$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: dSQy9uDaSI9pJTQKMKVEo7Dkpt+W3CJKHfZ8Fd73KmI= Subject key identifier: 7C:62:CC:7E:EE:EA:05:10:14:B2:44:08:00:64:A4:A4:01:03:48:3B Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 121F Signing time: Wed 14 May 2025 17:15:31 +0000 Manifest this update: Wed 14 May 2025 17:15:31 +0000 Manifest next update: Wed 21 May 2025 17:15:31 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: lr+DFBZRwWSN/Fkgbg+gpmNfnCpPYPV4cpXncD5gcQ4=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: acU+THblHTmNuI3hvXPa2l7l+23XT3W88AntJDw2zgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4692 (0x1254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: May 14 17:15:31 2025 GMT Not After : May 21 17:15:31 2025 GMT Subject: CN=6824cfb3-2a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:f8:8d:71:eb:23:b5:38:21:48:5e:a8:83: bf:c0:e3:c5:74:99:5a:9f:47:b4:aa:6c:f6:8c:0e: 63:d6:14:c2:de:2f:b8:07:9b:19:7e:75:ab:5a:58: 5a:9e:64:e2:cf:4a:d4:21:fd:2f:1b:46:27:1b:30: 5c:94:14:4f:6e:9a:60:db:83:f0:b1:df:0d:18:7c: 89:b9:6b:9a:23:23:a4:bf:62:58:46:5d:53:da:b8: 6a:12:9b:a8:68:3a:66:03:07:34:33:bb:44:0d:d2: 19:14:23:aa:d8:f9:27:d9:6d:80:40:bf:e1:07:6c: 9a:d0:8b:01:8f:cf:16:ed:1e:38:0a:a3:87:66:d8: 2b:72:07:91:f4:8c:83:82:0a:24:30:41:41:cc:eb: 68:f2:9a:27:c0:2c:9b:80:03:2e:48:3a:51:be:1f: 03:26:b0:44:d8:1b:bd:c1:99:56:06:0c:3d:4f:3b: ca:6e:4b:fa:00:ab:15:b9:0a:f3:80:a0:f8:ba:17: 7c:85:ae:fc:76:1e:64:35:d9:f0:c8:6b:8f:bc:21: ac:16:5c:d9:95:01:27:b8:90:a1:1e:ab:24:2d:41: ff:21:5c:03:6e:11:99:97:63:1c:6c:c6:3e:27:32: a0:12:31:b9:7d:bb:72:04:63:dc:8d:79:86:32:a1: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:62:CC:7E:EE:EA:05:10:14:B2:44:08:00:64:A4:A4:01:03:48:3B X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:cc:79:40:7e:76:ce:dc:70:42:41:7c:ec:b6:40:64:60:36: 13:ab:09:16:36:1f:a5:e3:e7:07:bf:12:69:b0:62:ed:dc:da: 70:2b:d4:b6:98:72:b3:9a:a6:d9:c7:2a:ca:66:b4:47:7e:6c: e1:c7:62:2d:ad:00:e3:73:86:65:52:8b:dd:6f:27:fc:5a:4a: 2a:f5:79:d9:df:01:6d:9b:dd:f5:7b:ff:4a:8e:36:c0:a8:af: 6f:9b:d4:40:ab:7f:f8:1d:04:44:f0:cc:0b:d8:66:64:a5:6d: 03:bb:6c:68:a5:f9:d7:07:ef:6a:f7:eb:86:e8:97:fb:34:c3: bb:04:a1:4a:a9:06:03:d1:ed:07:b9:b1:3a:9d:3b:61:2b:51: 3a:b4:ab:c0:20:30:38:ed:4f:40:ec:ed:e8:a2:25:f7:cb:55: f7:0d:72:81:ab:fb:24:2f:fb:7c:25:f5:16:96:29:67:25:7a: 26:41:bf:9d:d8:73:cc:aa:bf:3c:31:2f:66:d3:78:5f:3b:12: 60:67:86:cf:89:b7:dd:60:8c:61:6c:91:1c:8c:3a:03:bd:da: af:66:bf:be:b0:d2:e9:40:56:c6:79:5d:4f:3b:96:94:2d:86: 14:26:20:d8:f1:0f:57:06:2a:86:ee:cb:90:9b:d7:ee:fa:a5: 8e:29:bb:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwNTE0MTcxNTMxWhcNMjUwNTIxMTcxNTMxWjAYMRYwFAYD VQQDEw02ODI0Y2ZiMy0yYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwor4jXHrI7U4IUheqIO/wOPFdJlan0e0qmz2jA5j1hTC3i+4B5sZfnWrWlha nmTiz0rUIf0vG0YnGzBclBRPbppg24Pwsd8NGHyJuWuaIyOkv2JYRl1T2rhqEpuo aDpmAwc0M7tEDdIZFCOq2Pkn2W2AQL/hB2ya0IsBj88W7R44CqOHZtgrcgeR9IyD ggokMEFBzOto8ponwCybgAMuSDpRvh8DJrBE2Bu9wZlWBgw9TzvKbkv6AKsVuQrz gKD4uhd8ha78dh5kNdnwyGuPvCGsFlzZlQEnuJChHqskLUH/IVwDbhGZl2McbMY+ JzKgEjG5fbtyBGPcjXmGMqHoSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxizH7u 6gUQFLJECABkpKQBA0g7MB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvzHlAfnbO3HBCQXzstkBkYDYTqwkWNh+l4+cHvxJpsGLt3NpwK9S2 mHKzmqbZxyrKZrRHfmzhx2ItrQDjc4ZlUovdbyf8Wkoq9XnZ3wFtm931e/9KjjbA qK9vm9RAq3/4HQRE8MwL2GZkpW0Du2xopfnXB+9q9+uG6Jf7NMO7BKFKqQYD0e0H ubE6nTthK1E6tKvAIDA47U9A7O3ooiX3y1X3DXKBq/skL/t8JfUWlilnJXomQb+d 2HPMqr88MS9m03hfOxJgZ4bPibfdYIxhbJEcjDoDvdqvZr++sNLpQFbGeV1PO5aU LYYUJiDY8Q9XBiqG7suQm9fu+qWOKbtY -----END CERTIFICATE-----Generated at Wed May 14 23:26:26 2025 by rpki-client