$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: /Cs4oUIk0enoUu4lgY3ZBz55WoXsm8B0zU8faB1gg58= Subject key identifier: 4C:6E:EA:7B:8A:D1:B2:6E:B6:CF:2D:6C:59:52:83:6E:71:B8:5A:F7 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 0118 Signing time: Sat 05 Jul 2025 05:04:47 +0000 Manifest this update: Sat 05 Jul 2025 05:04:47 +0000 Manifest next update: Sat 12 Jul 2025 05:04:47 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: RmorJVuo7iZB575Q14W5jx9umMHsZGJSmf6TLqgR1eY=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Jul 5 05:04:47 2025 GMT Not After : Jul 12 05:04:47 2025 GMT Subject: CN=6868b26f-6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:36:e2:f6:3f:c4:89:0d:81:a9:a8:aa:8d: 05:5d:eb:3d:1d:e0:a3:65:8a:2e:51:85:db:3d:ed: f2:b1:ae:bf:f1:e5:1a:72:12:5b:94:89:1c:7a:2c: 9a:d3:cb:b0:05:3d:da:30:cb:db:57:92:14:31:26: dd:22:06:8d:55:44:9b:8c:8c:e4:a7:fb:da:87:4d: a8:60:61:dc:58:62:f7:3d:de:af:c6:9b:58:35:06: 7b:cf:f0:ea:05:1d:ec:be:a0:32:90:aa:d0:bc:83: 1d:5c:a1:f4:45:d2:f5:d8:b4:f7:ad:9d:71:56:db: e9:33:f4:7d:d5:9d:64:3d:a7:d8:68:4e:08:1e:b5: 17:07:84:35:ae:7a:f8:f3:4b:d7:fa:52:31:ab:4e: b2:4b:e4:ee:cb:8a:d1:99:f5:18:48:f9:fd:ec:05: 61:62:e2:bd:b1:21:79:77:a9:8b:29:91:8a:b4:e2: 75:c5:47:c4:7d:5f:77:2c:29:97:9f:cd:82:5c:ea: 10:9c:b0:48:79:c5:2e:3c:1a:cb:41:1c:4c:1a:bb: 05:90:07:dc:cc:b3:ab:c0:51:fa:cc:6f:a6:ff:57: f3:95:3b:e9:a6:77:94:61:1f:c4:1c:6c:5b:e8:17: b2:c0:0b:c9:68:aa:04:f8:24:57:1f:60:dd:aa:d2: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6E:EA:7B:8A:D1:B2:6E:B6:CF:2D:6C:59:52:83:6E:71:B8:5A:F7 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:83:58:00:f6:75:d0:ee:ba:c8:3d:1d:95:e4:57:75:e1:02: 5d:66:22:6a:5f:d7:ec:dc:93:f9:b9:9d:97:2c:21:ca:38:ce: 71:de:1f:9c:bb:e4:36:3f:00:55:0f:a7:2a:57:6b:f7:97:ae: 8d:96:5f:54:94:f7:2a:e0:b9:4b:1f:88:4d:d1:d9:42:b2:c3: b4:5e:ae:5a:b9:74:82:81:a5:53:26:86:92:33:91:39:ef:48: 99:69:27:45:cf:5b:b6:25:8b:a9:a3:ee:6f:a8:a3:63:16:f3: 29:80:91:83:9e:d2:cb:87:68:1f:4a:44:1a:19:a9:22:18:d7: 0c:8a:39:fe:5e:9c:55:97:60:aa:11:54:fe:ee:d1:8b:7d:66: bf:51:de:ea:fc:d7:43:83:e4:39:c1:c9:85:87:7b:e9:64:2a: cf:18:bd:05:2d:06:fe:d1:bc:f3:a8:1f:ea:12:44:86:57:9f: a2:61:2e:8f:67:ce:38:93:73:18:09:78:ce:29:b9:7a:93:a5: 63:8b:96:06:f1:20:3e:41:3e:aa:fd:42:55:82:19:1e:10:1e: c3:08:d5:cc:36:4e:12:14:8d:ca:15:e1:be:92:19:78:43:2e: 4e:cd:1f:11:41:58:4b:5f:89:72:98:80:39:c3:5d:71:35:e8: af:ca:17:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwNzA1MDUwNDQ3WhcNMjUwNzEyMDUwNDQ3WjAYMRYwFAYD VQQDEw02ODY4YjI2Zi02Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U424vY/xIkNgamoqo0FXes9HeCjZYouUYXbPe3ysa6/8eUachJblIkceiya 08uwBT3aMMvbV5IUMSbdIgaNVUSbjIzkp/vah02oYGHcWGL3Pd6vxptYNQZ7z/Dq BR3svqAykKrQvIMdXKH0RdL12LT3rZ1xVtvpM/R91Z1kPafYaE4IHrUXB4Q1rnr4 80vX+lIxq06yS+Tuy4rRmfUYSPn97AVhYuK9sSF5d6mLKZGKtOJ1xUfEfV93LCmX n82CXOoQnLBIecUuPBrLQRxMGrsFkAfczLOrwFH6zG+m/1fzlTvppneUYR/EHGxb 6BeywAvJaKoE+CRXH2DdqtKdKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExu6nuK 0bJuts8tbFlSg25xuFr3MB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpg1gA9nXQ7rrIPR2V5Fd14QJdZiJqX9fs3JP5uZ2XLCHKOM5x3h+c u+Q2PwBVD6cqV2v3l66Nll9UlPcq4LlLH4hN0dlCssO0Xq5auXSCgaVTJoaSM5E5 70iZaSdFz1u2JYupo+5vqKNjFvMpgJGDntLLh2gfSkQaGakiGNcMijn+XpxVl2Cq EVT+7tGLfWa/Ud7q/NdDg+Q5wcmFh3vpZCrPGL0FLQb+0bzzqB/qEkSGV5+iYS6P Z844k3MYCXjOKbl6k6Vji5YG8SA+QT6q/UJVghkeEB7DCNXMNk4SFI3KFeG+khl4 Qy5OzR8RQVhLX4lymIA5w11xNeivyhcq -----END CERTIFICATE-----Generated at Sun Jul 6 00:29:03 2025 by rpki-client