$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: nfQD5Jm2iNVAmFN0U8Vx1NCUHK4vQdwfpE8TX/KW9eg= Subject key identifier: 09:8E:51:52:F0:DA:AA:6A:8F:8A:C2:B8:A3:F9:A4:12:BF:3A:05:3D Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 128C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 1285 Signing time: Wed 14 May 2025 17:10:53 +0000 Manifest this update: Wed 14 May 2025 17:10:52 +0000 Manifest next update: Wed 21 May 2025 17:10:52 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: ms6DxfqSTgnJ+xsqbhYWgIWbWvkSuIDAQfOeR6nA6mw=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: May 14 17:10:52 2025 GMT Not After : May 21 17:10:52 2025 GMT Subject: CN=6824ce9c-aecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:11:6d:7e:44:be:3e:13:e4:42:b3:63:fd: 27:c7:88:bc:9e:fa:7f:87:d0:45:37:ab:1e:98:4c: 36:8e:6e:08:50:4e:36:c2:ee:ab:9c:a9:34:68:ac: 9d:a5:b0:7f:f6:db:a8:3f:d2:f8:64:ab:70:29:52: a0:06:f3:ef:16:9a:8d:49:8f:42:1a:ce:c9:76:d6: f3:34:32:67:cd:59:91:d1:b6:aa:11:bb:17:15:44: 6a:4f:4b:18:29:19:88:2f:8d:c3:25:eb:c2:c1:16: b1:dc:db:7d:b0:c5:7f:c4:51:bb:1f:8a:44:2c:89: 26:44:76:0f:88:4c:bc:73:2f:bb:c3:b2:20:6d:af: 89:ad:49:3c:ea:9d:9d:af:0a:13:35:32:26:68:44: 32:ae:a2:b8:cf:24:64:1c:f6:f9:f2:15:5b:09:dc: de:cb:1b:33:0f:23:6f:0e:f2:7c:bf:37:e9:dd:20: 42:46:67:6d:a6:c1:7c:a1:f1:69:3e:43:30:ed:0e: c5:f1:74:01:8b:e7:50:22:60:fa:51:ba:1c:fd:b5: dd:80:36:37:72:60:7d:f5:eb:38:49:c7:90:cb:0f: 8b:1e:c3:5d:a9:c8:88:6a:28:9c:22:42:26:49:14: c8:82:c8:dc:21:c8:84:0a:d0:e5:87:c9:ee:92:98: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:51:52:F0:DA:AA:6A:8F:8A:C2:B8:A3:F9:A4:12:BF:3A:05:3D X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:57:d3:10:2e:9f:10:01:c4:23:79:5c:7d:1d:24:48:53:20: 4c:78:6d:e4:f5:28:ca:3f:1d:c9:35:c1:3d:05:7b:6c:d6:b6: a7:75:44:5d:7e:39:44:56:12:13:a6:15:9f:c0:20:a4:02:fb: d2:88:d4:3f:b7:f1:de:e7:6f:e4:12:1c:68:30:da:91:30:63: 1d:9f:5a:ed:05:7c:5c:db:ca:98:21:93:c2:34:1d:46:c4:d0: 60:62:c4:be:83:66:5f:7a:c8:47:0a:fc:e8:d2:7b:9b:2a:cf: 9d:61:94:63:9a:06:e2:5c:d5:cc:d3:9c:e6:9b:bd:66:2b:66: 87:f7:31:0c:e9:24:60:79:15:38:60:6f:56:89:00:e6:89:d6: 73:09:80:88:97:f5:b4:01:d2:5a:85:4e:a3:04:76:81:e2:21: eb:38:aa:e9:aa:fa:ca:9d:92:61:d1:84:24:8d:bb:43:f4:7b: 09:0b:c0:7b:d0:8f:7d:81:ad:6d:a0:28:a0:29:95:a7:78:7c: be:ec:8e:a7:cd:15:7c:75:79:bb:39:ac:94:cb:93:32:bd:4c: 2c:a0:7b:21:96:5e:cb:fd:cf:b7:60:87:c0:1e:fd:64:e3:3f: 72:39:c7:9e:04:c3:02:cc:04:eb:63:bb:38:c7:dc:34:45:6b: c6:0d:b3:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjUwNTE0MTcxMDUyWhcNMjUwNTIxMTcxMDUyWjAYMRYwFAYD VQQDEw02ODI0Y2U5Yy1hZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV4RbX5Evj4T5EKzY/0nx4i8nvp/h9BFN6semEw2jm4IUE42wu6rnKk0aKyd pbB/9tuoP9L4ZKtwKVKgBvPvFpqNSY9CGs7JdtbzNDJnzVmR0baqEbsXFURqT0sY KRmIL43DJevCwRax3Nt9sMV/xFG7H4pELIkmRHYPiEy8cy+7w7Igba+JrUk86p2d rwoTNTImaEQyrqK4zyRkHPb58hVbCdzeyxszDyNvDvJ8vzfp3SBCRmdtpsF8ofFp PkMw7Q7F8XQBi+dQImD6Uboc/bXdgDY3cmB99es4SceQyw+LHsNdqciIaiicIkIm SRTIgsjcIciECtDlh8nukpgeXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmOUVLw 2qpqj4rCuKP5pBK/OgU9MB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdV9MQLp8QAcQjeVx9HSRIUyBMeG3k9SjKPx3JNcE9BXts1randURd fjlEVhITphWfwCCkAvvSiNQ/t/He52/kEhxoMNqRMGMdn1rtBXxc28qYIZPCNB1G xNBgYsS+g2ZfeshHCvzo0nubKs+dYZRjmgbiXNXM05zmm71mK2aH9zEM6SRgeRU4 YG9WiQDmidZzCYCIl/W0AdJahU6jBHaB4iHrOKrpqvrKnZJh0YQkjbtD9HsJC8B7 0I99ga1toCigKZWneHy+7I6nzRV8dXm7OayUy5MyvUwsoHshll7L/c+3YIfAHv1k 4z9yOceeBMMCzATrY7s4x9w0RWvGDbOL -----END CERTIFICATE-----Generated at Thu May 15 06:47:28 2025 by rpki-client