$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json) Hash identifier: vrQAxFR+EQrHj1cRcJq2eDyMbQDQNrQKDTbEh6EWMNI= Subject key identifier: B4:CE:74:FB:20:BA:37:CB:FA:09:0A:B1:32:2E:FA:95:C9:BB:10:38 Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft Manifest number: 0722 Signing time: Mon 12 May 2025 21:36:52 +0000 Manifest this update: Mon 12 May 2025 21:36:51 +0000 Manifest next update: Mon 19 May 2025 21:36:51 +0000 Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: AKLtFTRSakiUBNw8be8USQdWhFAqJTxYQ48swO/j3YE=) 2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: 92lyXbjZ3ilhbPTi3bIiIM9WxhIE8HDP3fXz3FH+B/0=) 3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: 7lwNL3t/JdazFMQVAAWu8rGphtVMmdlmg5/1e8s3fEI=) 4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: Yj2T58ly70pMGwVD+Jsc26BVVEHVfIBLr1Bjam0IA4A=) 5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: VBFrb7hmUOgI2LuDUX5a6ibtYNZDHswnzaDArlyUmUg=) 6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: Keuv9NsRlWrR3IwwftF+Sux47myitkAj0p1n+TAix+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852 Validity Not Before: May 12 21:36:51 2025 GMT Not After : May 19 21:36:51 2025 GMT Subject: CN=682269f3-0b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:b7:07:85:5f:bf:74:14:34:b9:30:9c:fe: 92:c3:c8:41:ae:1a:b9:22:bb:5c:4a:ca:be:9a:b9: 02:3b:f6:51:14:ce:10:05:a5:15:a6:f2:fc:33:c1: 80:b0:b8:31:5b:77:58:c6:e4:00:68:4e:40:e4:e4: 24:34:1c:07:70:fc:32:f7:c6:0c:2b:cc:ab:1c:fc: db:47:0a:82:ac:b9:59:71:19:27:38:45:e2:1c:b0: 11:3b:ba:52:4f:34:86:e3:f0:50:45:be:33:35:bd: df:30:d3:14:39:58:47:fe:b7:f9:ca:b8:7c:a0:bd: 3d:49:b6:47:53:38:77:48:cb:38:44:4d:e7:a9:08: ea:e4:14:81:07:e0:bb:2d:c0:9c:ae:e0:25:00:ed: 67:9e:fa:1a:79:6f:ec:ad:34:fe:c0:74:0b:fb:cf: af:79:35:97:18:fd:76:87:8d:3e:c0:8d:10:72:d2: 90:91:29:07:82:2c:5b:e5:7b:d9:0b:42:72:13:aa: 22:48:17:6e:4f:0e:6e:52:09:52:49:a2:90:e2:49: b7:fb:a6:e1:00:d2:23:8c:41:8c:dc:4d:fe:c7:b0: 1c:44:52:84:67:53:df:2d:62:74:9f:9d:6e:c3:9a: 8b:2f:a0:e3:5a:e1:3d:03:6a:51:95:3a:8f:50:f2: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:74:FB:20:BA:37:CB:FA:09:0A:B1:32:2E:FA:95:C9:BB:10:38 X509v3 Authority Key Identifier: keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:27:0f:88:8e:eb:1d:b9:83:4a:d5:2a:f6:2d:02:d8:70:44: 33:f5:52:67:8d:61:02:8e:b2:40:cc:63:84:56:05:b1:76:e0: 28:6a:ab:76:c6:b7:33:68:40:87:75:0c:de:ea:8e:d6:a3:36: 62:31:7d:25:6b:54:86:fb:f4:58:75:68:86:b4:76:a9:ae:2c: 5d:d9:31:af:c9:9c:78:14:dd:03:8f:df:43:7e:ce:08:eb:b8: 59:53:a9:e1:72:c0:2c:36:09:48:ba:0f:99:f0:3f:f8:5c:22: de:d6:ca:f8:01:8c:9d:c5:39:d4:9d:64:a4:2e:1b:cb:3a:ae: d8:36:40:f1:2a:03:9d:ce:e5:68:ad:e2:ef:2d:7d:01:2b:94: b2:ec:a4:94:0e:f8:81:af:d5:16:04:d4:7f:12:5f:f0:dd:8e: 9e:04:d9:25:75:2c:8b:cf:b2:1a:71:6e:27:29:9c:2b:e3:31: 26:e6:df:9e:c3:a3:23:a4:59:29:ad:a1:0f:4b:b5:90:97:14: 6a:cd:64:5d:5c:8a:38:0a:66:a1:a1:d9:2f:6d:ba:96:ea:9a: 3e:29:19:a7:4b:3e:50:bb:22:55:25:91:1a:c1:e1:99:90:71: de:25:af:9a:71:d0:7c:f9:f5:75:19:2e:2a:bb:0b:61:7d:5d: 05:df:51:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKEJDQjgwREU0NDcwNUNGQzRGODM5Nzg1OTBDOUYzRkMy RTJDMkY4NTIwHhcNMjUwNTEyMjEzNjUxWhcNMjUwNTE5MjEzNjUxWjAYMRYwFAYD VQQDEw02ODIyNjlmMy0wYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxy3B4Vfv3QUNLkwnP6Sw8hBrhq5IrtcSsq+mrkCO/ZRFM4QBaUVpvL8M8GA sLgxW3dYxuQAaE5A5OQkNBwHcPwy98YMK8yrHPzbRwqCrLlZcRknOEXiHLARO7pS TzSG4/BQRb4zNb3fMNMUOVhH/rf5yrh8oL09SbZHUzh3SMs4RE3nqQjq5BSBB+C7 LcCcruAlAO1nnvoaeW/srTT+wHQL+8+veTWXGP12h40+wI0QctKQkSkHgixb5XvZ C0JyE6oiSBduTw5uUglSSaKQ4km3+6bhANIjjEGM3E3+x7AcRFKEZ1PfLWJ0n51u w5qLL6DjWuE9A2pRlTqPUPI1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTOdPsg ujfL+gkKsTIu+pXJuxA4MB8GA1UdIwQYMBaAFLy4DeRHBc/E+Dl4WQyfP8LiwvhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GMUE5QkFCQzMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4VDRPWGhaREo4X3d1TEMt RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZMZ041RWNGejhUNE9YaFpESjhfd3VMQy1GSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GMUE5QkFCQzMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4 VDRPWGhaREo4X3d1TEMtRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmJw+IjusduYNK1Sr2LQLYcEQz9VJnjWECjrJAzGOEVgWxduAoaqt2 xrczaECHdQze6o7WozZiMX0la1SG+/RYdWiGtHaprixd2TGvyZx4FN0Dj99Dfs4I 67hZU6nhcsAsNglIug+Z8D/4XCLe1sr4AYydxTnUnWSkLhvLOq7YNkDxKgOdzuVo reLvLX0BK5Sy7KSUDviBr9UWBNR/El/w3Y6eBNkldSyLz7IacW4nKZwr4zEm5t+e w6MjpFkpraEPS7WQlxRqzWRdXIo4CmahodkvbbqW6po+KRmnSz5QuyJVJZEaweGZ kHHeJa+acdB8+fV1GS4quwthfV0F31F2 -----END CERTIFICATE-----Generated at Tue May 13 15:07:50 2025 by rpki-client