$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: ZCLnu48HwYl/LHVtl0jBcHDnIaU78scx6+BFcbyBpCE= Subject key identifier: 9D:98:3A:42:F2:40:3B:5C:1A:34:79:BB:33:10:21:85:1C:D3:12:AB Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 07D8 Signing time: Mon 12 May 2025 20:49:31 +0000 Manifest this update: Mon 12 May 2025 20:49:30 +0000 Manifest next update: Mon 19 May 2025 20:49:30 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: SFaRRcaRlP4V3BlXfzLVGyn9mEFunV3XQ1DnXO2kwbg=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: May 12 20:49:30 2025 GMT Not After : May 19 20:49:30 2025 GMT Subject: CN=68225edb-1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:9e:c3:b2:5e:b7:85:ce:02:a1:8a:be:f7: 7b:70:9e:56:16:33:23:1e:a3:17:de:9b:b6:20:41: 4b:ab:9a:ea:79:94:db:88:52:e7:04:28:ce:95:a0: d8:5a:79:62:0f:61:0d:ea:6e:cd:7b:52:dd:b3:86: f8:7d:db:4e:25:1b:8a:c3:81:be:1c:1e:84:19:31: 81:0e:3a:f9:c0:97:26:e8:da:c9:75:e4:87:68:55: 53:f0:95:57:7e:2b:a2:6c:d4:7b:1a:91:e7:65:c2: 26:3b:d3:aa:19:f9:20:84:56:1e:be:da:64:d1:76: 9b:4d:45:37:70:67:f1:fa:d0:c7:9c:f1:44:73:fb: df:c1:2f:a4:b7:82:ae:3f:7f:1e:4d:56:89:c8:88: b4:3e:8c:38:94:a6:a3:3d:76:d6:68:ea:9a:6c:9f: a2:06:a8:15:30:32:c1:27:4b:04:4f:54:08:ca:fb: ec:0b:72:5b:08:b4:f1:94:3c:d6:88:da:9e:36:88: f4:02:66:db:be:08:5b:e0:c9:62:e4:e2:46:90:41: b1:5b:47:60:15:67:be:97:28:19:43:60:d2:56:91: 16:90:d7:5f:7d:74:6c:da:ce:71:53:82:70:4e:0d: 24:70:ab:36:8c:07:a7:f1:28:93:57:9d:6e:d9:35: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:3A:42:F2:40:3B:5C:1A:34:79:BB:33:10:21:85:1C:D3:12:AB X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:ff:18:b9:c0:d2:85:1b:02:ba:1b:55:e1:42:cd:db:a2: ca:79:90:c0:ca:ac:76:03:07:56:7f:43:1a:9a:ee:e5:5d:a8: 57:77:99:7f:d4:e5:d3:ca:eb:16:5d:e0:e1:39:ba:3f:a0:1c: 9f:44:cb:18:7c:9d:51:6a:69:51:30:76:3b:27:b5:b6:2f:90: 4c:2e:09:70:a6:de:99:89:e6:31:eb:56:2f:73:7b:3c:e4:d4: ad:47:33:66:42:47:c4:64:fb:0f:72:be:d3:0c:41:ba:d8:a7: e7:16:39:ca:e9:96:89:c9:35:fe:45:5b:62:e5:64:50:d7:13: 0d:47:1b:89:f5:e6:05:d3:cf:df:d9:23:ff:ab:52:3f:83:20: 66:43:9e:39:f6:59:aa:ae:21:5e:4a:bd:20:25:b2:fc:9f:c3: 38:f1:cc:00:06:b4:3b:e9:9c:e4:8d:e8:78:86:fe:4d:d7:ef: ec:44:bf:63:fd:46:ad:3e:1f:93:7c:30:4f:44:f2:a6:b1:67: af:f6:2b:13:d0:73:dd:49:a0:1e:3f:cb:77:bf:d1:b0:eb:40: b7:e1:e1:3c:9d:85:13:96:7a:2b:4b:36:36:16:0d:4a:53:80: f4:5d:90:4b:bf:4b:9a:e9:38:fb:22:4b:8c:ea:be:66:83:00: b5:eb:33:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwNTEyMjA0OTMwWhcNMjUwNTE5MjA0OTMwWjAYMRYwFAYD VQQDEw02ODIyNWVkYi0xZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VSew7Jet4XOAqGKvvd7cJ5WFjMjHqMX3pu2IEFLq5rqeZTbiFLnBCjOlaDY WnliD2EN6m7Ne1Lds4b4fdtOJRuKw4G+HB6EGTGBDjr5wJcm6NrJdeSHaFVT8JVX fiuibNR7GpHnZcImO9OqGfkghFYevtpk0XabTUU3cGfx+tDHnPFEc/vfwS+kt4Ku P38eTVaJyIi0Pow4lKajPXbWaOqabJ+iBqgVMDLBJ0sET1QIyvvsC3JbCLTxlDzW iNqeNoj0Ambbvghb4Mli5OJGkEGxW0dgFWe+lygZQ2DSVpEWkNdffXRs2s5xU4Jw Tg0kcKs2jAen8SiTV51u2TVAJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2YOkLy QDtcGjR5uzMQIYUc0xKrMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMKP8YucDShRsCuhtV4ULN26LKeZDAyqx2AwdWf0Mamu7lXahXd5l/ 1OXTyusWXeDhObo/oByfRMsYfJ1RamlRMHY7J7W2L5BMLglwpt6ZieYx61Yvc3s8 5NStRzNmQkfEZPsPcr7TDEG62KfnFjnK6ZaJyTX+RVti5WRQ1xMNRxuJ9eYF08/f 2SP/q1I/gyBmQ5459lmqriFeSr0gJbL8n8M48cwABrQ76Zzkjeh4hv5N1+/sRL9j /UatPh+TfDBPRPKmsWev9isT0HPdSaAeP8t3v9Gw60C34eE8nYUTlnorSzY2Fg1K U4D0XZBLv0ua6Tj7IkuM6r5mgwC16zNG -----END CERTIFICATE-----Generated at Mon May 12 22:46:28 2025 by rpki-client