$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: K1ICLXDTXIz+Zt9FCOvCgZ2zOW26cIWNyQKw/BPNjJM= Subject key identifier: 5E:C3:CD:CD:E4:F1:A2:46:1D:BF:F0:3D:18:34:65:CA:AE:B0:3C:F7 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 131E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1310 Signing time: Sat 26 Apr 2025 16:59:08 +0000 Manifest this update: Sat 26 Apr 2025 16:59:07 +0000 Manifest next update: Sat 03 May 2025 16:59:07 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: sC1ah4d5Kr3DefrX0fC6ebAgAmFeLtkhRuMOryaPSlw=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: ++7RC+lcxadURbh9ihJKswyqNjTMzF1VYIMw23UQZNY=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: YugUSTWItaHwoU0lMPP/vlXY7+UmWW6qtCLtQUAsjJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4894 (0x131e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: Apr 26 16:59:07 2025 GMT Not After : May 3 16:59:07 2025 GMT Subject: CN=680d10dc-7427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:f5:be:84:55:28:cf:42:09:a4:7a:06:52: 5e:e7:2e:22:6a:24:02:e6:a4:13:58:85:ed:5a:39: c6:f1:d6:8a:ab:5e:6c:0a:9b:8a:4e:92:e2:27:bd: 01:06:67:3a:6d:4c:63:8a:33:5c:c0:cf:08:7a:40: d3:e7:be:8c:14:de:4b:08:e2:e7:e5:f4:13:75:18: 55:68:92:50:e4:79:69:87:f6:b0:1d:80:c4:11:ab: 72:ae:bd:97:17:ae:83:25:ec:84:ba:71:b6:6f:b3: 8d:e7:dd:dd:0c:a8:db:ac:79:c3:05:c8:4f:51:c3: 3d:b2:ba:86:f1:89:0c:67:02:5f:2e:88:84:f4:57: 97:97:fa:87:4f:6b:9b:10:40:52:9c:f7:44:b0:88: 7f:ce:6e:b7:9e:98:b8:30:47:6c:e4:a4:37:5c:2f: 08:55:f9:ac:2a:26:d1:b5:3e:aa:2d:39:73:3d:68: 55:1f:29:cc:b9:6b:71:c1:b3:e3:fb:3f:8f:48:01: ab:5d:96:ea:13:fb:0e:ff:1a:ff:35:c9:6e:f8:78: 3b:a6:9b:0c:6e:fa:6b:eb:fe:9b:eb:0f:b2:75:c4: 58:5a:7c:4b:e8:de:d9:f3:78:b2:de:af:e3:cd:75: 11:20:15:22:44:01:15:79:d0:91:f2:fb:21:a9:3d: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C3:CD:CD:E4:F1:A2:46:1D:BF:F0:3D:18:34:65:CA:AE:B0:3C:F7 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6b:22:c5:e6:15:d9:8d:a2:e8:aa:4c:e7:5d:e7:84:bc:71: e0:53:c0:54:db:2f:c2:0c:43:04:96:62:ac:10:33:43:95:a2: 55:19:5e:2a:42:d7:c5:6f:38:7f:d7:97:6b:ad:85:5b:9a:04: ad:b2:97:13:bb:96:9b:bf:14:c9:0e:8b:21:10:68:da:0f:b3: be:6f:6b:af:32:53:b9:19:27:8e:57:f9:19:01:a7:b0:bf:c0: 82:e3:ec:da:85:12:7d:2e:ce:7f:0f:4c:f1:0e:26:a7:33:f5: be:04:29:19:b0:ed:b3:a2:9f:0d:6f:fc:10:88:78:6c:e1:fb: 4a:e5:91:f4:aa:a5:86:1e:69:c9:cf:99:2a:78:56:a4:a1:64: 63:03:04:bb:16:3d:63:b5:11:1e:17:dc:4b:ba:11:ba:a9:4a: 99:fd:d0:fe:e1:ee:51:ac:f9:f4:b8:c2:2d:12:db:4c:b2:7e: 8e:6a:85:ae:a0:d8:59:9f:46:f6:5a:11:c9:07:88:48:0b:99: a5:69:eb:66:25:5e:e6:76:4d:b2:0c:56:ae:d3:c8:de:b5:bd: 53:52:f8:35:0c:79:11:f8:fc:40:11:f6:33:8c:f8:d0:60:f1: 23:92:3a:26:a8:64:87:83:3b:21:a9:6a:0c:99:1c:e8:9b:92: 1b:1b:b0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNDI2MTY1OTA3WhcNMjUwNTAzMTY1OTA3WjAYMRYwFAYD VQQDEw02ODBkMTBkYy03NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19T1voRVKM9CCaR6BlJe5y4iaiQC5qQTWIXtWjnG8daKq15sCpuKTpLiJ70B Bmc6bUxjijNcwM8IekDT576MFN5LCOLn5fQTdRhVaJJQ5Hlph/awHYDEEatyrr2X F66DJeyEunG2b7ON593dDKjbrHnDBchPUcM9srqG8YkMZwJfLoiE9FeXl/qHT2ub EEBSnPdEsIh/zm63npi4MEds5KQ3XC8IVfmsKibRtT6qLTlzPWhVHynMuWtxwbPj +z+PSAGrXZbqE/sO/xr/Nclu+Hg7ppsMbvpr6/6b6w+ydcRYWnxL6N7Z83iy3q/j zXURIBUiRAEVedCR8vshqT15vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7Dzc3k 8aJGHb/wPRg0ZcqusDz3MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEayLF5hXZjaLoqkznXeeEvHHgU8BU2y/CDEMElmKsEDNDlaJVGV4q QtfFbzh/15drrYVbmgStspcTu5abvxTJDoshEGjaD7O+b2uvMlO5GSeOV/kZAaew v8CC4+zahRJ9Ls5/D0zxDianM/W+BCkZsO2zop8Nb/wQiHhs4ftK5ZH0qqWGHmnJ z5kqeFakoWRjAwS7Fj1jtREeF9xLuhG6qUqZ/dD+4e5RrPn0uMItEttMsn6OaoWu oNhZn0b2WhHJB4hIC5mlaetmJV7mdk2yDFau08jetb1TUvg1DHkR+PxAEfYzjPjQ YPEjkjomqGSHgzshqWoMmRzom5IbG7Af -----END CERTIFICATE-----Generated at Mon Apr 28 06:09:15 2025 by rpki-client