$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: +EHQRhiVNqzfnwtU+vsDPtqWWlHQ3iyqv/ChxIWqjOo= Subject key identifier: F9:02:11:05:10:A6:4B:35:75:E3:ED:91:93:93:EF:C0:F8:4B:82:22 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 052C Signing time: Thu 24 Apr 2025 23:17:44 +0000 Manifest this update: Thu 24 Apr 2025 23:17:44 +0000 Manifest next update: Thu 01 May 2025 23:17:44 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: Y1wAgBz7Ii610bbFpn615l6pMM8jQ0PNMY9nxY1xgwo=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Apr 24 23:17:44 2025 GMT Not After : May 1 23:17:44 2025 GMT Subject: CN=680ac698-297f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:02:5f:00:f2:d9:aa:b6:da:50:35:d8:a5: 2f:ac:71:7c:a8:a6:1c:b8:95:08:41:0c:85:94:cf: ad:77:ed:c7:e0:4a:b2:c0:d2:50:c3:28:ba:b8:52: c0:12:79:bf:15:dc:29:28:e3:43:a5:1c:a3:68:de: 6a:3e:fd:79:1b:89:2c:78:88:0c:18:77:8c:6e:a6: d3:bd:a8:ef:aa:74:01:b8:a4:2e:6b:c3:b3:8d:4f: 11:3a:05:f9:71:5f:f6:66:ab:9c:10:e8:41:4d:1a: 4a:d4:7e:46:3b:ca:2b:7c:33:80:72:63:65:a3:e2: 4b:2d:97:66:60:50:88:85:49:7f:57:6a:76:d2:d7: 4d:48:e8:15:e6:38:ab:80:ab:a9:24:57:74:af:55: 16:92:e8:ae:bd:e4:e0:e1:a4:2e:57:54:cb:ec:a9: 39:40:4a:7b:43:5a:81:01:fb:56:8e:5e:14:ad:e9: b3:f9:fa:45:d4:1b:f3:45:54:ca:3e:d5:49:31:be: df:8d:6d:65:a7:98:74:ac:96:27:16:f6:6c:33:9c: 03:72:da:b1:39:25:6c:47:c4:74:50:34:96:16:1f: ca:9b:87:dc:2a:35:e7:b8:7f:c5:ea:b2:68:c3:a1: 06:b5:c4:a9:cd:eb:70:78:43:a9:59:46:06:e1:22: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:02:11:05:10:A6:4B:35:75:E3:ED:91:93:93:EF:C0:F8:4B:82:22 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:66:d9:23:a3:f3:c2:ea:31:f2:ce:e9:98:d6:dc:13:a6:df: 43:b1:27:c0:ea:7a:8d:2f:18:61:39:c5:82:5f:88:88:a1:01: 34:45:97:0f:fb:73:40:96:d6:86:9b:47:b2:72:b9:67:46:33: 05:47:9e:63:d7:bd:6f:62:81:96:7f:03:e9:8a:4c:d5:6d:e9: 4e:3e:5b:03:40:65:95:88:da:05:82:27:b6:3e:1b:d6:48:82: f0:7b:8e:98:8f:05:a2:d5:fb:e6:6d:0d:30:90:ee:25:8c:cf: 21:6a:90:7f:bc:a9:31:38:4c:f3:d2:6f:ca:68:19:f8:84:91: 35:cc:08:51:f0:7b:9b:32:55:fb:9b:38:41:36:8e:78:ed:b6: a9:48:1d:6b:ca:09:94:ac:f5:02:b3:ef:b5:8c:31:f7:47:6f: bb:e3:16:c3:b3:4b:50:39:79:d5:5c:74:85:56:03:53:87:7c: 12:70:f4:8b:18:81:4c:06:6b:6e:61:8f:b2:b5:22:a4:a9:c2: a6:25:87:ed:bc:ef:f7:3e:fd:ee:fa:db:2c:1f:1c:50:32:8b: 61:f3:0a:83:ea:ef:de:e1:fc:22:64:1e:7c:b4:45:d0:0c:bb: 57:14:64:be:70:8e:33:b1:9a:eb:0a:0f:9a:67:17:d1:34:28: 88:4a:ac:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwNDI0MjMxNzQ0WhcNMjUwNTAxMjMxNzQ0WjAYMRYwFAYD VQQDEw02ODBhYzY5OC0yOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP4CXwDy2aq22lA12KUvrHF8qKYcuJUIQQyFlM+td+3H4EqywNJQwyi6uFLA Enm/FdwpKONDpRyjaN5qPv15G4kseIgMGHeMbqbTvajvqnQBuKQua8OzjU8ROgX5 cV/2ZqucEOhBTRpK1H5GO8orfDOAcmNlo+JLLZdmYFCIhUl/V2p20tdNSOgV5jir gKupJFd0r1UWkuiuveTg4aQuV1TL7Kk5QEp7Q1qBAftWjl4Uremz+fpF1BvzRVTK PtVJMb7fjW1lp5h0rJYnFvZsM5wDctqxOSVsR8R0UDSWFh/Km4fcKjXnuH/F6rJo w6EGtcSpzetweEOpWUYG4SKLLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkCEQUQ pks1dePtkZOT78D4S4IiMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQZtkjo/PC6jHyzumY1twTpt9DsSfA6nqNLxhhOcWCX4iIoQE0RZcP +3NAltaGm0eycrlnRjMFR55j171vYoGWfwPpikzVbelOPlsDQGWViNoFgie2PhvW SILwe46YjwWi1fvmbQ0wkO4ljM8hapB/vKkxOEzz0m/KaBn4hJE1zAhR8HubMlX7 mzhBNo547bapSB1rygmUrPUCs++1jDH3R2+74xbDs0tQOXnVXHSFVgNTh3wScPSL GIFMBmtuYY+ytSKkqcKmJYftvO/3Pv3u+tssHxxQMoth8wqD6u/e4fwiZB58tEXQ DLtXFGS+cI4zsZrrCg+aZxfRNCiISqw+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:35 2025 by rpki-client