$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json) Hash identifier: TIVDKoxF7rGmt/RoQbqOatuIDD3NSGWIOCfOxU/2wuY= Subject key identifier: 4B:4C:66:10:BC:95:4D:A9:77:06:1C:B8:68:76:53:59:21:0D:D1:21 Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft Manifest number: 03A2 Signing time: Fri 25 Apr 2025 00:30:53 +0000 Manifest this update: Fri 25 Apr 2025 00:30:53 +0000 Manifest next update: Fri 02 May 2025 00:30:53 +0000 Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: z3QJPsKY1ERnMBg/mI49rIbh6QXiPN2S+hBKtnICXiw=) 2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33 Validity Not Before: Apr 25 00:30:53 2025 GMT Not After : May 2 00:30:53 2025 GMT Subject: CN=680ad7bd-72bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:3b:7f:fb:19:ae:fa:4d:89:e3:5f:b0:0e: 92:ef:c9:18:b7:27:e6:e4:39:bb:fa:ea:0d:03:0b: 3d:9b:ce:62:e8:b0:e9:e2:6f:ea:ac:b8:8c:09:fc: 51:a5:6d:f1:e1:68:f9:05:b0:83:4b:9f:f4:18:cb: 54:ae:4b:de:94:f6:9c:5b:8e:6c:77:20:3a:9b:c5: 4c:6b:c1:51:c7:1c:5b:65:6f:18:1a:44:06:7d:f1: 0a:e4:a7:c2:80:29:c8:55:c2:7f:a5:e1:0a:eb:c9: cc:89:83:5e:76:58:8f:af:8a:2f:f2:a9:7b:85:04: 5b:9d:b2:2d:34:c8:02:51:d1:a5:2b:02:42:a1:ea: 1f:be:4b:bd:56:2f:b1:da:03:35:c7:1f:eb:91:e0: 12:88:5a:4d:e1:f3:da:5e:50:53:db:9f:83:b8:0b: e3:77:b0:64:7e:fb:d8:35:a6:28:8d:42:84:cb:8d: 1a:40:1a:db:78:4d:12:84:16:d3:b6:75:cb:33:87: 7a:c9:1c:ff:39:77:e5:74:8d:85:1d:59:6d:7d:fd: c0:02:a8:8e:e0:c4:98:9e:b1:b5:3d:fb:5d:0c:43: 36:2f:b9:9f:77:e8:d6:08:bf:3a:8a:2e:a6:7a:9e: e5:37:66:04:96:1d:9b:f9:b2:31:4c:b7:63:de:65: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:66:10:BC:95:4D:A9:77:06:1C:B8:68:76:53:59:21:0D:D1:21 X509v3 Authority Key Identifier: keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a2:12:66:fd:11:e2:06:cd:c0:3c:d0:08:c3:b0:cf:49:e8: df:65:23:59:ca:fd:d9:70:c0:04:fe:0e:11:d6:4a:cd:bd:94: cc:e8:37:b2:0c:e6:9b:88:81:ca:22:b0:67:17:60:fe:93:28: c5:55:d8:73:91:69:d5:8a:0e:c7:76:68:42:41:ca:aa:5c:9b: be:82:11:86:8b:d4:e7:42:87:6c:2b:12:91:1f:a5:25:6c:e8: cf:a3:95:92:63:2f:78:bb:ed:53:aa:6f:af:bd:24:ea:71:5f: ea:0f:8e:38:29:c3:43:9c:0f:1e:48:84:7a:8a:bc:5e:81:54: 7c:26:4c:9f:c1:10:3a:dd:21:06:3b:ab:44:a3:ad:8f:2b:09: 67:87:ee:36:53:8d:22:42:3f:e5:c9:c8:19:43:4b:a1:45:c6: 3c:45:08:02:b3:79:e3:ee:c6:78:47:c2:eb:17:f4:64:d7:07: f3:bd:36:b5:81:6f:04:6a:e3:c7:38:04:75:80:67:4b:fa:0b: 5f:2c:ad:d6:04:27:a3:72:1f:f4:71:61:f2:53:7f:28:4a:a6: 63:a9:4b:6d:fe:25:20:19:ea:24:21:a9:58:33:91:7d:63:6e: 72:7c:8b:32:a2:48:ae:f2:b7:f3:77:3a:ff:be:9f:32:69:ee: 72:7b:83:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3 RjEwNUJEMzMwHhcNMjUwNDI1MDAzMDUzWhcNMjUwNTAyMDAzMDUzWjAYMRYwFAYD VQQDEw02ODBhZDdiZC03MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttE7f/sZrvpNieNfsA6S78kYtyfm5Dm7+uoNAws9m85i6LDp4m/qrLiMCfxR pW3x4Wj5BbCDS5/0GMtUrkvelPacW45sdyA6m8VMa8FRxxxbZW8YGkQGffEK5KfC gCnIVcJ/peEK68nMiYNedliPr4ov8ql7hQRbnbItNMgCUdGlKwJCoeofvku9Vi+x 2gM1xx/rkeASiFpN4fPaXlBT25+DuAvjd7BkfvvYNaYojUKEy40aQBrbeE0ShBbT tnXLM4d6yRz/OXfldI2FHVltff3AAqiO4MSYnrG1PftdDEM2L7mfd+jWCL86ii6m ep7lN2YElh2b+bIxTLdj3mUltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtMZhC8 lU2pdwYcuGh2U1khDdEhMB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYohJm/RHiBs3APNAIw7DPSejfZSNZyv3ZcMAE/g4R1krNvZTM6Dey DOabiIHKIrBnF2D+kyjFVdhzkWnVig7HdmhCQcqqXJu+ghGGi9TnQodsKxKRH6Ul bOjPo5WSYy94u+1Tqm+vvSTqcV/qD444KcNDnA8eSIR6irxegVR8JkyfwRA63SEG O6tEo62PKwlnh+42U40iQj/lycgZQ0uhRcY8RQgCs3nj7sZ4R8LrF/Rk1wfzvTa1 gW8EauPHOAR1gGdL+gtfLK3WBCejch/0cWHyU38oSqZjqUtt/iUgGeokIalYM5F9 Y25yfIsyokiu8rfzdzr/vp8yae5ye4Mw -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:16 2025 by rpki-client