$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: Cu536OqL3Jv9L4SkbrpakzwBCyZ8BJQ9Bt5iCRAICCo= Subject key identifier: 24:E8:B2:68:A9:15:CE:F9:E2:9B:42:39:AB:6F:A2:ED:4A:B4:40:6C Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 07D4 Signing time: Mon 12 May 2025 20:50:36 +0000 Manifest this update: Mon 12 May 2025 20:50:36 +0000 Manifest next update: Mon 19 May 2025 20:50:36 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: +C0IISee244gmhGNnpPfa44xP+QoluxMBMpisy9DuBQ=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: May 12 20:50:36 2025 GMT Not After : May 19 20:50:36 2025 GMT Subject: CN=68225f1c-623e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:c9:b8:32:2a:e1:30:e6:e0:40:f4:68:29: a8:ac:e3:20:12:c9:17:d4:06:4b:70:3a:c5:c2:c0: 30:bd:a2:63:12:23:65:ac:c0:db:2e:4b:c1:76:b7: 72:c1:67:1d:16:24:b4:47:05:67:2c:9d:96:71:4d: a2:72:27:f5:a2:11:e2:40:a5:08:72:4c:23:cd:00: b0:f6:78:4f:fe:e1:16:ac:20:11:9a:91:e1:f4:c8: 68:13:36:d9:3b:98:d7:84:1b:00:67:6a:11:b0:fc: 87:f5:59:10:d2:d7:6f:30:b7:20:2e:be:ae:e9:b8: 53:40:32:74:74:f8:b5:4f:99:88:a0:3f:1d:04:18: 0e:be:e4:c1:69:64:ca:cd:57:fb:16:f6:bf:52:8f: df:d2:47:08:64:a7:65:cb:a9:97:9a:ea:4b:eb:f9: f5:20:5a:76:c7:ce:bd:43:b7:f9:aa:fa:94:ef:e5: 0d:76:44:5d:cd:51:fd:21:b7:73:72:6b:0f:e9:34: fb:60:75:a0:4d:93:11:7c:ba:74:87:d1:17:29:2e: 7a:e2:b5:47:88:24:59:30:c2:bd:8e:03:b4:08:c5: 88:98:51:9f:7e:10:b9:72:bf:5f:20:ba:a1:e5:19: ef:5f:19:1d:8f:d7:2e:45:54:a8:7f:b2:c2:fb:7a: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E8:B2:68:A9:15:CE:F9:E2:9B:42:39:AB:6F:A2:ED:4A:B4:40:6C X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f7:76:a1:f7:a8:ff:d8:dd:7a:aa:f9:26:5e:a1:90:92:0b: 5a:5d:31:96:e8:b1:af:b6:d1:f0:8c:be:80:ba:82:c4:cf:7e: 90:8c:a4:54:46:1c:b9:33:74:b8:db:68:c6:41:43:11:34:df: ca:42:d7:f2:5f:93:44:97:7f:3d:7f:9d:e9:1b:b5:16:6b:4e: ff:fa:ef:4f:91:4e:ab:b4:13:6a:e8:0e:7e:d4:c7:9e:2f:0e: 31:b2:16:a1:ef:84:5e:6a:80:49:ce:de:ed:76:20:7a:92:56: 0b:1f:19:20:1e:3f:37:9f:b3:cc:68:f8:0f:14:8a:f6:8b:58: a6:23:b0:54:6b:e8:dd:e6:14:21:0d:4c:06:cb:56:e6:3b:08: 66:aa:1f:b6:21:e6:32:f9:59:a3:52:03:5b:0b:e3:c9:33:01: 76:0e:c1:b6:78:bb:09:5b:c4:f3:a2:39:1b:19:04:8a:c0:7e: 09:97:64:ea:2a:6e:5f:f1:76:03:64:bb:29:83:8c:9f:9d:08: 20:05:e4:3a:9f:07:0e:22:af:61:c1:77:82:26:1a:10:e3:b5: d2:66:1e:77:16:82:7d:35:d0:ff:87:3b:0f:f7:75:d6:cc:cd: 77:73:6e:e9:ef:37:80:bf:56:18:be:8d:7c:f8:33:02:2b:3b: a7:c7:21:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwNTEyMjA1MDM2WhcNMjUwNTE5MjA1MDM2WjAYMRYwFAYD VQQDEw02ODIyNWYxYy02MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyevJuDIq4TDm4ED0aCmorOMgEskX1AZLcDrFwsAwvaJjEiNlrMDbLkvBdrdy wWcdFiS0RwVnLJ2WcU2icif1ohHiQKUIckwjzQCw9nhP/uEWrCARmpHh9MhoEzbZ O5jXhBsAZ2oRsPyH9VkQ0tdvMLcgLr6u6bhTQDJ0dPi1T5mIoD8dBBgOvuTBaWTK zVf7Fva/Uo/f0kcIZKdly6mXmupL6/n1IFp2x869Q7f5qvqU7+UNdkRdzVH9Ibdz cmsP6TT7YHWgTZMRfLp0h9EXKS564rVHiCRZMMK9jgO0CMWImFGffhC5cr9fILqh 5RnvXxkdj9cuRVSof7LC+3ovFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTosmip Fc754ptCOatvou1KtEBsMB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU93ah96j/2N16qvkmXqGQkgtaXTGW6LGvttHwjL6AuoLEz36QjKRU Rhy5M3S422jGQUMRNN/KQtfyX5NEl389f53pG7UWa07/+u9PkU6rtBNq6A5+1Mee Lw4xshah74ReaoBJzt7tdiB6klYLHxkgHj83n7PMaPgPFIr2i1imI7BUa+jd5hQh DUwGy1bmOwhmqh+2IeYy+VmjUgNbC+PJMwF2DsG2eLsJW8TzojkbGQSKwH4Jl2Tq Km5f8XYDZLspg4yfnQggBeQ6nwcOIq9hwXeCJhoQ47XSZh53FoJ9NdD/hzsP93XW zM13c27p7zeAv1YYvo18+DMCKzunxyFv -----END CERTIFICATE-----Generated at Wed May 14 10:22:58 2025 by rpki-client