34:8c:f0: 85:88:12:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjUwNDI0MTcwNzA5WhcNMjUwNTAxMTcwNzA5WjAYMRYwFAYD VQQDEw02ODBhNmZiZS04ODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zOisprEdvvd0IB/yK5xyF5TJoj/H5jpMWpYB7a93rUC5sQTWyQ0kuFj8gxa sQuQpTKRPjyRnWFPDWTIZxzhZTuY5KPaPYce4ucTdUV+8uD80vE7qULWN/W17N4X 6IDDvbrjN16HzdpXQsi4w7yz4Uuan+mjhFsvnInl2aNvAU6tcCR1wTd9UcP/pwOI lkB+ixMxhQQp9+MiKxfU3T878boYP/j/DfHrJRm1/KFqfumneo3xpN1jt6yyxbWH gRvN3Eho1lnOnWY273yODGV74wPb/1tCX2xWOwSPz0mJuXC8DjGPZ40XISI/VU6Q xz7Ukvt9kRpxhYJeBm9axmisVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+Vdumf OPyFrZ1Iqi+462L5JXBZMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU2C7fO3yyXgo0PrhmF7mfoEFgdm7zG/5L27rC42p6nIzZ5SV5F//v z59wNxUHQHqRHf2MlXUlx2ZEJzsigLe4mD+RhckULXgd9UR0NQnM3ucXpiYOcL34 QcnyPa3Tc3Z1awIlL0yp90GsvdPoLzdwunvxtozGLcTqnIVFItmx5gBATN3HEPNn G08eCF512bWbtZ17Y4iIfTpceLQmWl8HCIZDE+mZsRUvLp+0TUVl5eu7uNjMKkd/ dgbdz+fwnp1IO097RwQ0hrIjUvRBn5zPYdGTZggxCbsfExIds8XkW9wwZFdqj3FL yCaf4z70jj3b8T5VO/dqd4M0jPCFiBId -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:53 2025 by rpki-client