$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: jTyGvCxjBIqlk/UHZGEVqr+hMZBDw/7QDNU+lfrumIE= Subject key identifier: 70:D7:EE:08:5C:6E:79:9B:73:92:BD:DA:89:22:F2:0F:19:34:F9:92 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: FE Signing time: Tue 13 May 2025 04:17:49 +0000 Manifest this update: Tue 13 May 2025 04:17:49 +0000 Manifest next update: Tue 20 May 2025 04:17:49 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: mB3hagEvkbVKHmacq5iEhS+MZMLUDVKzzb09+YWcs+Q=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: May 13 04:17:49 2025 GMT Not After : May 20 04:17:49 2025 GMT Subject: CN=6822c7ed-00e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:8b:59:84:03:bd:26:10:3a:49:69:cb:ef: a2:38:8a:99:d9:d4:2c:c8:52:14:28:4b:4c:9c:c1: 85:3f:fa:b8:b0:29:91:5d:93:16:cf:e7:1a:0b:28: 86:b2:fe:c6:dc:05:74:f3:df:be:8a:4f:0d:8d:74: aa:e5:21:1f:ab:b2:7f:3d:46:cf:dd:4a:ce:bd:c5: bd:32:85:17:14:16:9b:0f:c9:00:3c:5a:68:30:01: 27:e0:ff:c7:a5:25:26:51:aa:fe:f3:f4:54:63:d9: fd:a1:aa:8d:18:c8:4b:5c:f4:72:1d:f8:66:8f:84: 85:5b:06:58:b2:8a:4c:ef:27:73:ba:93:09:1b:87: 75:89:5e:41:3e:26:f6:16:0b:d0:cd:56:5a:2b:1d: ac:33:61:09:8a:ad:d3:2a:4f:c2:43:44:7a:09:00: 47:3e:78:e7:08:cb:43:89:40:ac:bb:1e:1f:7d:a2: 2b:46:85:5e:fd:d0:b7:37:f9:51:66:39:26:62:e0: 2b:6d:2a:11:83:25:85:84:04:6d:f4:11:d4:42:3b: ef:32:83:d9:eb:a6:ac:eb:c3:1c:6f:5f:44:b8:05: a1:84:00:02:bf:4b:ab:8b:38:cc:1d:77:a3:28:5a: e0:5f:04:45:24:87:b7:ea:33:c6:26:60:cf:6c:78: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D7:EE:08:5C:6E:79:9B:73:92:BD:DA:89:22:F2:0F:19:34:F9:92 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:50:04:79:f2:9b:ba:f0:bd:84:1a:84:f8:2d:5f:1c:41: 71:7f:d5:71:35:64:5c:92:80:61:b3:8a:f4:71:6a:f5:2c:af: 24:c1:60:bc:fc:84:f5:c0:4b:a6:3e:71:17:e5:af:63:75:dc: 5f:8a:c7:0d:f4:0e:c3:a5:6f:ab:95:86:02:62:a6:80:d6:6e: 3f:ca:00:c7:30:f2:5a:25:8b:b8:a8:e0:a4:c8:ba:41:7a:8a: 87:fc:aa:f3:ff:16:f8:14:6c:71:fa:fa:25:37:4b:c0:d5:bc: 74:7c:3f:19:39:4d:ea:0e:99:83:a1:6d:2c:a0:5c:05:11:c8: 4a:32:93:25:9e:08:97:63:be:7f:f1:48:a6:ef:d1:9f:60:0a: 85:1b:f2:61:42:b2:f6:d1:56:64:8f:3d:1c:aa:96:22:71:6f: 71:a3:f0:25:fd:f4:b8:3a:0f:09:49:a8:ce:05:07:f0:76:bb: 33:58:f3:bc:23:d8:1d:b7:8e:01:8e:3c:24:db:ec:6d:45:e4: e3:01:25:d4:8b:06:ff:44:f2:59:b3:03:12:bc:7b:67:f7:af: c0:4d:d8:cf:93:3b:ff:1b:25:90:7d:c4:2c:19:63:f6:6a:4d: 4a:af:43:08:e7:93:21:ac:38:79:bc:e7:c3:5d:22:5b:f3:b7: 91:6f:cd:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwNTEzMDQxNzQ5WhcNMjUwNTIwMDQxNzQ5WjAYMRYwFAYD VQQDEw02ODIyYzdlZC0wMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2peLWYQDvSYQOklpy++iOIqZ2dQsyFIUKEtMnMGFP/q4sCmRXZMWz+caCyiG sv7G3AV089++ik8NjXSq5SEfq7J/PUbP3UrOvcW9MoUXFBabD8kAPFpoMAEn4P/H pSUmUar+8/RUY9n9oaqNGMhLXPRyHfhmj4SFWwZYsopM7ydzupMJG4d1iV5BPib2 FgvQzVZaKx2sM2EJiq3TKk/CQ0R6CQBHPnjnCMtDiUCsux4ffaIrRoVe/dC3N/lR ZjkmYuArbSoRgyWFhARt9BHUQjvvMoPZ66as68Mcb19EuAWhhAACv0urizjMHXej KFrgXwRFJIe36jPGJmDPbHiM2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDX7ghc bnmbc5K92oki8g8ZNPmSMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJo1AEefKbuvC9hBqE+C1fHEFxf9VxNWRckoBhs4r0cWr1LK8kwWC8 /IT1wEumPnEX5a9jddxfiscN9A7DpW+rlYYCYqaA1m4/ygDHMPJaJYu4qOCkyLpB eoqH/Krz/xb4FGxx+volN0vA1bx0fD8ZOU3qDpmDoW0soFwFEchKMpMlngiXY75/ 8Uim79GfYAqFG/JhQrL20VZkjz0cqpYicW9xo/Al/fS4Og8JSajOBQfwdrszWPO8 I9gdt44Bjjwk2+xtReTjASXUiwb/RPJZswMSvHtn96/ATdjPkzv/GyWQfcQsGWP2 ak1Kr0MI55MhrDh5vOfDXSJb87eRb83y -----END CERTIFICATE-----Generated at Tue May 13 21:57:14 2025 by rpki-client