$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json) Hash identifier: cdvyOAQ/4RNzO4dK6wmDHHVJinu/VArLxhnIKOsIneE= Subject key identifier: DA:B2:C7:0D:34:FC:10:0D:2C:0B:E0:3C:D2:A3:24:29:C5:55:7C:61 Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft Manifest number: 43 Signing time: Tue 13 May 2025 06:38:49 +0000 Manifest this update: Tue 13 May 2025 06:38:49 +0000 Manifest next update: Tue 20 May 2025 06:38:48 +0000 Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: wF0TH5OgC43EWBCx3ZnHyXdKlvlDb7YQ+l0GfOEB3s4=) 2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Validity Not Before: May 13 06:38:49 2025 GMT Not After : May 20 06:38:48 2025 GMT Subject: CN=6822e8f9-f708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:2d:23:db:dd:6f:c4:00:8e:cb:f9:7e:6c: eb:a6:44:77:59:dd:26:72:4c:3c:e9:7b:32:b9:00: a9:0f:cf:7d:d4:f9:f3:f0:c9:33:c4:8b:95:4d:60: 28:78:fc:12:91:94:94:86:35:ed:7c:db:83:75:97: 71:8d:59:f6:df:1e:29:7e:aa:3e:2b:33:2c:38:b8: bb:d8:1f:04:5d:c7:47:5a:39:16:ab:4d:40:0c:bf: db:db:a4:84:80:f2:e9:19:c9:53:43:76:78:8d:2c: a0:6a:24:1a:85:9f:e8:3b:0e:b6:86:de:80:1d:b5: 3d:1d:70:11:c5:89:0d:e8:de:b4:21:9d:ca:d9:d4: d7:5a:70:cc:20:fd:98:66:ca:4c:93:bd:c1:dc:46: 1b:e0:fd:c2:f0:a7:46:46:01:0d:bf:9e:3d:d9:26: 9a:3d:43:e4:9d:16:4f:97:40:6b:ea:43:2d:02:e5: 34:dc:f1:b6:3f:26:fe:bb:53:1a:6b:e1:67:57:80: b3:a3:82:37:a1:f2:2d:95:1a:f0:68:0c:2d:37:af: b1:c2:b3:45:83:6a:36:6f:83:f8:6e:4c:58:28:97: 44:0a:42:03:41:39:cb:e0:6d:9c:6c:22:f3:60:67: e9:9d:3c:23:19:ee:55:7e:ed:40:bb:38:b5:3a:6d: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B2:C7:0D:34:FC:10:0D:2C:0B:E0:3C:D2:A3:24:29:C5:55:7C:61 X509v3 Authority Key Identifier: keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f7:18:cb:fb:fb:14:3c:76:7e:59:0f:33:75:18:c7:9b:77: 32:de:d1:b6:f3:c7:34:c1:1b:65:3f:62:db:2d:60:5b:cf:97: d4:81:82:74:18:83:b4:93:12:69:be:d8:0f:5f:e8:ae:e2:07: c4:61:02:01:e6:57:18:88:dc:10:38:62:f0:f4:79:af:b2:b2: 2f:56:d9:25:07:a5:f9:37:14:25:0d:dd:26:c9:8a:26:3a:89: 57:c0:19:27:64:ae:95:2f:32:bd:01:c4:60:15:84:b6:ed:ca: f9:ce:0b:20:a9:f8:fe:89:51:31:7b:49:d7:38:15:c2:3f:6a: 94:c8:18:cc:17:59:aa:1b:b1:b9:4f:9d:f8:da:4a:9f:f0:9b: 2f:38:62:d0:4d:79:2d:0e:a6:43:a9:99:17:9a:54:d2:73:74: b4:ed:61:d2:cc:7c:02:57:e4:15:67:94:88:9d:32:2c:09:0c: b5:74:0d:b0:33:87:b6:c4:50:55:f4:58:70:60:f3:36:ce:06: da:2f:10:c9:7b:c6:67:45:aa:6e:23:fa:0a:bf:38:68:83:98: 05:0c:4d:1b:40:9a:99:c4:b6:9d:4f:9c:59:36:98:3d:a7:1d: 48:93:12:9c:45:0b:a7:96:69:af:53:9f:c2:af:94:53:31:e7: 07:57:21:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTg4NDExMC8GA1UEBRMoQkUzQkZCMjc4REI5QTAzREVBMzg1NkQ3RkUyMjkyMTgz NzREOEZDMDAeFw0yNTA1MTMwNjM4NDlaFw0yNTA1MjAwNjM4NDhaMBgxFjAUBgNV BAMTDTY4MjJlOGY5LWY3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+CC0j291vxACOy/l+bOumRHdZ3SZyTDzpezK5AKkPz33U+fPwyTPEi5VNYCh4 /BKRlJSGNe1824N1l3GNWfbfHil+qj4rMyw4uLvYHwRdx0daORarTUAMv9vbpISA 8ukZyVNDdniNLKBqJBqFn+g7DraG3oAdtT0dcBHFiQ3o3rQhncrZ1NdacMwg/Zhm ykyTvcHcRhvg/cLwp0ZGAQ2/nj3ZJpo9Q+SdFk+XQGvqQy0C5TTc8bY/Jv67Uxpr 4WdXgLOjgjeh8i2VGvBoDC03r7HCs0WDajZvg/huTFgol0QKQgNBOcvgbZxsIvNg Z+mdPCMZ7lV+7UC7OLU6ba+PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2rLHDTT8 EA0sC+A80qMkKcVVfGEwHwYDVR0jBBgwFoAUvjv7J425oD3qOFbX/iKSGDdNj8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1ODg0LzYxQjA3MDVBQ0RF QjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmp2N0o0MjVvRDNxT0ZiWF9pS1NHRGROajhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 ODg0LzYxQjA3MDVBQ0RFQjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0Qz cU9GYlhfaUtTR0RkTmo4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJn3GMv7+xQ8dn5ZDzN1GMebdzLe0bbzxzTBG2U/YtstYFvPl9SBgnQY g7STEmm+2A9f6K7iB8RhAgHmVxiI3BA4YvD0ea+ysi9W2SUHpfk3FCUN3SbJiiY6 iVfAGSdkrpUvMr0BxGAVhLbtyvnOCyCp+P6JUTF7Sdc4FcI/apTIGMwXWaobsblP nfjaSp/wmy84YtBNeS0OpkOpmReaVNJzdLTtYdLMfAJX5BVnlIidMiwJDLV0DbAz h7bEUFX0WHBg8zbOBtovEMl7xmdFqm4j+gq/OGiDmAUMTRtAmpnEtp1PnFk2mD2n HUiTEpxFC6eWaa9Tn8KvlFMx5wdXIfY= -----END CERTIFICATE-----Generated at Tue May 13 12:33:20 2025 by rpki-client