$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: d0vDw9svrCbWroj/s4EfUdVmIVdR3BeOwU16k928P6U= Subject key identifier: AA:0A:0A:E8:E7:3B:33:30:AA:B2:08:4C:77:36:79:18:80:D2:AC:42 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 37 Signing time: Thu 15 May 2025 06:52:46 +0000 Manifest this update: Thu 15 May 2025 06:52:46 +0000 Manifest next update: Thu 22 May 2025 06:52:46 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: ZJC8t3Ro2eM1RE9Qp0OcSCU3CYz4ySwIqowS1ilneSw=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: May 15 06:52:46 2025 GMT Not After : May 22 06:52:46 2025 GMT Subject: CN=68258f3e-6510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:31:6e:c0:1b:6e:86:ed:14:de:70:0e:7a: 51:b7:69:4a:f2:54:23:d9:a6:0b:b7:08:87:32:e9: 41:0d:26:3e:28:91:d2:b2:a5:64:90:8d:ae:62:8a: 0b:67:ae:dd:4f:46:27:07:b3:2a:7c:72:c3:d9:0e: 10:c5:33:ad:0d:72:db:4d:d8:97:2d:e5:54:8e:57: a8:20:79:e3:ad:47:ac:cc:dc:8e:c1:e5:70:37:f8: bd:7b:93:fb:e5:fb:18:51:91:f5:32:99:ec:ae:d5: eb:63:50:0e:0d:f7:67:1c:10:10:52:26:f7:cf:cb: 7d:e7:d9:db:4c:df:ad:a9:6f:4f:ff:d2:78:64:cc: e6:03:c7:8e:55:f8:9e:19:d7:8f:bc:89:74:71:c2: dd:6d:2f:8d:61:63:13:2b:54:13:ed:d4:37:95:f1: 02:32:fb:ff:dc:7b:3f:4d:b8:9c:00:03:1a:8b:2e: 41:47:fa:77:6e:f3:a8:fa:86:89:2e:77:7b:be:44: 33:fd:52:48:6a:5f:69:3d:de:d6:1f:bc:5d:ce:c7: 6e:1c:f5:fd:91:45:53:ef:1e:f6:5e:a7:17:75:b7: d8:da:d5:33:73:fd:e2:ab:7a:d2:0b:c6:f0:3b:b1: 22:57:a1:ff:96:92:9f:27:30:5b:bb:e3:48:ef:fc: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:0A:E8:E7:3B:33:30:AA:B2:08:4C:77:36:79:18:80:D2:AC:42 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:49:0f:b4:ca:4e:d0:80:52:b8:85:1f:86:18:7f:4e:2a:ff: e3:93:44:05:a3:8c:6f:84:68:9b:6b:dc:bf:41:6f:e1:7b:b2: c7:8e:fd:c6:14:41:fc:e4:7f:41:28:2f:73:d6:e2:47:ee:4e: 16:91:60:62:44:21:2c:0f:50:58:dd:25:c9:59:da:a4:07:f0: 2e:90:b0:e6:63:b6:47:19:e2:60:41:69:e2:63:fc:26:39:70: af:36:ac:5f:15:21:7f:d3:ef:cb:16:28:31:92:fa:ea:58:3e: 79:04:8d:b8:1b:ae:f8:76:16:7e:03:6d:d1:ae:9b:01:aa:64: 84:bf:43:c9:c1:52:93:c7:77:b1:a5:42:c7:0d:70:19:e6:6f: 3d:c9:78:69:72:27:32:98:a1:8b:eb:6d:5e:54:16:cb:48:75: 25:5a:cf:a2:85:3c:78:4f:26:df:c8:ac:f6:b6:35:3c:ce:63: 3e:58:6c:3f:9d:09:16:82:92:bd:a3:be:5f:5f:bc:6a:51:dc: d9:15:b0:9b:c6:99:0c:a6:73:d2:0b:72:c9:f4:72:09:24:95: 14:02:13:f1:1c:61:ee:0e:bb:b0:68:6f:bc:2a:ab:3b:bd:d3: e9:66:33:48:91:e1:c9:f0:d6:77:5c:f5:92:77:5a:2b:e5:6d: ca:43:f6:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA1MTUwNjUyNDZaFw0yNTA1MjIwNjUyNDZaMBgxFjAUBgNV BAMTDTY4MjU4ZjNlLTY1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjPTFuwBtuhu0U3nAOelG3aUryVCPZpgu3CIcy6UENJj4okdKypWSQja5iigtn rt1PRicHsyp8csPZDhDFM60NcttN2Jct5VSOV6ggeeOtR6zM3I7B5XA3+L17k/vl +xhRkfUymeyu1etjUA4N92ccEBBSJvfPy33n2dtM362pb0//0nhkzOYDx45V+J4Z 14+8iXRxwt1tL41hYxMrVBPt1DeV8QIy+//cez9NuJwAAxqLLkFH+ndu86j6hoku d3u+RDP9UkhqX2k93tYfvF3Ox24c9f2RRVPvHvZepxd1t9ja1TNz/eKretILxvA7 sSJXof+Wkp8nMFu740jv/ANVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqgoK6Oc7 MzCqsghMdzZ5GIDSrEIwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRJD7TKTtCAUriFH4YYf04q/+OTRAWjjG+EaJtr3L9Bb+F7sseO/cYU Qfzkf0EoL3PW4kfuThaRYGJEISwPUFjdJclZ2qQH8C6QsOZjtkcZ4mBBaeJj/CY5 cK82rF8VIX/T78sWKDGS+upYPnkEjbgbrvh2Fn4DbdGumwGqZIS/Q8nBUpPHd7Gl QscNcBnmbz3JeGlyJzKYoYvrbV5UFstIdSVaz6KFPHhPJt/IrPa2NTzOYz5YbD+d CRaCkr2jvl9fvGpR3NkVsJvGmQymc9ILcsn0cgkklRQCE/EcYe4Ou7Bob7wqqzu9 0+lmM0iR4cnw1ndc9ZJ3WivlbcpD9j0= -----END CERTIFICATE-----Generated at Fri May 16 14:33:52 2025 by rpki-client