$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft File: V4F9K-wf7__kEtnzNN9AQoZTvK4.mft (raw, json) Hash identifier: C+b8AujgJDHcS7BhSqtDCjq7pBbXVdEa3Nj+hz6Fs+g= Subject key identifier: B5:4B:9A:07:C4:7B:97:2C:7D:6F:DF:EA:C3:90:95:7E:29:50:48:57 Authority key identifier: 57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE Certificate issuer: /CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft Manifest number: 0508 Signing time: Thu 24 Apr 2025 23:25:43 +0000 Manifest this update: Thu 24 Apr 2025 23:25:43 +0000 Manifest next update: Thu 01 May 2025 23:25:43 +0000 Files and hashes: 1: V4F9K-wf7__kEtnzNN9AQoZTvK4.crl (hash: YKYVVz1yzCUNqmc5FbRDgWjxvBiizb4jIA5uhrGF45Y=) 2: 46779D40040411EC867E3B86C4F9AE02.roa (hash: 15vQ2pIfS9i9mjbAz/xpatr9VQT9HF7kjMctrdXsgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8D21, serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Validity Not Before: Apr 24 23:25:43 2025 GMT Not After : May 1 23:25:43 2025 GMT Subject: CN=680ac877-97c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:74:04:28:97:85:89:04:f3:ef:4c:a9:fc: d1:fa:14:16:f0:28:0b:e9:47:ec:0e:8d:3c:b8:f9: 06:3e:d8:34:31:81:c1:76:b9:b6:18:fa:3a:8b:ce: 26:e9:93:6a:20:d4:3a:79:20:cb:37:51:7a:e8:05: 6f:27:3a:68:b7:60:d7:63:46:e7:91:20:d1:da:e1: 3f:ff:58:fa:a8:ec:7f:39:96:ed:c4:4d:29:02:7c: 40:bf:ff:aa:6b:eb:b7:4f:78:5d:ed:fe:28:8f:0b: 34:51:b0:9e:0b:4f:06:f3:7a:a0:87:84:b6:d4:a2: 01:57:49:42:8e:b0:87:d7:2b:d1:60:6f:bb:30:00: c5:6b:9c:39:17:89:6c:3b:bb:6a:3a:50:85:f4:1c: 61:1e:56:d5:91:fe:5b:ba:d0:f0:f7:38:3c:f5:14: c1:df:3c:48:5b:92:f5:f8:c3:96:46:bb:6c:2b:b8: be:bd:6b:91:c9:59:92:53:df:ae:20:3a:7f:d0:e3: 21:30:ac:0f:4b:67:19:6c:af:ba:94:eb:ec:e8:20: e2:d2:3d:a1:65:3b:ff:fd:5c:03:2b:a5:62:ca:9d: 4d:86:eb:2d:a5:38:de:43:8d:db:48:70:af:a5:28: f2:7b:4a:ba:97:f0:2d:0e:f4:78:97:b0:b8:73:d4: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:9A:07:C4:7B:97:2C:7D:6F:DF:EA:C3:90:95:7E:29:50:48:57 X509v3 Authority Key Identifier: keyid:57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:30:f7:e6:0f:c6:90:bd:d7:12:55:0e:09:56:84:fb:05: 19:97:86:c7:e9:bf:be:64:67:8c:a4:64:b7:01:c7:9b:62:d0: 44:66:ee:9c:e5:f1:06:7b:2e:db:3d:e1:de:1e:89:e6:9c:f7: 36:72:b8:61:34:8f:b4:07:56:63:5a:6e:1e:f0:ad:c4:0a:ff: 7c:61:f4:1a:ac:d3:42:d9:36:da:6a:f7:2c:99:0b:2a:31:5e: ab:6f:21:38:b1:83:a9:27:90:82:77:f6:bd:a3:f1:ec:f6:60: be:9e:b2:f1:d1:b1:80:59:a0:b5:c4:6b:17:1a:88:7f:26:f0: 30:6c:e7:6e:39:38:09:71:29:4c:a6:d1:5a:ad:73:89:47:23: 95:d7:22:40:00:83:5d:e9:d4:88:aa:49:c4:c2:db:cb:7f:c0: 02:0e:08:20:34:32:fe:86:96:5a:8d:5e:d3:81:6e:8d:d3:8b: b2:22:4f:34:d1:b0:1c:56:d1:00:b2:74:11:8c:44:04:99:8d: 1e:7d:a6:d7:08:6c:0a:c7:4d:cc:25:f2:3f:75:00:bb:0c:87: a9:3b:ec:2d:5e:39:2c:de:a2:33:9f:42:1d:c4:95:5b:ab:90: cc:dc:6f:21:19:38:e5:2f:82:a4:6b:54:b5:23:82:9a:7d:16: b1:d8:1c:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEMjExMTAvBgNVBAUTKDU3ODE3RDJCRUMxRkVGRkZFNDEyRDlGMzM0REY0MDQy ODY1M0JDQUUwHhcNMjUwNDI0MjMyNTQzWhcNMjUwNTAxMjMyNTQzWjAYMRYwFAYD VQQDEw02ODBhYzg3Ny05N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBB0BCiXhYkE8+9MqfzR+hQW8CgL6UfsDo08uPkGPtg0MYHBdrm2GPo6i84m 6ZNqINQ6eSDLN1F66AVvJzpot2DXY0bnkSDR2uE//1j6qOx/OZbtxE0pAnxAv/+q a+u3T3hd7f4ojws0UbCeC08G83qgh4S21KIBV0lCjrCH1yvRYG+7MADFa5w5F4ls O7tqOlCF9BxhHlbVkf5butDw9zg89RTB3zxIW5L1+MOWRrtsK7i+vWuRyVmSU9+u IDp/0OMhMKwPS2cZbK+6lOvs6CDi0j2hZTv//VwDK6Viyp1NhustpTjeQ43bSHCv pSjye0q6l/AtDvR4l7C4c9QA1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVLmgfE e5csfW/f6sOQlX4pUEhXMB8GA1UdIwQYMBaAFFeBfSvsH+//5BLZ8zTfQEKGU7yu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEQyMS80NTBFQzVCRTAz RkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13ZjdfX2tFdG56Tk45QVFvWlR2 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0RjlLLXdmN19fa0V0bnpOTjlBUW9aVHZLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEQyMS80NTBFQzVCRTAzRkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13Zjdf X2tFdG56Tk45QVFvWlR2SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUtTD35g/GkL3XElUOCVaE+wUZl4bH6b++ZGeMpGS3AcebYtBEZu6c 5fEGey7bPeHeHonmnPc2crhhNI+0B1ZjWm4e8K3ECv98YfQarNNC2TbaavcsmQsq MV6rbyE4sYOpJ5CCd/a9o/Hs9mC+nrLx0bGAWaC1xGsXGoh/JvAwbOduOTgJcSlM ptFarXOJRyOV1yJAAINd6dSIqknEwtvLf8ACDgggNDL+hpZajV7TgW6N04uyIk80 0bAcVtEAsnQRjEQEmY0efabXCGwKx03MJfI/dQC7DIepO+wtXjks3qIzn0IdxJVb q5DM3G8hGTjlL4Kka1S1I4KafRax2BxD -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:46 2025 by rpki-client