$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: XIvpozmjf7zn9LJLnBLnKDvuO5jvAbVZz2e3VJTTp/0= Subject key identifier: E3:1A:47:D4:87:EF:CD:A9:E5:01:DC:3E:BE:4E:4D:9C:AA:4F:EE:A0 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 080F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 0807 Signing time: Thu 24 Apr 2025 20:43:20 +0000 Manifest this update: Thu 24 Apr 2025 20:43:20 +0000 Manifest next update: Thu 01 May 2025 20:43:20 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: lDD0ALv4Ia9qvmcAgUVyVdWh9PzbCEhnCsdMksNkwNM=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: 526NqZNO2IONfhqjyZNRFm9JBl0LNY6d+qw7jpg0a3U=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: hFavaYgDI5fd8yhRFzFQOHqkohum1YjPxt3lBbRwspQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Apr 24 20:43:20 2025 GMT Not After : May 1 20:43:20 2025 GMT Subject: CN=680aa268-95ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:8b:4d:23:52:29:55:0b:c3:55:f0:68:fb: b9:95:b2:92:ee:97:ab:bb:31:0e:ee:1b:d7:45:06: 1a:8e:a0:4a:2c:c2:6f:7d:42:bd:d9:e5:54:4e:5b: 25:2a:32:95:b1:cf:2d:6c:d6:20:c2:43:c1:a8:d6: a0:ff:8a:d7:06:39:31:11:ac:5c:ea:5a:56:c5:a6: 49:3f:0a:7f:80:d0:75:de:91:8c:fa:d4:63:14:57: e6:a5:29:8c:ef:5d:48:58:24:98:e0:ef:9c:5b:29: d3:af:68:54:a8:8f:af:0f:11:b6:cc:7a:07:d7:83: 27:08:e2:85:a1:be:80:f3:59:61:50:99:e9:9a:73: 58:14:28:c9:28:d8:67:4f:21:24:e6:fd:ed:c1:69: 00:11:e3:81:ea:a4:eb:e8:4c:8d:19:5e:d5:9a:b9: aa:36:79:c4:ac:09:3e:b7:3f:c6:7a:e5:00:53:6d: 25:9e:ca:dd:1c:fc:d1:f6:84:5a:5c:43:82:32:85: 26:45:c1:d6:9b:d0:8f:5b:12:28:20:e6:3a:45:2a: 2a:94:f4:e2:d0:b3:ec:b8:4d:29:4e:07:34:72:38: f3:f3:91:c5:62:2a:29:ef:88:79:d8:81:8f:33:17: f7:9b:72:c2:f1:b3:7b:3c:21:5d:2b:60:40:31:8f: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:47:D4:87:EF:CD:A9:E5:01:DC:3E:BE:4E:4D:9C:AA:4F:EE:A0 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:19:8c:c6:06:b5:f0:f9:54:b4:4d:11:23:80:1f:ef:70:5c: 6a:cb:b1:af:bb:8c:3f:7a:46:28:e6:45:46:df:ba:24:15:58: c8:c9:0c:65:08:bf:f0:11:95:91:dc:2d:5d:1e:10:c4:6a:46: e2:fc:95:b4:40:a0:62:38:0c:d8:04:4a:67:c1:a9:ca:d7:ba: 31:3a:e0:df:e5:dd:aa:56:d6:e5:1b:9a:d2:93:68:ce:ab:16: 41:17:88:d9:0c:64:68:70:69:f6:4f:e5:76:2f:31:7f:6b:0d: 3f:f0:c8:bc:70:89:d0:7a:1e:65:11:38:86:a9:2d:f9:f3:57: da:f8:86:7e:69:7d:23:a3:a9:a9:0f:63:39:42:fc:b3:b3:7e: d8:55:bb:be:92:cc:cb:53:df:eb:2d:fa:9f:88:20:24:c1:76: 1d:1a:4e:dd:7c:10:4d:7e:ec:aa:e5:be:8e:74:a0:ca:fc:de: 6a:55:6c:62:7f:e8:4b:52:de:5b:e1:0f:46:46:cb:f9:cb:1e: 84:f4:fe:81:77:f2:b4:7c:24:3b:1c:b6:33:a2:df:fb:32:10: c8:c0:b1:b2:4e:69:eb:e1:d4:97:8e:f8:89:c1:3d:23:3a:1b: de:f3:38:00:8b:4f:1f:71:61:8d:cc:0e:ce:f5:68:38:15:21: 9b:f3:99:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwNDI0MjA0MzIwWhcNMjUwNTAxMjA0MzIwWjAYMRYwFAYD VQQDEw02ODBhYTI2OC05NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56yLTSNSKVULw1XwaPu5lbKS7peruzEO7hvXRQYajqBKLMJvfUK92eVUTlsl KjKVsc8tbNYgwkPBqNag/4rXBjkxEaxc6lpWxaZJPwp/gNB13pGM+tRjFFfmpSmM 711IWCSY4O+cWynTr2hUqI+vDxG2zHoH14MnCOKFob6A81lhUJnpmnNYFCjJKNhn TyEk5v3twWkAEeOB6qTr6EyNGV7VmrmqNnnErAk+tz/GeuUAU20lnsrdHPzR9oRa XEOCMoUmRcHWm9CPWxIoIOY6RSoqlPTi0LPsuE0pTgc0cjjz85HFYiop74h52IGP Mxf3m3LC8bN7PCFdK2BAMY987QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMaR9SH 782p5QHcPr5OTZyqT+6gMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVGYzGBrXw+VS0TREjgB/vcFxqy7Gvu4w/ekYo5kVG37okFVjIyQxl CL/wEZWR3C1dHhDEakbi/JW0QKBiOAzYBEpnwanK17oxOuDf5d2qVtblG5rSk2jO qxZBF4jZDGRocGn2T+V2LzF/aw0/8Mi8cInQeh5lETiGqS3581fa+IZ+aX0jo6mp D2M5Qvyzs37YVbu+kszLU9/rLfqfiCAkwXYdGk7dfBBNfuyq5b6OdKDK/N5qVWxi f+hLUt5b4Q9GRsv5yx6E9P6Bd/K0fCQ7HLYzot/7MhDIwLGyTmnr4dSXjviJwT0j Ohve8zgAi08fcWGNzA7O9Wg4FSGb85ka -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:57 2025 by rpki-client