$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json) Hash identifier: 5LAQ+x33uCbzSmDc1GrNW0Ir7QLqhS1py5G2IKtTEKo= Subject key identifier: 6D:E6:49:91:46:39:B2:F0:FB:50:38:2B:7D:D9:30:D6:68:A3:FF:DD Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft Manifest number: 0D14 Signing time: Thu 24 Apr 2025 18:02:15 +0000 Manifest this update: Thu 24 Apr 2025 18:02:14 +0000 Manifest next update: Thu 01 May 2025 18:02:14 +0000 Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: n4NA8q1oHnrplMGkpCJI9emRh8iM5Ly0H3rj1ZJK3OE=) 2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: UHG9imzuae0kc1/YQZIGw4No6LetRC00ffO99sNT/HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B Validity Not Before: Apr 24 18:02:14 2025 GMT Not After : May 1 18:02:14 2025 GMT Subject: CN=680a7ca6-7221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:dd:4e:1d:a5:69:53:22:f3:91:1f:fb:62: ab:10:f3:82:44:86:c8:f4:74:72:c4:dc:67:ed:86: bf:64:6a:a8:51:43:63:e1:90:b6:12:55:c1:38:53: da:25:1d:71:96:4d:97:b1:10:99:91:ba:49:c0:4b: 78:c6:f1:fd:93:51:87:ed:1c:07:3c:01:15:85:d9: 29:7b:ff:8e:7e:f1:ab:ac:8f:32:d4:e0:18:0b:aa: cc:0f:b9:aa:2b:c6:18:3a:4c:09:f8:95:70:62:52: 46:22:af:a9:cc:38:37:27:02:68:61:81:bb:94:6a: 7b:b6:bb:0c:9d:7b:e7:13:7f:88:64:ec:99:61:99: 9f:d8:7b:fd:b3:c5:61:ff:6d:47:f9:49:16:ec:11: a8:f8:e6:71:23:15:80:bd:a1:27:a6:51:f6:ff:39: 06:4c:9a:94:bf:fe:e3:14:07:0a:98:0a:2c:3e:53: 2c:96:ff:f9:f3:00:d2:02:8b:b5:78:9e:eb:d3:15: 26:12:4e:e2:df:ea:ac:71:61:4c:0c:87:1e:12:f2: d4:62:ec:91:3a:83:34:c0:16:a9:d2:15:2f:9f:37: fd:61:21:df:53:ca:b9:72:26:ec:f4:22:fc:71:58: ad:cf:96:15:a3:44:7c:b2:04:58:ff:3d:4c:72:e8: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E6:49:91:46:39:B2:F0:FB:50:38:2B:7D:D9:30:D6:68:A3:FF:DD X509v3 Authority Key Identifier: keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:33:f0:df:1c:28:b2:60:ed:e2:b1:1b:c2:05:83:07:26:a2: 6d:05:4f:3e:97:06:ef:8d:89:fd:61:7a:bc:2a:e9:7f:e2:2c: 6f:f1:19:e1:a7:b3:fc:e3:ad:f1:5a:a8:35:9d:f7:e8:d1:52: 20:5f:50:30:f3:21:b4:34:42:e2:69:af:cd:31:ca:32:b1:2d: ac:6b:0a:ec:2e:0c:e3:c3:3a:97:07:d4:02:20:de:0c:e5:6c: 15:5d:41:45:ac:4c:6e:4a:16:72:ed:f1:8b:23:91:51:17:6f: 5b:4c:66:16:a7:16:61:f2:61:5f:25:b6:cd:63:c2:89:a6:69: ce:26:3a:80:c7:69:af:3e:73:2e:a6:27:4b:06:02:a1:ce:3f: 4c:d2:85:bf:24:eb:8b:0f:6e:7b:95:0e:b4:d1:72:91:9f:0a: e6:fa:ae:79:7a:e1:90:56:bb:b1:cf:df:c1:f6:80:ef:e0:f9: 2d:fa:73:ec:f4:38:f7:f8:d3:15:15:6b:4a:77:cf:d2:7a:9b: 37:5a:f6:26:12:c6:0d:50:e7:04:6b:94:2b:55:86:e5:0c:a0: 90:32:1a:07:b7:19:2d:82:5f:8f:02:65:53:09:1f:64:7f:ef: 05:ab:f3:58:ae:34:83:ee:d3:82:85:f5:15:5a:61:4f:c7:3f: 3e:16:3a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NTcxMTAvBgNVBAUTKDhBOUJEQTY4NTM5RjcxNThDQjAxMzcyMEE5OTM2RjI2 NEI5QTUzN0IwHhcNMjUwNDI0MTgwMjE0WhcNMjUwNTAxMTgwMjE0WjAYMRYwFAYD VQQDEw02ODBhN2NhNi03MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TDdTh2laVMi85Ef+2KrEPOCRIbI9HRyxNxn7Ya/ZGqoUUNj4ZC2ElXBOFPa JR1xlk2XsRCZkbpJwEt4xvH9k1GH7RwHPAEVhdkpe/+OfvGrrI8y1OAYC6rMD7mq K8YYOkwJ+JVwYlJGIq+pzDg3JwJoYYG7lGp7trsMnXvnE3+IZOyZYZmf2Hv9s8Vh /21H+UkW7BGo+OZxIxWAvaEnplH2/zkGTJqUv/7jFAcKmAosPlMslv/58wDSAou1 eJ7r0xUmEk7i3+qscWFMDIceEvLUYuyROoM0wBap0hUvnzf9YSHfU8q5cibs9CL8 cVitz5YVo0R8sgRY/z1Mcuh9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3mSZFG ObLw+1A4K33ZMNZoo//dMB8GA1UdIwQYMBaAFIqb2mhTn3FYywE3IKmTbyZLmlN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg1Ny9GMTMwN0I3NERB RDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNWakxBVGNncVpOdkprdWFV M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwdmFhRk9mY1ZqTEFUY2dxWk52Smt1YVUzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg1Ny9GMTMwN0I3NERBRDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNW akxBVGNncVpOdkprdWFVM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPM/DfHCiyYO3isRvCBYMHJqJtBU8+lwbvjYn9YXq8Kul/4ixv8Rnh p7P8463xWqg1nffo0VIgX1Aw8yG0NELiaa/NMcoysS2sawrsLgzjwzqXB9QCIN4M 5WwVXUFFrExuShZy7fGLI5FRF29bTGYWpxZh8mFfJbbNY8KJpmnOJjqAx2mvPnMu pidLBgKhzj9M0oW/JOuLD257lQ600XKRnwrm+q55euGQVruxz9/B9oDv4Pkt+nPs 9Dj3+NMVFWtKd8/Seps3WvYmEsYNUOcEa5QrVYblDKCQMhoHtxktgl+PAmVTCR9k f+8Fq/NYrjSD7tOChfUVWmFPxz8+Fjry -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:04 2025 by rpki-client