$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json) Hash identifier: NrcQmBigbUJBUUjVv37zl7laJutgSqPH7K4jcyrCx4o= Subject key identifier: 3F:44:B8:E7:1E:A7:B7:4E:4F:9E:C8:55:ED:DC:87:A2:AD:01:96:DC Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft Manifest number: 02C4 Signing time: Sun 11 May 2025 00:57:05 +0000 Manifest this update: Sun 11 May 2025 00:57:05 +0000 Manifest next update: Sun 18 May 2025 00:57:05 +0000 Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: MVxzHRyJGs8Y+f0dH7vRxU1/2n2uLtonLq6BU3v3IR0=) 2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: +bhmDLl/B0RomjsU7MW7xevtY9GqNCpc/xDljwJVPAo=) 3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: OqHjS/HS8e7S5i/skx8l2IsJyhS/M18aAyJkpcYv//Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: May 11 00:57:05 2025 GMT Not After : May 18 00:57:05 2025 GMT Subject: CN=681ff5e1-2322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b2:2e:7f:86:ff:5e:b9:57:33:c3:8a:4f:41: 1c:92:c7:92:ed:b3:b1:04:04:7c:79:b1:ca:2b:6a: 9b:57:5a:ca:e7:45:d4:fc:de:a4:ab:a8:06:47:f5: f1:7d:d1:40:80:56:06:d1:db:94:52:72:17:d7:aa: 50:b5:8b:d1:c9:0f:ff:4b:3f:26:3a:7d:6c:b5:8b: dc:c4:5d:93:dd:25:55:b6:5b:61:71:0b:66:65:b5: b1:7c:93:df:1a:89:74:72:36:07:5c:e5:0c:e8:ea: 3e:d1:f8:82:80:09:14:07:b4:a8:54:f3:09:0a:3d: 51:a2:63:dc:43:b4:e0:26:a7:4e:48:bf:f3:38:9f: 4f:e7:43:1b:4d:fe:5d:ce:f5:c1:2e:33:c3:64:76: ea:bb:2b:d7:f7:f2:5c:31:a3:5f:0b:c0:d1:5e:6b: 7a:1d:58:b8:e3:08:e8:49:90:17:55:ef:e7:77:a9: e4:e7:a1:63:70:34:3f:bd:e5:fa:81:fc:40:0c:79: 2c:49:f7:c4:4d:c6:ee:62:00:3f:70:9b:1d:3c:6e: c8:34:3e:ce:91:1a:bd:6e:41:48:2d:28:31:16:e9: 0f:d4:48:03:bb:a0:a7:cd:c2:d7:40:b4:d3:99:d2: ed:9a:3c:63:7c:76:a4:40:51:3a:57:ad:5e:ae:ad: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:44:B8:E7:1E:A7:B7:4E:4F:9E:C8:55:ED:DC:87:A2:AD:01:96:DC X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:52:30:ae:c5:8d:b3:bb:2c:c7:b0:c6:82:d8:23:3f:7d:81: 60:b4:90:b0:c2:cf:73:d7:dd:a8:78:eb:79:51:d1:45:41:d9: e7:6d:76:2c:ce:98:cf:8a:eb:51:d1:93:01:54:90:04:de:14: d7:31:5a:87:fc:58:b0:da:0f:ef:f0:69:74:0b:e7:72:d7:df: 8f:cd:8f:0e:44:37:20:1c:1f:7f:d6:5c:05:57:14:5e:ae:2f: 05:ba:79:39:7b:49:fa:02:55:9e:8b:33:e8:61:f6:53:5e:56: bf:4a:fa:36:52:5e:c1:ab:fc:df:53:fe:40:be:90:48:1c:05: ab:a7:48:cb:35:d9:67:da:c4:d1:58:2b:47:72:d0:91:3b:bb: d2:cf:63:30:5c:5d:e2:b8:fd:b6:ee:1b:cc:41:fa:d2:fd:92: 8f:fe:4c:92:93:57:3d:4c:6c:59:fd:1f:6c:09:b4:b2:7a:2e: 4e:75:3e:e4:2a:57:60:f5:82:de:91:c5:25:69:d3:1b:1c:c8: 59:66:5d:4c:c1:ea:17:8f:00:8e:c0:06:bc:13:91:92:c5:27: 65:a2:80:2e:cf:89:25:10:b3:7f:3d:7c:ef:81:23:a5:b3:bd: 0a:a0:98:a1:94:56:1b:5c:47:b6:36:99:79:35:55:99:ca:e3: ee:96:a0:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjUwNTExMDA1NzA1WhcNMjUwNTE4MDA1NzA1WjAYMRYwFAYD VQQDEw02ODFmZjVlMS0yMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bIuf4b/XrlXM8OKT0EckseS7bOxBAR8ebHKK2qbV1rK50XU/N6kq6gGR/Xx fdFAgFYG0duUUnIX16pQtYvRyQ//Sz8mOn1stYvcxF2T3SVVtlthcQtmZbWxfJPf Gol0cjYHXOUM6Oo+0fiCgAkUB7SoVPMJCj1RomPcQ7TgJqdOSL/zOJ9P50MbTf5d zvXBLjPDZHbquyvX9/JcMaNfC8DRXmt6HVi44wjoSZAXVe/nd6nk56FjcDQ/veX6 gfxADHksSffETcbuYgA/cJsdPG7IND7OkRq9bkFILSgxFukP1EgDu6CnzcLXQLTT mdLtmjxjfHakQFE6V61erq2vqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9EuOce p7dOT57IVe3ch6KtAZbcMB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6 a1BNcUNxUHpZVWVGcjg1OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHUjCuxY2zuyzHsMaC2CM/fYFgtJCwws9z192oeOt5UdFFQdnnbXYs zpjPiutR0ZMBVJAE3hTXMVqH/Fiw2g/v8Gl0C+dy19+PzY8ORDcgHB9/1lwFVxRe ri8Funk5e0n6AlWeizPoYfZTXla/Svo2Ul7Bq/zfU/5AvpBIHAWrp0jLNdln2sTR WCtHctCRO7vSz2MwXF3iuP227hvMQfrS/ZKP/kySk1c9TGxZ/R9sCbSyei5OdT7k Kldg9YLekcUladMbHMhZZl1MweoXjwCOwAa8E5GSxSdlooAuz4klELN/PXzvgSOl s70KoJihlFYbXEe2Npl5NVWZyuPulqBU -----END CERTIFICATE-----Generated at Sun May 11 22:18:28 2025 by rpki-client