$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: L26pT6VzgxwDWcvTcxFmBJMMGdRTC2nFclb2iYstib4= Subject key identifier: 12:24:B4:4E:07:DE:5C:A0:C0:BD:9A:6E:2E:AA:3E:3F:A9:F1:20:77 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0C56 Signing time: Mon 12 May 2025 18:10:34 +0000 Manifest this update: Mon 12 May 2025 18:10:33 +0000 Manifest next update: Mon 19 May 2025 18:10:33 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: rgOaHQNscHbfJWuUmYW306kyFBtBH20I0C7EsDVIIjc=) 2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: wgxBqTOXaVBqDTXi3QmSfIMhu4UE3inSSK8gOm0zVzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: May 12 18:10:33 2025 GMT Not After : May 19 18:10:33 2025 GMT Subject: CN=6822399a-e5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:c6:fd:e6:61:14:37:34:ee:4b:04:00:0a: af:34:bd:db:92:b2:24:d1:7b:aa:62:ed:69:96:f9: 84:22:13:16:9b:57:28:bb:18:f6:42:8c:b2:e8:9f: e2:a0:67:71:44:fc:db:3f:02:7a:16:e2:85:41:b9: af:ba:40:ad:b8:3d:b4:46:7c:2f:f5:85:98:06:3d: 5d:16:df:89:cf:9d:bf:5e:5a:f2:96:ab:e0:55:f8: 86:24:d9:5b:08:1d:af:fd:67:07:fe:e6:5b:50:4c: 44:fe:20:50:12:57:04:f6:0e:13:c7:fb:e8:47:b0: e2:eb:b0:83:79:8c:75:01:d3:f9:51:86:3b:0c:3e: 14:93:29:4b:a6:1f:0a:e0:f5:9a:58:f4:39:ad:06: 3b:b3:83:52:c9:c9:33:ba:9c:c9:b4:f9:61:9a:b5: 4e:3f:4e:4e:30:fb:09:97:28:86:65:26:13:ef:af: ca:12:d8:0d:8c:6d:90:f7:31:8a:a9:9f:39:fc:f4: 53:b1:61:2d:7b:1a:02:e8:2e:01:09:85:0c:0d:c2: 48:34:f6:95:76:1e:72:df:05:45:bb:2a:4b:04:f2: 30:3d:61:04:ac:fe:0b:14:4f:8b:c6:de:e7:81:5c: 83:a2:b4:83:b4:6c:02:2f:8a:e7:3e:05:92:30:40: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:B4:4E:07:DE:5C:A0:C0:BD:9A:6E:2E:AA:3E:3F:A9:F1:20:77 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e0:9b:3c:a9:71:70:27:63:27:05:61:b7:de:7f:ac:fe:98: 57:d0:5e:20:ee:36:d4:75:63:4e:b3:ac:a9:15:d9:97:0c:2c: 59:9f:39:cd:95:20:17:40:50:3a:05:3c:ce:bc:09:5a:7a:7d: 06:57:57:59:f6:93:d9:ac:1b:cb:3d:bb:cf:1b:6f:a8:00:97: f8:10:b1:ba:2c:c9:db:ec:de:47:b9:7d:1f:a2:ea:28:55:96: 6d:6f:03:2a:0d:7c:d5:c1:a0:0e:57:ad:28:74:b4:eb:5b:9d: f3:98:a7:af:c6:58:d8:a8:5b:90:2f:1c:ef:9a:9f:58:e6:f7: e8:37:fc:17:d3:72:67:15:fe:cb:f1:47:5a:db:a8:b9:92:a5: 4d:64:f1:59:c0:65:4f:61:68:de:46:8a:02:4a:c0:fb:86:1b: 37:ef:54:c5:71:3e:6f:34:68:0b:9b:40:f4:c5:de:e2:4a:fe: 46:bb:eb:01:44:cf:a1:45:bd:d3:46:86:de:e0:d4:d7:6d:6a: 9a:95:0e:b9:ef:f7:86:11:6f:bc:60:0e:cc:86:55:6a:1f:1b: 26:fc:59:b1:d9:b7:14:45:9a:aa:cc:89:da:d0:02:1f:4b:a8: b8:e2:34:41:1e:b8:11:94:61:06:29:c7:68:4c:0b:7b:93:c2: 89:d1:ce:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUwNTEyMTgxMDMzWhcNMjUwNTE5MTgxMDMzWjAYMRYwFAYD VQQDEw02ODIyMzk5YS1lNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZzG/eZhFDc07ksEAAqvNL3bkrIk0XuqYu1plvmEIhMWm1couxj2Qoyy6J/i oGdxRPzbPwJ6FuKFQbmvukCtuD20Rnwv9YWYBj1dFt+Jz52/XlrylqvgVfiGJNlb CB2v/WcH/uZbUExE/iBQElcE9g4Tx/voR7Di67CDeYx1AdP5UYY7DD4UkylLph8K 4PWaWPQ5rQY7s4NSyckzupzJtPlhmrVOP05OMPsJlyiGZSYT76/KEtgNjG2Q9zGK qZ85/PRTsWEtexoC6C4BCYUMDcJINPaVdh5y3wVFuypLBPIwPWEErP4LFE+Lxt7n gVyDorSDtGwCL4rnPgWSMEBTuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIktE4H 3lygwL2abi6qPj+p8SB3MB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn4Js8qXFwJ2MnBWG33n+s/phX0F4g7jbUdWNOs6ypFdmXDCxZnznN lSAXQFA6BTzOvAlaen0GV1dZ9pPZrBvLPbvPG2+oAJf4ELG6LMnb7N5HuX0fouoo VZZtbwMqDXzVwaAOV60odLTrW53zmKevxljYqFuQLxzvmp9Y5vfoN/wX03JnFf7L 8Uda26i5kqVNZPFZwGVPYWjeRooCSsD7hhs371TFcT5vNGgLm0D0xd7iSv5Gu+sB RM+hRb3TRobe4NTXbWqalQ657/eGEW+8YA7MhlVqHxsm/Fmx2bcURZqqzIna0AIf S6i44jRBHrgRlGEGKcdoTAt7k8KJ0c5H -----END CERTIFICATE-----Generated at Wed May 14 15:18:29 2025 by rpki-client