$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: kVhUO7Ffh0rL1eqXBEIB62zo4727qqSvx9mAkl8Ig+w= Subject key identifier: 3D:8D:E6:A3:8A:C0:82:32:B7:B1:55:D2:A9:DE:8D:19:C8:1F:AF:58 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12BF Signing time: Mon 12 May 2025 17:02:53 +0000 Manifest this update: Mon 12 May 2025 17:02:53 +0000 Manifest next update: Mon 19 May 2025 17:02:53 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: Tm9/uZp0acg9/KZ6j1TduWjxYsM+R51SiBMn5oGQ48s=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4882 (0x1312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: May 12 17:02:53 2025 GMT Not After : May 19 17:02:53 2025 GMT Subject: CN=682229bd-1c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:14:6b:35:8a:ad:2c:f3:f7:d9:0a:ac:3c: 75:df:d1:d4:8b:12:1f:b7:c8:a3:26:79:88:58:8f: 1f:42:6d:69:26:a0:8e:eb:eb:68:2a:7c:73:68:bf: b4:17:5d:e9:dd:71:cd:86:f7:58:51:59:4a:a0:f7: 1d:aa:c7:04:19:fd:37:b0:18:37:69:e8:b9:67:3a: 02:da:d6:e9:02:d9:1c:56:7f:2a:b5:f2:a9:9c:83: 94:bd:d6:1f:da:6d:39:6e:d3:0d:43:4e:84:e2:4b: 37:45:e7:68:02:d9:60:c9:96:c0:5d:5b:18:70:a1: ff:89:e7:b1:bf:af:fa:78:ed:2d:b4:3a:57:39:db: cf:9a:dc:e3:b7:80:0b:f1:3b:61:8f:5a:cc:11:14: 8c:09:e4:d7:18:00:fa:34:b4:64:e5:f1:14:3d:4d: 07:8c:9e:ed:16:0c:8c:8b:67:a3:cc:37:7a:b4:b1: ad:28:ac:58:0a:07:8e:10:4e:fa:f4:7c:91:4d:e2: cd:55:3c:d3:cf:e3:d7:2e:27:12:5a:37:5c:16:2a: 55:f8:51:81:51:a8:bf:db:ef:e9:30:30:61:dc:e1: 03:5c:da:12:1f:6a:83:56:ed:52:6b:4f:7d:54:b2: a4:b9:c2:ea:21:e0:f0:79:b8:d4:b4:bb:c9:6d:be: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:E6:A3:8A:C0:82:32:B7:B1:55:D2:A9:DE:8D:19:C8:1F:AF:58 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5e:ac:bf:76:aa:a3:04:fe:07:a0:4a:78:c0:f5:01:e5:73: bb:a4:0c:e1:2c:34:9e:c3:49:8a:42:e8:9a:58:61:dd:12:cf: 5d:26:db:40:87:4c:47:e5:c2:dc:ce:10:36:8f:04:32:68:63: 4b:ac:63:fb:37:13:97:97:6f:4e:71:a0:37:5c:e6:f0:c9:a1: e4:8e:35:2b:23:95:88:49:32:88:d0:c7:36:96:b1:77:df:fb: 9e:7a:c7:f0:d2:32:e0:5d:5e:90:e8:fc:81:e1:97:44:8f:57: 30:a2:c4:f2:8d:7d:32:b9:ed:85:93:d9:8f:21:e5:e5:f6:3c: 63:03:7d:62:12:b0:47:98:99:78:2f:e1:a0:b3:bd:9a:db:8f: a6:35:16:a3:d0:38:2a:99:67:67:3a:67:a0:ad:20:8f:e2:22: db:66:ee:74:0b:18:af:43:3e:07:af:eb:32:32:b0:79:8a:0d: d2:cc:23:b4:10:11:58:4b:dc:ee:39:2c:4c:3b:70:c1:d9:b6: 1c:74:04:94:fb:6a:b0:6d:84:61:cd:df:e9:fa:9c:34:83:45: 27:fd:83:09:cb:70:da:73:8a:2a:11:22:dc:ab:ba:76:fb:5f: a9:a3:be:c9:e8:d1:d2:ad:09:ff:4a:a9:f3:23:f2:4e:ec:3b: e5:7c:c6:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwNTEyMTcwMjUzWhcNMjUwNTE5MTcwMjUzWjAYMRYwFAYD VQQDEw02ODIyMjliZC0xYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLMUazWKrSzz99kKrDx139HUixIft8ijJnmIWI8fQm1pJqCO6+toKnxzaL+0 F13p3XHNhvdYUVlKoPcdqscEGf03sBg3aei5ZzoC2tbpAtkcVn8qtfKpnIOUvdYf 2m05btMNQ06E4ks3RedoAtlgyZbAXVsYcKH/ieexv6/6eO0ttDpXOdvPmtzjt4AL 8Tthj1rMERSMCeTXGAD6NLRk5fEUPU0HjJ7tFgyMi2ejzDd6tLGtKKxYCgeOEE76 9HyRTeLNVTzTz+PXLicSWjdcFipV+FGBUai/2+/pMDBh3OEDXNoSH2qDVu1Sa099 VLKkucLqIeDwebjUtLvJbb444wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2N5qOK wIIyt7FV0qnejRnIH69YMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFXqy/dqqjBP4HoEp4wPUB5XO7pAzhLDSew0mKQuiaWGHdEs9dJttA h0xH5cLczhA2jwQyaGNLrGP7NxOXl29OcaA3XObwyaHkjjUrI5WISTKI0Mc2lrF3 3/ueesfw0jLgXV6Q6PyB4ZdEj1cwosTyjX0yue2Fk9mPIeXl9jxjA31iErBHmJl4 L+Ggs72a24+mNRaj0DgqmWdnOmegrSCP4iLbZu50CxivQz4Hr+syMrB5ig3SzCO0 EBFYS9zuOSxMO3DB2bYcdASU+2qwbYRhzd/p+pw0g0Un/YMJy3Dac4oqESLcq7p2 +1+po77J6NHSrQn/SqnzI/JO7DvlfMbE -----END CERTIFICATE-----Generated at Wed May 14 10:36:22 2025 by rpki-client