$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: IjxG9mnf8EhorQN+uelH0Tv6XtLTCRbSgfa5NyoTimg= Subject key identifier: 48:F1:A7:13:92:59:B3:88:18:C4:68:91:84:E8:0E:B9:46:2D:F9:DB Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 01E8 Signing time: Sun 11 May 2025 01:37:28 +0000 Manifest this update: Sun 11 May 2025 01:37:28 +0000 Manifest next update: Sun 18 May 2025 01:37:28 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: qxVuiGjVK2+/ahgm5SMuqJDgutRbRdgHDuEw4HoHyLI=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: May 11 01:37:28 2025 GMT Not After : May 18 01:37:28 2025 GMT Subject: CN=681fff58-a629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:60:eb:42:bc:16:8e:e8:de:92:24:de:52: 2b:c8:3b:0b:59:94:71:7f:10:39:aa:cb:79:be:76: 2e:2d:3a:ff:7a:87:9b:e6:18:6f:b9:a7:28:38:24: 06:17:6e:e0:05:8f:3b:23:2a:51:d9:7d:ac:8e:55: cb:a8:25:09:45:7e:d4:e6:f8:e1:a0:78:58:e2:04: 3c:01:3d:a9:43:50:8f:4d:79:7b:4e:f9:c3:c3:d3: d8:58:58:b5:b2:9e:29:18:3a:dc:4e:9e:52:53:50: 6e:87:78:29:3b:0f:ef:fa:d2:d0:11:95:48:e3:2f: d6:8d:b8:d9:4a:be:60:4f:f3:33:a2:cd:43:b5:5b: 1c:05:cc:c3:ad:00:88:a7:48:f1:1e:f2:01:da:ac: 2c:e2:f3:87:45:98:33:e0:92:49:ae:55:3e:3c:17: ee:3b:29:e1:4a:25:c2:b6:1a:b4:d8:34:5e:0b:00: 0a:88:24:91:5e:17:76:f9:62:a0:23:d0:2c:b0:0b: e7:b5:f5:22:6d:66:28:39:49:e8:e1:9c:72:db:46: 2a:fc:a0:25:3b:dc:b8:da:c2:a5:2a:0e:9d:8a:27: 5a:be:c6:cd:be:af:f6:9c:ff:0d:82:33:11:8a:c5: d4:74:8c:c2:05:cb:fa:f5:97:cf:3a:05:ca:b0:df: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:A7:13:92:59:B3:88:18:C4:68:91:84:E8:0E:B9:46:2D:F9:DB X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1d:3f:95:e5:f3:2b:29:b9:6a:e6:e9:f9:08:f9:02:2c:f3: 03:8b:d0:56:6a:4d:b0:5a:07:3a:08:09:c0:82:6f:37:26:63: 3a:6e:45:90:e8:77:8e:c2:3c:5e:bd:38:a6:2f:44:53:fe:d3: f4:0c:94:4d:5b:08:2f:8a:e7:78:d8:e6:78:7f:6e:a7:aa:e8: 91:4f:0c:69:2c:41:7b:ed:f8:3b:84:15:72:9d:84:ed:ff:25: f7:74:67:a9:e3:86:3e:60:03:ea:29:ee:b8:55:ba:b3:b0:51: 14:42:35:55:37:ae:a1:cb:b5:99:42:7d:f8:4f:b0:f0:2e:62: f2:23:dc:20:9b:73:99:47:4c:ec:40:d1:27:17:46:fb:c4:22: c7:ab:1e:6d:dd:32:c8:db:5d:a8:8c:0d:3b:04:11:26:82:e3: 97:a1:0d:2f:02:a7:38:f4:9b:0a:da:9b:2c:93:13:b8:c3:62: 27:d0:93:dd:bb:3f:b0:ce:3e:49:91:62:40:d6:92:18:61:91: 3c:5e:4c:78:65:2c:99:2f:74:db:45:30:b0:eb:21:2e:67:53: c9:38:7a:16:07:29:d7:10:f7:df:f3:e8:6c:7f:c6:a9:b3:f1: 4d:d5:1a:bb:1a:eb:58:3e:71:b1:f2:6d:be:1b:59:bb:18:c4: 73:c0:64:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUwNTExMDEzNzI4WhcNMjUwNTE4MDEzNzI4WjAYMRYwFAYD VQQDEw02ODFmZmY1OC1hNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aVg60K8Fo7o3pIk3lIryDsLWZRxfxA5qst5vnYuLTr/eoeb5hhvuacoOCQG F27gBY87IypR2X2sjlXLqCUJRX7U5vjhoHhY4gQ8AT2pQ1CPTXl7TvnDw9PYWFi1 sp4pGDrcTp5SU1Buh3gpOw/v+tLQEZVI4y/WjbjZSr5gT/Mzos1DtVscBczDrQCI p0jxHvIB2qws4vOHRZgz4JJJrlU+PBfuOynhSiXCthq02DReCwAKiCSRXhd2+WKg I9AssAvntfUibWYoOUno4Zxy20Yq/KAlO9y42sKlKg6diidavsbNvq/2nP8NgjMR isXUdIzCBcv69ZfPOgXKsN8p3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjxpxOS WbOIGMRokYToDrlGLfnbMB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWHT+V5fMrKblq5un5CPkCLPMDi9BWak2wWgc6CAnAgm83JmM6bkWQ 6HeOwjxevTimL0RT/tP0DJRNWwgviud42OZ4f26nquiRTwxpLEF77fg7hBVynYTt /yX3dGep44Y+YAPqKe64VbqzsFEUQjVVN66hy7WZQn34T7DwLmLyI9wgm3OZR0zs QNEnF0b7xCLHqx5t3TLI212ojA07BBEmguOXoQ0vAqc49JsK2psskxO4w2In0JPd uz+wzj5JkWJA1pIYYZE8Xkx4ZSyZL3TbRTCw6yEuZ1PJOHoWBynXEPff8+hsf8ap s/FN1Rq7GutYPnGx8m2+G1m7GMRzwGSt -----END CERTIFICATE-----Generated at Sun May 11 09:36:08 2025 by rpki-client