$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json) Hash identifier: xJH7RWx1rFdWuty31cizOwvDLcZyvoaUgl2JsvzES2g= Subject key identifier: 0A:28:3D:73:81:60:7D:BC:D8:64:A1:7F:A2:D5:77:6A:06:3D:85:FD Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft Manifest number: 0CCB Signing time: Thu 24 Apr 2025 18:14:33 +0000 Manifest this update: Thu 24 Apr 2025 18:14:32 +0000 Manifest next update: Thu 01 May 2025 18:14:32 +0000 Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: 4sYFLK2390qbfWaRpoFNoyU6L3m5FL2u/vp5hviChMo=) 2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Apr 24 18:14:32 2025 GMT Not After : May 1 18:14:32 2025 GMT Subject: CN=680a7f89-8683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:cd:ea:9b:55:36:ad:3e:c0:75:65:be:8e: e5:b0:90:ab:23:6c:e8:aa:c0:73:cc:97:1d:41:29: e6:94:39:3d:4d:28:11:2d:1a:05:ee:e7:c3:99:86: b5:21:a1:cf:f5:68:ee:c0:7f:e3:05:6d:80:6f:e0: ac:9a:11:2e:48:67:f2:75:87:b5:e2:c5:1e:51:1c: 4a:7c:98:93:6e:ce:a9:a1:40:90:4c:f0:fd:83:c3: 0d:6c:05:b6:d4:4c:03:fc:76:92:80:33:73:dd:96: 36:60:6a:36:42:2d:35:a1:95:6e:a2:db:bc:33:fd: 1c:cf:0d:0e:f5:72:a9:d6:ed:3f:cb:12:ac:1a:cd: dd:ca:6b:64:fe:0e:04:7c:79:63:5b:1c:5f:fe:b8: bc:99:f6:26:4e:61:bb:88:7f:31:a5:f5:e0:c5:c2: 85:4c:42:23:58:ae:c6:17:f1:d3:71:27:25:4a:d6: 71:3b:ab:1f:d5:93:2c:eb:2c:6a:1d:d2:ff:e7:3d: c1:06:37:eb:6d:16:05:ca:a9:fc:2e:82:52:0e:9b: 3e:41:87:57:e1:54:75:51:93:13:af:2e:5e:8f:52: 03:dd:f9:7e:ae:eb:b4:74:d6:5c:87:1b:ae:7d:d0: 70:b3:e8:f3:26:61:8e:08:9b:f9:f1:9f:db:83:6d: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:28:3D:73:81:60:7D:BC:D8:64:A1:7F:A2:D5:77:6A:06:3D:85:FD X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:9b:0f:a5:da:33:ef:a9:56:ec:a9:e4:05:d9:3b:40:59: 19:96:6c:de:99:78:da:a3:a9:4b:a4:fb:02:1a:b2:7e:ae:7a: 7c:99:a4:b7:4f:a1:12:51:af:d9:10:23:9f:f3:56:c7:38:72: 26:65:8c:8d:2a:36:47:64:1e:45:7b:23:d0:c3:ad:1e:86:74: d3:7f:42:0e:55:2a:0b:e8:91:7b:39:4c:a4:25:07:cd:a1:65: ec:52:30:11:3f:f2:2a:b2:be:80:ca:ec:d6:e1:97:f6:c9:6a: 78:0b:ae:8c:f2:9d:ff:97:41:3a:76:fe:23:68:ff:34:67:30: 79:62:96:72:f1:f8:fc:08:1a:27:2a:77:c1:f8:b7:60:e0:a4: c6:d6:fe:58:8f:ba:9c:c9:78:d9:81:3a:9f:35:d0:1f:b9:7d: d0:65:ec:93:16:f1:0c:d7:63:bf:71:d9:65:ac:b3:9c:9f:5a: 04:03:55:79:76:fd:84:71:cc:12:12:7f:0e:d0:ff:7e:23:7e: cd:83:53:0b:33:af:2f:43:4d:0d:be:95:b0:fe:38:67:89:96: 9e:17:5f:f4:ad:47:f3:5d:a7:6b:25:cf:14:13:15:98:1e:69: 39:5a:03:18:41:3b:b8:65:42:83:e2:63:d6:07:ed:15:5b:fa: 91:67:d7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUwNDI0MTgxNDMyWhcNMjUwNTAxMTgxNDMyWjAYMRYwFAYD VQQDEw02ODBhN2Y4OS04NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycDN6ptVNq0+wHVlvo7lsJCrI2zoqsBzzJcdQSnmlDk9TSgRLRoF7ufDmYa1 IaHP9WjuwH/jBW2Ab+CsmhEuSGfydYe14sUeURxKfJiTbs6poUCQTPD9g8MNbAW2 1EwD/HaSgDNz3ZY2YGo2Qi01oZVuotu8M/0czw0O9XKp1u0/yxKsGs3dymtk/g4E fHljWxxf/ri8mfYmTmG7iH8xpfXgxcKFTEIjWK7GF/HTcSclStZxO6sf1ZMs6yxq HdL/5z3BBjfrbRYFyqn8LoJSDps+QYdX4VR1UZMTry5ej1ID3fl+ruu0dNZchxuu fdBws+jzJmGOCJv58Z/bg22E6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAooPXOB YH282GShf6LVd2oGPYX9MB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUD5sPpdoz76lW7KnkBdk7QFkZlmzemXjao6lLpPsCGrJ+rnp8maS3 T6ESUa/ZECOf81bHOHImZYyNKjZHZB5FeyPQw60ehnTTf0IOVSoL6JF7OUykJQfN oWXsUjARP/Iqsr6AyuzW4Zf2yWp4C66M8p3/l0E6dv4jaP80ZzB5YpZy8fj8CBon KnfB+Ldg4KTG1v5Yj7qcyXjZgTqfNdAfuX3QZeyTFvEM12O/cdllrLOcn1oEA1V5 dv2EccwSEn8O0P9+I37Ng1MLM68vQ00NvpWw/jhniZaeF1/0rUfzXadrJc8UExWY Hmk5WgMYQTu4ZUKD4mPWB+0VW/qRZ9fQ -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:28 2025 by rpki-client