$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: SHxTIUyHkP71kWB/FrPp8HY5vvZPoi1zRUSwY20HN8g= Subject key identifier: 78:49:29:52:B5:85:F9:E3:0A:5F:49:59:03:06:5C:0D:41:3A:65:EB Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 01E8 Signing time: Tue 13 May 2025 01:52:49 +0000 Manifest this update: Tue 13 May 2025 01:52:49 +0000 Manifest next update: Tue 20 May 2025 01:52:49 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: RUbPUCE4xTQ1AdeBjm5Sp4zBAdcn4k1GUd9Mveap9uo=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: May 13 01:52:49 2025 GMT Not After : May 20 01:52:49 2025 GMT Subject: CN=6822a5f1-5171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:54:fb:d0:14:02:cb:87:15:5c:55:85:65: 3f:97:00:aa:ae:9f:cc:e9:38:e5:a6:49:5d:da:14: 08:00:11:9d:f2:a2:87:21:9f:d1:e9:6e:24:6f:25: 63:17:9b:5a:e4:dd:ec:1f:fb:01:6b:74:31:d4:06: dd:55:1d:93:dc:b1:d1:8f:21:b0:ec:f9:81:a4:a6: 5d:1f:d0:e9:e4:1d:13:32:8f:9b:e6:ff:ff:fa:39: 1c:0c:6a:54:93:18:7c:2a:70:ff:3c:53:ba:62:da: be:90:2a:0c:b0:b0:25:76:fe:c3:3f:ff:17:c7:6b: 37:07:15:56:54:74:59:6c:8f:39:b7:f1:19:97:a6: 35:18:34:92:a2:88:e4:5b:e5:65:1d:82:4c:3a:fc: 5b:ab:01:5d:32:2a:7a:2d:7a:0c:ff:88:52:97:8a: e6:8f:3e:d2:d7:8b:18:ef:da:b5:43:26:39:55:64: ac:7b:05:57:73:b1:d2:d4:b4:cc:ea:c4:8b:a5:9b: 4f:e4:ef:0f:b9:ae:8b:5b:56:cc:01:ec:73:76:d2: 9c:74:b7:3e:60:cb:51:a0:4b:0d:5b:17:3d:4d:65: 54:ae:c6:73:9a:fe:72:ef:48:81:be:1e:46:74:d2: e5:95:79:90:3f:e9:ae:36:b8:6d:35:c8:2d:9e:2c: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:29:52:B5:85:F9:E3:0A:5F:49:59:03:06:5C:0D:41:3A:65:EB X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:68:6c:1b:1b:0c:ee:ce:95:fc:99:61:54:01:9d:e9:6c:9a: cf:4b:db:3b:f0:7b:38:d4:f9:e8:78:fd:c6:7c:ba:e6:ec:8e: fc:79:4a:fd:38:9b:65:fa:58:36:74:4a:2c:3b:d8:2c:15:f2: f6:42:c1:fd:0f:bb:f5:72:7a:4f:cb:77:7e:0d:c3:aa:e2:54: 8f:93:a1:8a:dc:f0:e0:02:ee:29:d8:95:86:41:e9:54:40:8b: aa:b6:97:d5:72:14:7f:5c:21:b4:d9:35:c7:6f:11:b0:b7:00: e6:a0:63:02:ec:b6:90:91:d7:64:c2:6c:36:7e:91:fa:52:1e: aa:cc:51:65:4f:96:21:81:80:b3:93:61:37:cc:e8:77:fd:af: a1:a2:f7:b3:ad:a5:3b:01:f7:55:1f:77:86:ec:8a:82:39:6f: 3c:91:8c:ac:df:2c:4a:70:56:31:47:ac:97:0f:8e:3e:05:72: b0:a7:fc:d1:cc:fb:4a:f6:bc:00:58:b4:44:b4:23:ee:a0:a7: 5d:f6:81:0c:9a:42:ab:69:02:61:2d:19:b7:a8:95:69:6e:d5: f9:d9:9d:6f:0d:73:90:1b:4b:fc:f3:9b:e9:6a:f0:38:40:f1: 14:a2:4d:df:65:35:db:52:95:61:fb:c8:0b:ff:71:7c:f8:10: b5:24:55:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjUwNTEzMDE1MjQ5WhcNMjUwNTIwMDE1MjQ5WjAYMRYwFAYD VQQDEw02ODIyYTVmMS01MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrJU+9AUAsuHFVxVhWU/lwCqrp/M6Tjlpkld2hQIABGd8qKHIZ/R6W4kbyVj F5ta5N3sH/sBa3Qx1AbdVR2T3LHRjyGw7PmBpKZdH9Dp5B0TMo+b5v//+jkcDGpU kxh8KnD/PFO6Ytq+kCoMsLAldv7DP/8Xx2s3BxVWVHRZbI85t/EZl6Y1GDSSoojk W+VlHYJMOvxbqwFdMip6LXoM/4hSl4rmjz7S14sY79q1QyY5VWSsewVXc7HS1LTM 6sSLpZtP5O8Pua6LW1bMAexzdtKcdLc+YMtRoEsNWxc9TWVUrsZzmv5y70iBvh5G dNLllXmQP+muNrhtNcgtniwSeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhJKVK1 hfnjCl9JWQMGXA1BOmXrMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqaGwbGwzuzpX8mWFUAZ3pbJrPS9s78Hs41PnoeP3GfLrm7I78eUr9 OJtl+lg2dEosO9gsFfL2QsH9D7v1cnpPy3d+DcOq4lSPk6GK3PDgAu4p2JWGQelU QIuqtpfVchR/XCG02TXHbxGwtwDmoGMC7LaQkddkwmw2fpH6Uh6qzFFlT5YhgYCz k2E3zOh3/a+hovezraU7AfdVH3eG7IqCOW88kYys3yxKcFYxR6yXD44+BXKwp/zR zPtK9rwAWLREtCPuoKdd9oEMmkKraQJhLRm3qJVpbtX52Z1vDXOQG0v885vpavA4 QPEUok3fZTXbUpVh+8gL/3F8+BC1JFVc -----END CERTIFICATE-----Generated at Wed May 14 11:31:53 2025 by rpki-client