$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: 8YnwhphnF+uWXcWKIm/tpBiLCPyhpNw+G68r+tPKjEk= Subject key identifier: 9A:B5:22:00:E8:CB:5F:45:5C:EF:66:7B:EA:BC:F3:30:39:45:11:A9 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 022E Signing time: Fri 25 Apr 2025 01:42:23 +0000 Manifest this update: Fri 25 Apr 2025 01:42:23 +0000 Manifest next update: Fri 02 May 2025 01:42:23 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: pE04FP9HbvIUbh9f4J9yvvpbWk2Ms5F9/8eBJwWuLvE=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Apr 25 01:42:23 2025 GMT Not After : May 2 01:42:23 2025 GMT Subject: CN=680ae87f-ec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:6e:d9:3d:90:81:11:c8:c7:27:1b:d7:5e: 88:8b:6d:d3:f8:aa:b5:41:8e:a8:b6:46:b7:f3:f8: 8c:83:af:ee:5b:2d:6f:9d:d1:de:d1:8e:64:0e:86: 25:61:21:43:07:06:3c:ff:d2:97:60:27:95:73:48: 37:65:c6:19:89:c4:a6:6f:cb:a7:03:dd:aa:cf:ee: 79:1a:e4:a8:1a:0d:d1:f0:5a:28:7c:34:6a:48:0a: a8:3a:40:0d:c8:44:7b:af:3d:2c:b8:30:d0:c3:ce: 2a:05:a2:96:f5:44:1f:47:f4:76:a6:6a:75:9d:6d: f0:81:a6:c0:59:22:ed:6a:ec:87:49:7e:21:0f:92: 81:13:52:3e:8a:e7:69:09:7d:bf:2b:f0:43:80:b5: 37:5c:93:34:34:66:43:90:3c:d4:b3:f9:18:9c:92: d0:06:7f:91:14:72:e8:f3:f2:ce:8c:6c:4b:b4:b5: 03:f3:0d:6f:b3:9c:f5:74:80:dc:a7:5e:22:0e:b2: 13:b0:77:57:15:97:3e:1c:f4:17:53:cb:bd:92:98: 55:d2:37:9e:4f:18:f8:ac:53:89:61:d6:a1:b7:eb: 91:39:65:27:e6:b4:db:42:06:49:fc:5c:0a:3d:56: 14:8b:27:d9:98:7e:53:e7:61:f2:34:8f:6b:5e:6f: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:22:00:E8:CB:5F:45:5C:EF:66:7B:EA:BC:F3:30:39:45:11:A9 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:f5:a8:b3:ff:cc:32:b8:39:39:1e:ac:9e:d6:9a:84:86: e7:94:8d:ef:d5:70:34:c1:ec:99:8d:38:b4:83:ab:50:14:a9: 78:24:c9:19:f6:a2:bd:37:71:fe:86:95:00:a7:72:ad:4e:ce: 94:b8:21:ac:14:29:15:35:c0:33:9a:89:2e:80:de:96:9a:18: 4e:e0:a2:32:fd:3c:8e:fc:95:c9:51:6e:52:6f:78:63:25:86: 41:60:1e:fb:42:a1:fc:27:ee:c8:7d:dd:5f:1f:37:f2:38:f6: d3:4f:d7:70:48:d4:8b:ef:28:18:8f:b8:69:5d:82:e8:aa:89: 5f:2b:73:5f:af:27:42:ee:80:fd:3f:78:1b:33:33:ca:b6:f1: 1a:79:eb:d9:be:d9:17:d5:b0:33:8f:b8:ce:dc:1e:5f:8f:60: 85:c6:3e:09:8e:87:cf:98:56:93:37:eb:f6:d0:e9:06:b8:99: 2d:10:fd:79:8b:81:49:d8:cb:03:66:fb:09:c0:a9:b7:46:db: a4:e8:1e:2e:cc:cd:56:f0:73:76:cd:7f:63:28:7c:a6:41:3b: d6:bb:5c:3d:b7:84:a9:12:f2:d5:fd:14:8c:02:b8:6f:81:b9: 6e:4a:4c:fc:d4:df:b3:bd:68:56:60:8d:d3:a8:71:cc:39:b6: 3a:33:c2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUwNDI1MDE0MjIzWhcNMjUwNTAyMDE0MjIzWjAYMRYwFAYD VQQDEw02ODBhZTg3Zi1lYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwulu2T2QgRHIxycb116Ii23T+Kq1QY6otka38/iMg6/uWy1vndHe0Y5kDoYl YSFDBwY8/9KXYCeVc0g3ZcYZicSmb8unA92qz+55GuSoGg3R8FoofDRqSAqoOkAN yER7rz0suDDQw84qBaKW9UQfR/R2pmp1nW3wgabAWSLtauyHSX4hD5KBE1I+iudp CX2/K/BDgLU3XJM0NGZDkDzUs/kYnJLQBn+RFHLo8/LOjGxLtLUD8w1vs5z1dIDc p14iDrITsHdXFZc+HPQXU8u9kphV0jeeTxj4rFOJYdaht+uROWUn5rTbQgZJ/FwK PVYUiyfZmH5T52HyNI9rXm/bbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq1IgDo y19FXO9me+q88zA5RRGpMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARO/Wos//MMrg5OR6sntaahIbnlI3v1XA0weyZjTi0g6tQFKl4JMkZ 9qK9N3H+hpUAp3KtTs6UuCGsFCkVNcAzmokugN6WmhhO4KIy/TyO/JXJUW5Sb3hj JYZBYB77QqH8J+7Ifd1fHzfyOPbTT9dwSNSL7ygYj7hpXYLoqolfK3NfrydC7oD9 P3gbMzPKtvEaeevZvtkX1bAzj7jO3B5fj2CFxj4JjofPmFaTN+v20OkGuJktEP15 i4FJ2MsDZvsJwKm3Rtuk6B4uzM1W8HN2zX9jKHymQTvWu1w9t4SpEvLV/RSMArhv gbluSkz81N+zvWhWYI3TqHHMObY6M8LA -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:18 2025 by rpki-client