$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json) Hash identifier: 826nwakk+GyZhaM4MqMQcNVGve3hcZkysY/VKM/oNw4= Subject key identifier: C3:69:93:67:50:45:C1:E4:1C:2A:3A:BF:09:F9:95:46:17:EE:DE:5E Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft Manifest number: 25 Signing time: Thu 15 May 2025 07:07:00 +0000 Manifest this update: Thu 15 May 2025 07:06:59 +0000 Manifest next update: Thu 22 May 2025 07:06:59 +0000 Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: XKGWJ0tCsVKKOyYD2czYU5eDa7YjLkPSl0cb38Mz51Y=) 2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: iG1+i+/h5uPBH8czu/MsD7AGiWboXVjY7acUxjpESco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8, serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Validity Not Before: May 15 07:06:59 2025 GMT Not After : May 22 07:06:59 2025 GMT Subject: CN=68259293-2f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:38:ee:2b:f4:ef:bf:80:1b:bc:4a:2b:76: db:c5:7d:1a:76:06:19:9d:26:4d:7a:6b:7e:05:da: 2c:99:f7:86:51:13:d1:c8:1a:f5:fb:cd:fe:97:b2: 1f:40:e2:c7:83:5b:8e:5f:26:74:8c:59:28:82:67: ee:93:ae:3e:4c:3e:90:df:4a:09:fe:fe:ed:04:2a: 19:bf:be:24:a7:4e:0e:9f:5d:69:ec:d4:f5:ab:d1: 31:83:7d:88:37:17:25:e1:d9:a7:a4:a8:fb:74:f3: fb:c8:c7:78:05:b7:af:fa:4d:8f:56:b6:b9:0b:e3: f0:8d:46:e1:fd:25:8a:1e:56:92:27:bd:ad:d8:c6: 5b:11:c1:d1:84:9f:90:1e:c5:6d:69:ef:b4:c3:17: bb:6d:8c:b4:66:ca:d2:ee:42:54:e9:99:8c:87:e3: 4b:9d:e6:23:77:e4:4f:f7:e5:c5:12:f4:61:35:d6: 7e:fd:34:34:10:41:d3:da:71:eb:a2:2e:00:2a:8c: b5:94:13:14:5c:89:e3:0d:62:1a:3a:53:24:90:fa: 44:d5:da:ff:2c:e7:ab:88:1e:1a:b9:0a:75:ad:9c: b5:4d:d4:89:b9:c8:db:55:e5:a1:de:df:2f:ca:d4: 5b:04:68:0e:5d:55:f7:5f:78:a3:1e:05:6d:26:99: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:93:67:50:45:C1:E4:1C:2A:3A:BF:09:F9:95:46:17:EE:DE:5E X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e9:98:c8:41:e7:15:87:12:9e:ad:e6:02:c5:1d:3e:90:bc: e7:72:8a:56:31:14:b4:0c:fc:c4:c5:5c:a8:da:40:07:b2:9c: d4:b3:9d:b8:6a:c7:f3:23:86:d5:95:35:94:a2:fc:cb:2e:b5: 45:86:27:fe:f1:d8:d7:13:d1:90:45:9c:c4:1c:f9:80:88:d9: 63:b9:88:a2:1e:e3:12:2b:b4:8b:f0:29:44:ee:1e:88:c4:2c: 62:67:e4:bb:f2:4d:15:0c:30:16:b1:f3:89:1a:d6:3d:a5:01: e0:f5:b0:f5:34:41:41:99:6e:48:50:84:38:1f:6d:10:4f:f4: 24:dc:12:7f:9a:5e:96:e8:6d:15:9a:45:e1:2d:4f:1c:55:78: 66:c0:b3:86:12:a2:5e:0d:c1:aa:30:54:99:1b:05:66:51:73: 8b:71:9c:41:28:29:98:1c:44:c3:78:01:72:c1:7e:d3:b3:e9: 20:62:a8:5e:dc:62:62:24:24:d6:b5:01:0b:a5:26:e1:fe:7c: 09:7d:cc:a5:35:d1:27:c2:fa:42:c0:23:d8:fe:e2:38:99:a4: a9:f7:96:0e:57:fe:9d:e6:0c:c8:62:44:93:84:1f:b6:de:9d: 77:e0:d0:47:85:ee:24:bf:7b:c9:e7:b4:59:ab:cb:43:b6:ca: 3f:b6:66:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTA1MTUwNzA2NTlaFw0yNTA1MjIwNzA2NTlaMBgxFjAUBgNV BAMTDTY4MjU5MjkzLTJmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZDjuK/Tvv4AbvEordtvFfRp2BhmdJk16a34F2iyZ94ZRE9HIGvX7zf6Xsh9A 4seDW45fJnSMWSiCZ+6Trj5MPpDfSgn+/u0EKhm/viSnTg6fXWns1PWr0TGDfYg3 FyXh2aekqPt08/vIx3gFt6/6TY9WtrkL4/CNRuH9JYoeVpInva3YxlsRwdGEn5Ae xW1p77TDF7ttjLRmytLuQlTpmYyH40ud5iN35E/35cUS9GE11n79NDQQQdPaceui LgAqjLWUExRcieMNYho6UySQ+kTV2v8s56uIHhq5CnWtnLVN1Im5yNtV5aHe3y/K 1FsEaA5dVfdfeKMeBW0mmZLJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw2mTZ1BF weQcKjq/CfmVRhfu3l4wHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0I4LzRDNzY5RkYwRkI1QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpG cDFfVDlGMkZWbDFaSnVOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHpmMhB5xWHEp6t5gLFHT6QvOdyilYxFLQM/MTFXKjaQAeynNSznbhq x/MjhtWVNZSi/MsutUWGJ/7x2NcT0ZBFnMQc+YCI2WO5iKIe4xIrtIvwKUTuHojE LGJn5LvyTRUMMBax84ka1j2lAeD1sPU0QUGZbkhQhDgfbRBP9CTcEn+aXpbobRWa ReEtTxxVeGbAs4YSol4NwaowVJkbBWZRc4txnEEoKZgcRMN4AXLBftOz6SBiqF7c YmIkJNa1AQulJuH+fAl9zKU10SfC+kLAI9j+4jiZpKn3lg5X/p3mDMhiRJOEH7be nXfg0EeF7iS/e8nntFmry0O2yj+2Zv4= -----END CERTIFICATE-----Generated at Thu May 15 15:57:14 2025 by rpki-client