$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: Zu5a2MY3QMjmgJWLKtEaI9WLbaqXT2GKFOZEsoi5cJM= Subject key identifier: BF:1E:CD:96:75:AB:4B:55:00:97:24:7F:8B:7C:A6:31:46:74:C8:E7 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 358E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 3517 Signing time: Wed 14 May 2025 14:31:21 +0000 Manifest this update: Wed 14 May 2025 14:31:21 +0000 Manifest next update: Wed 21 May 2025 14:31:21 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 5x7vPhNMuI095R4bTWozA7fHdNNpJ4L21e/w3oW+jbM=) 2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: OpsjHp/vGysxlU1F4bwOY7eYj+17+oUTjlbccNSDCHo=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13710 (0x358e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: May 14 14:31:21 2025 GMT Not After : May 21 14:31:21 2025 GMT Subject: CN=6824a939-4061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:34:63:6a:aa:6f:22:ea:4f:07:a0:23:3d:57: c3:c8:65:47:9b:58:56:eb:8d:78:21:7b:8d:ed:38: ea:9b:59:f1:30:5c:36:71:39:0c:aa:f3:48:f4:b8: 3e:8e:18:aa:08:e3:f9:75:91:19:0a:f1:65:c1:c7: 40:b7:8f:65:f4:bb:62:41:b9:ca:15:ff:ae:63:3b: 8b:b1:c2:80:e4:cf:c5:77:91:2b:2b:6d:7f:a0:22: 2c:12:c8:bf:fc:60:84:72:35:fa:e0:f3:0d:fd:70: 99:d6:08:38:c6:27:bf:94:6f:72:cf:79:6f:43:fc: 28:b3:ab:d0:ae:94:f3:85:a2:b4:2f:08:4e:0a:b7: 6b:31:1e:b8:61:58:a2:81:30:21:6d:88:8b:9e:97: f7:9d:30:94:38:d0:cf:22:d8:ab:e0:7f:5c:f5:c6: 3e:81:eb:73:d5:88:46:92:f2:f3:3e:99:8c:84:d3: f5:19:d6:fc:e9:a0:55:26:74:cc:53:01:fa:40:0f: da:33:6b:c5:5d:db:9c:15:23:2d:0e:11:89:c4:d7: 88:c6:45:4b:45:42:82:e7:67:f8:56:ac:18:53:c9: f1:32:76:59:be:cb:4b:d1:ed:87:e4:b8:28:1a:3f: 13:f9:45:09:9a:f5:82:3a:5a:bd:7c:f4:d0:35:03: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:CD:96:75:AB:4B:55:00:97:24:7F:8B:7C:A6:31:46:74:C8:E7 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:bb:af:8c:57:b1:31:b3:ec:72:db:6a:bf:40:9b:df:de:fd: 21:46:63:c6:73:6c:5d:5b:c4:94:45:27:06:af:78:b1:24:2d: 91:0b:ab:50:9e:93:0a:db:fd:e6:4e:40:b8:d2:29:bc:93:f8: a5:fe:19:43:43:0e:a0:65:58:5c:5d:2e:8b:1c:df:82:13:ad: d9:f1:20:4f:e8:7f:e4:ab:e7:29:55:fa:32:ec:5a:45:22:07: c7:77:eb:26:c3:28:ee:97:72:15:94:2c:8a:1d:8c:5b:aa:87: 36:9f:fd:9b:ec:dd:19:04:67:12:a3:ae:bf:a6:7e:6b:ac:84: 5d:5e:83:7d:b7:44:24:a6:4a:c4:2b:a2:4d:9c:66:f3:43:94: 7c:51:be:1a:2f:c5:b7:41:02:63:3d:8b:f1:48:cb:22:88:1f: b5:cd:11:6a:d4:30:62:7f:db:a7:7e:af:5f:bb:d3:cc:a0:2d: 6c:7b:30:b6:c2:26:0c:7b:e2:6e:81:92:2a:9d:9e:3a:9a:73: 9b:70:de:a2:c7:0d:a6:8d:1c:20:ff:b1:82:7f:bc:f7:35:67: 1a:0d:c7:96:52:ee:6f:82:72:6b:a9:9e:b9:48:28:18:4c:15: b5:ce:2d:89:12:43:19:7e:7e:bd:bf:06:c1:61:b5:aa:d9:01: 4f:f3:80:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjUwNTE0MTQzMTIxWhcNMjUwNTIxMTQzMTIxWjAYMRYwFAYD VQQDEw02ODI0YTkzOS00MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DRjaqpvIupPB6AjPVfDyGVHm1hW6414IXuN7Tjqm1nxMFw2cTkMqvNI9Lg+ jhiqCOP5dZEZCvFlwcdAt49l9LtiQbnKFf+uYzuLscKA5M/Fd5ErK21/oCIsEsi/ /GCEcjX64PMN/XCZ1gg4xie/lG9yz3lvQ/wos6vQrpTzhaK0LwhOCrdrMR64YVii gTAhbYiLnpf3nTCUONDPItir4H9c9cY+getz1YhGkvLzPpmMhNP1Gdb86aBVJnTM UwH6QA/aM2vFXducFSMtDhGJxNeIxkVLRUKC52f4VqwYU8nxMnZZvstL0e2H5Lgo Gj8T+UUJmvWCOlq9fPTQNQOhwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8ezZZ1 q0tVAJckf4t8pjFGdMjnMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9u6+MV7Exs+xy22q/QJvf3v0hRmPGc2xdW8SURScGr3ixJC2RC6tQ npMK2/3mTkC40im8k/il/hlDQw6gZVhcXS6LHN+CE63Z8SBP6H/kq+cpVfoy7FpF IgfHd+smwyjul3IVlCyKHYxbqoc2n/2b7N0ZBGcSo66/pn5rrIRdXoN9t0QkpkrE K6JNnGbzQ5R8Ub4aL8W3QQJjPYvxSMsiiB+1zRFq1DBif9unfq9fu9PMoC1sezC2 wiYMe+JugZIqnZ46mnObcN6ixw2mjRwg/7GCf7z3NWcaDceWUu5vgnJrqZ65SCgY TBW1zi2JEkMZfn69vwbBYbWq2QFP84DE -----END CERTIFICATE-----Generated at Thu May 15 00:20:06 2025 by rpki-client