$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: WaGTZZxTxhYMVJJhmTJC9LEY+5ZPXwd7kWKdzlI4SnI= Subject key identifier: 25:5C:77:CD:09:47:A0:C1:31:41:E4:0E:49:03:73:16:FD:87:CC:5B Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 347E Signing time: Sat 10 May 2025 14:42:41 +0000 Manifest this update: Sat 10 May 2025 14:42:40 +0000 Manifest next update: Sat 17 May 2025 14:42:40 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: GABsn/XKMVk+L97HNf6pjTLMOsBSBiOqkvhHNr5WLBo=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: May 10 14:42:40 2025 GMT Not After : May 17 14:42:40 2025 GMT Subject: CN=681f65e0-69dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:3d:83:f8:5d:51:42:e4:04:46:b4:dc:01: 4f:b9:76:7c:88:76:b3:ec:87:05:18:e5:f2:5c:0b: 00:22:0c:4b:00:ed:73:03:e4:14:ad:1b:ed:cf:0b: 9e:dc:a8:46:23:9c:2c:72:7f:93:58:af:e5:7d:c5: e0:45:c8:a8:d9:0f:7b:7e:34:18:bf:2d:11:9e:76: ac:51:87:ba:48:b8:55:a1:76:bd:69:99:a2:3f:d7: ad:da:da:0a:7b:00:7a:eb:bb:61:32:8d:87:63:76: 7a:84:d4:b3:bb:8e:27:87:7c:ab:85:2d:14:86:91: d3:11:2a:99:0b:55:c9:3e:b8:7e:1f:fe:63:04:e8: 67:46:0f:a2:56:ed:05:70:ba:a3:19:6e:5a:d9:70: dc:49:ed:8b:5b:4e:bf:04:3b:37:ec:98:fc:2e:6a: e9:32:e8:49:67:91:f9:4f:e8:1d:d4:10:44:7e:51: 5b:22:47:bc:e7:44:11:c3:74:c1:c0:b1:a8:47:c9: fa:c8:68:cf:8c:b9:76:6d:ab:ea:37:32:81:53:62: b3:19:2d:29:08:9d:b2:71:25:39:9a:ff:1f:97:9d: ee:8e:e4:b9:f7:a8:59:7f:fa:7f:bd:0e:e0:71:0c: 0f:fd:f7:da:c9:ba:b6:ea:f8:02:7b:a1:8d:d9:ac: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5C:77:CD:09:47:A0:C1:31:41:E4:0E:49:03:73:16:FD:87:CC:5B X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:25:a7:db:7a:f6:7d:2e:60:b7:b1:e4:d2:d4:51:ed:66:c3: 06:a3:70:fb:83:4d:a8:d3:c5:48:0f:31:17:ef:da:60:81:02: a8:0a:e9:6b:b7:4f:77:8e:58:69:c1:ba:81:31:59:b8:a2:2c: 07:fe:00:64:ca:05:51:f6:42:69:72:65:46:96:bf:ed:ba:02: 9e:48:55:b8:2b:7c:f8:59:57:aa:68:20:19:08:1a:84:12:a7: b9:77:58:43:ea:9f:04:76:1a:38:45:c9:eb:68:b0:48:6c:1e: 5d:ae:aa:2b:11:d4:75:14:9a:36:b2:b2:85:59:8e:52:f8:78: 94:f1:2c:02:62:9a:f3:18:60:12:57:28:21:48:86:fe:af:fd: 1f:19:f5:42:65:df:1d:36:46:83:6a:56:b3:9e:03:38:75:05: 0e:3b:66:e5:8c:e7:25:0f:46:6b:da:28:f3:d5:72:27:2b:af: 3b:28:31:2b:b5:9a:e2:c4:c5:b5:c9:1e:f0:d4:84:c3:a7:60: a5:ba:e8:75:83:b8:66:f7:d1:f1:1d:24:b2:03:6b:8c:7d:1e: a1:54:15:4e:ea:c8:c5:6a:90:6a:0e:5d:06:cc:0d:38:bb:8f: e7:bc:d0:5b:09:da:c1:ed:be:3f:6f:3f:65:38:ca:27:9c:1a: a5:db:bb:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNTEwMTQ0MjQwWhcNMjUwNTE3MTQ0MjQwWjAYMRYwFAYD VQQDEw02ODFmNjVlMC02OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOY9g/hdUULkBEa03AFPuXZ8iHaz7IcFGOXyXAsAIgxLAO1zA+QUrRvtzwue 3KhGI5wscn+TWK/lfcXgRcio2Q97fjQYvy0RnnasUYe6SLhVoXa9aZmiP9et2toK ewB667thMo2HY3Z6hNSzu44nh3yrhS0UhpHTESqZC1XJPrh+H/5jBOhnRg+iVu0F cLqjGW5a2XDcSe2LW06/BDs37Jj8LmrpMuhJZ5H5T+gd1BBEflFbIke850QRw3TB wLGoR8n6yGjPjLl2bavqNzKBU2KzGS0pCJ2ycSU5mv8fl53ujuS596hZf/p/vQ7g cQwP/ffaybq26vgCe6GN2axrGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVcd80J R6DBMUHkDkkDcxb9h8xbMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJafbevZ9LmC3seTS1FHtZsMGo3D7g02o08VIDzEX79pggQKoCulr t093jlhpwbqBMVm4oiwH/gBkygVR9kJpcmVGlr/tugKeSFW4K3z4WVeqaCAZCBqE Eqe5d1hD6p8Edho4RcnraLBIbB5drqorEdR1FJo2srKFWY5S+HiU8SwCYprzGGAS VyghSIb+r/0fGfVCZd8dNkaDalazngM4dQUOO2bljOclD0Zr2ijz1XInK687KDEr tZrixMW1yR7w1ITDp2Cluuh1g7hm99HxHSSyA2uMfR6hVBVO6sjFapBqDl0GzA04 u4/nvNBbCdrB7b4/bz9lOMonnBql27sU -----END CERTIFICATE-----Generated at Sun May 11 13:39:23 2025 by rpki-client