$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json) Hash identifier: 1tgot/wdN2eBG/ozs21KxuufQ1bWXjeLUNZp16kPhnM= Subject key identifier: 48:B7:6B:31:14:8B:76:23:23:6D:71:59:0A:8E:7E:2C:CB:A4:A7:B1 Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft Manifest number: 0CD4 Signing time: Mon 12 May 2025 18:09:04 +0000 Manifest this update: Mon 12 May 2025 18:09:04 +0000 Manifest next update: Mon 19 May 2025 18:09:04 +0000 Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: 2pQ2Qhz3Jurd7rWdC+qr+Uy3Q/9J/CeHNToX/a+Y/F0=) 2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: May 12 18:09:04 2025 GMT Not After : May 19 18:09:04 2025 GMT Subject: CN=68223940-87b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:a1:97:a8:bd:77:b9:90:1d:d4:93:20:fa: e8:37:4c:06:f7:62:07:0b:1b:8f:bd:cc:ef:9e:9d: c3:bf:6c:a8:b2:02:9f:8e:35:32:f1:30:14:1d:20: 91:ff:93:77:b7:9f:b9:5b:22:a8:75:03:06:96:b3: 20:d4:a8:49:59:4f:c5:9d:13:4f:69:29:81:34:47: 42:cb:68:b1:32:5f:5d:35:a8:d4:66:08:58:c8:38: cb:87:37:94:c3:1f:af:9e:5c:f0:7a:89:e3:ad:e3: 83:87:53:d6:cf:ff:31:0e:9e:a9:78:37:d6:3c:9e: 96:a3:c4:4a:28:49:72:27:4e:42:40:9a:ec:0b:97: 58:5b:88:07:05:79:2f:1c:c3:18:f3:97:66:8f:f6: e8:d4:ab:6a:82:36:e4:86:14:67:d1:80:e0:69:5c: f9:0a:dd:fa:14:69:78:78:fe:b2:95:10:8a:3e:2f: aa:81:39:e2:ef:35:27:45:b4:bc:1f:57:3b:d0:3e: 4c:c0:e4:19:ea:d3:0a:ae:6e:3f:97:52:5a:0f:d4: db:52:26:d2:46:3e:e4:89:0b:0b:a2:a1:df:b2:5f: 8a:13:20:d8:f7:f8:69:3b:84:5e:7b:0b:e7:83:a5: ba:38:9f:38:33:c7:e7:2d:28:68:57:6c:24:d9:51: 8c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B7:6B:31:14:8B:76:23:23:6D:71:59:0A:8E:7E:2C:CB:A4:A7:B1 X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c2:59:25:21:42:08:85:3f:63:d2:02:32:97:3c:bd:2f:a9: 31:81:86:ce:2d:d4:e8:e8:39:07:c8:12:b4:3c:8c:71:9b:b4: 65:0d:89:c8:54:b4:c1:5c:3d:21:7d:5c:db:4e:eb:03:8d:b1: e5:6f:fe:c6:a0:d9:40:1a:6d:8a:b2:e0:73:7c:3d:6f:4e:3a: 13:23:1f:65:1d:aa:de:62:c5:a1:b1:9e:4e:1d:9c:9c:d1:b1: 19:c6:32:c8:9a:2c:f4:72:26:aa:80:93:41:74:81:14:1c:6a: 9d:e9:95:a9:f8:f8:38:6f:ba:41:ab:5f:0c:44:29:99:37:7b: 0a:30:ea:71:ef:f3:76:29:a3:b4:b7:35:c0:de:06:2a:ee:f1: d2:83:9c:71:cb:55:14:7d:f7:07:b5:ee:bd:06:09:d6:6a:c0: d2:87:2c:2b:75:1c:94:40:5a:a3:91:8e:bb:30:c4:75:bd:38: db:e3:24:66:f9:b6:43:5c:8c:5a:c0:ca:38:48:08:bd:70:b4: 80:04:35:cc:7a:4a:3f:ea:aa:d0:00:8f:fc:69:fd:8c:9e:ee: b5:4a:c5:87:98:ba:01:55:0f:aa:b4:12:fb:87:1a:1b:fd:b2: 64:f9:96:63:c7:1e:cc:cb:5f:e2:73:83:00:0b:fd:40:b8:f8: 3c:70:5f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUwNTEyMTgwOTA0WhcNMjUwNTE5MTgwOTA0WjAYMRYwFAYD VQQDEw02ODIyMzk0MC04N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nGhl6i9d7mQHdSTIProN0wG92IHCxuPvczvnp3Dv2yosgKfjjUy8TAUHSCR /5N3t5+5WyKodQMGlrMg1KhJWU/FnRNPaSmBNEdCy2ixMl9dNajUZghYyDjLhzeU wx+vnlzweonjreODh1PWz/8xDp6peDfWPJ6Wo8RKKElyJ05CQJrsC5dYW4gHBXkv HMMY85dmj/bo1KtqgjbkhhRn0YDgaVz5Ct36FGl4eP6ylRCKPi+qgTni7zUnRbS8 H1c70D5MwOQZ6tMKrm4/l1JaD9TbUibSRj7kiQsLoqHfsl+KEyDY9/hpO4Reewvn g6W6OJ84M8fnLShoV2wk2VGMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi3azEU i3YjI21xWQqOfizLpKexMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIwlklIUIIhT9j0gIylzy9L6kxgYbOLdTo6DkHyBK0PIxxm7RlDYnI VLTBXD0hfVzbTusDjbHlb/7GoNlAGm2KsuBzfD1vTjoTIx9lHareYsWhsZ5OHZyc 0bEZxjLImiz0ciaqgJNBdIEUHGqd6ZWp+Pg4b7pBq18MRCmZN3sKMOpx7/N2KaO0 tzXA3gYq7vHSg5xxy1UUffcHte69BgnWasDShywrdRyUQFqjkY67MMR1vTjb4yRm +bZDXIxawMo4SAi9cLSABDXMeko/6qrQAI/8af2Mnu61SsWHmLoBVQ+qtBL7hxob /bJk+ZZjxx7My1/ic4MAC/1AuPg8cF/f -----END CERTIFICATE-----Generated at Wed May 14 10:14:05 2025 by rpki-client