$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: ByAI/jNoIniS6HT7s3FvnCyIaMe7zF+oSs/I1ZZzphA= Subject key identifier: D6:C3:36:ED:16:73:F2:D1:B6:D7:6F:3C:F7:0D:3B:07:D6:1A:F1:D1 Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: 7A Signing time: Sun 11 May 2025 05:28:27 +0000 Manifest this update: Sun 11 May 2025 05:28:26 +0000 Manifest next update: Sun 18 May 2025 05:28:26 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: UC5jiDeoJyP7g0rSzVJFl0udL3xRN/apz4fHUf7Rn8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: May 11 05:28:26 2025 GMT Not After : May 18 05:28:26 2025 GMT Subject: CN=6820357b-3daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:f3:f7:8b:c4:20:f4:05:87:28:48:d5:65: 7f:04:7b:d5:be:fa:b5:de:1c:6b:fa:f4:7f:78:eb: 1f:84:42:fc:89:68:6b:18:39:5d:8b:de:f4:25:b7: c8:cc:53:a1:65:5a:e3:01:ad:73:7d:b2:3c:6f:48: 6f:4b:58:28:b4:22:10:d4:46:07:0e:65:a8:30:e1: 09:07:39:9c:6a:20:43:9c:8e:46:f8:a4:d7:05:48: 21:3c:d6:3e:24:98:29:07:52:ba:05:45:db:57:fc: fe:aa:08:e9:da:dd:e7:03:47:c1:9b:c2:94:a7:29: dc:54:a4:a9:9b:63:23:e3:b6:92:ad:1a:d0:2f:1f: 2b:15:d3:b6:62:b8:61:bd:37:4b:66:68:8f:dd:a6: 61:63:03:3a:06:14:eb:f7:fa:d8:97:d7:4a:2a:a4: 00:32:c0:46:32:aa:c9:a6:92:47:89:1f:62:3a:c5: 0d:ff:a5:13:1f:a8:89:73:5d:9e:51:45:84:66:2b: f2:cc:0c:bd:ea:b3:4b:0c:cc:fd:91:47:99:8b:7a: c3:ec:4a:8a:91:22:8a:0d:d0:b1:bd:a0:a0:ea:6b: 5a:d9:52:e3:87:c4:2d:e2:d5:dc:7e:f8:42:21:8f: 19:3a:b8:1a:28:20:d9:c2:b5:8a:1f:9e:3c:71:65: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:36:ED:16:73:F2:D1:B6:D7:6F:3C:F7:0D:3B:07:D6:1A:F1:D1 X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f9:6e:e4:a8:c4:76:81:76:6a:17:e4:10:d5:6d:f7:95:54: 8f:f9:08:e8:8f:94:f8:a6:ea:ff:d7:8e:dc:2a:f0:e8:e3:91: be:de:53:ca:48:96:1a:5f:7c:1d:34:5a:12:dc:85:e9:12:06: 57:74:f3:c4:01:8b:d9:f4:f2:86:82:1d:0d:b3:fc:4b:f1:f1: 9f:52:02:ae:50:3e:a6:2f:76:68:4c:45:43:38:b5:21:2d:32: 8e:1b:27:a0:e0:64:18:08:04:c4:e0:16:dc:d1:18:94:95:6e: 1a:1c:1f:16:73:49:f1:e7:53:87:0f:35:37:3f:1f:e3:fc:44: 7a:d1:28:a7:57:71:2f:a0:2e:de:2b:06:b0:ea:cb:b1:95:09: c5:29:b6:98:5f:a2:73:af:18:9c:69:ef:03:6d:48:11:40:b4: 57:3f:55:82:68:49:a8:47:0e:19:09:c1:da:a6:e1:37:e1:ff: 52:2d:d1:8a:43:8e:15:47:82:4c:ab:2a:4d:65:6c:37:f6:70: 37:be:65:0d:41:8d:05:e2:57:5b:37:7a:6d:ed:20:aa:fd:73: c1:ee:1e:da:38:93:83:7c:ee:22:db:93:ed:f9:ff:39:e8:c5: 8f:5e:be:df:50:e7:7f:d3:37:7b:8a:b6:0a:93:ea:3c:3d:3f: 24:89:fc:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDNGMDExMC8GA1UEBRMoQkQ5MjYyNkI0MDBCQjE0REU0MUE1MDUzOUQ5NjBGQzVE RDYxREMzNzAeFw0yNTA1MTEwNTI4MjZaFw0yNTA1MTgwNTI4MjZaMBgxFjAUBgNV BAMTDTY4MjAzNTdiLTNkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiQfP3i8Qg9AWHKEjVZX8Ee9W++rXeHGv69H946x+EQvyJaGsYOV2L3vQlt8jM U6FlWuMBrXN9sjxvSG9LWCi0IhDURgcOZagw4QkHOZxqIEOcjkb4pNcFSCE81j4k mCkHUroFRdtX/P6qCOna3ecDR8GbwpSnKdxUpKmbYyPjtpKtGtAvHysV07ZiuGG9 N0tmaI/dpmFjAzoGFOv3+tiX10oqpAAywEYyqsmmkkeJH2I6xQ3/pRMfqIlzXZ5R RYRmK/LMDL3qs0sMzP2RR5mLesPsSoqRIooN0LG9oKDqa1rZUuOHxC3i1dx++EIh jxk6uBooINnCtYofnjxxZReDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1sM27RZz 8tG212889w07B9Ya8dEwHwYDVR0jBBgwFoAUvZJia0ALsU3kGlBTnZYPxd1h3Dcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0M0YwL0NBNkI5NENDNzRG ODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlpKaWEwQUxzVTNrR2xCVG5aWVB4ZDFoM0RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 M0YwL0NBNkI5NENDNzRGODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uz a0dsQlRuWllQeGQxaDNEYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMf5buSoxHaBdmoX5BDVbfeVVI/5COiPlPim6v/Xjtwq8Ojjkb7eU8pI lhpffB00WhLchekSBld088QBi9n08oaCHQ2z/Evx8Z9SAq5QPqYvdmhMRUM4tSEt Mo4bJ6DgZBgIBMTgFtzRGJSVbhocHxZzSfHnU4cPNTc/H+P8RHrRKKdXcS+gLt4r BrDqy7GVCcUptphfonOvGJxp7wNtSBFAtFc/VYJoSahHDhkJwdqm4Tfh/1It0YpD jhVHgkyrKk1lbDf2cDe+ZQ1BjQXiV1s3em3tIKr9c8HuHto4k4N87iLbk+35/zno xY9evt9Q53/TN3uKtgqT6jw9PySJ/FQ= -----END CERTIFICATE-----Generated at Mon May 12 04:07:15 2025 by rpki-client