$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: UT3UWytMhgZYjmCE+HZs8EHmI/ONRG0hzc0sH9L+oJk= Subject key identifier: 5B:BD:99:17:9F:2E:A7:B4:C0:AB:F9:C1:DA:00:64:0F:0D:94:B0:78 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1314 Signing time: Sun 04 May 2025 16:57:15 +0000 Manifest this update: Sun 04 May 2025 16:57:15 +0000 Manifest next update: Sun 11 May 2025 16:57:15 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: TMG4VmIloICTGszCNA2pfjlFHR2tdd5cAuyfmFEhQ0c=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: ++7RC+lcxadURbh9ihJKswyqNjTMzF1VYIMw23UQZNY=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: YugUSTWItaHwoU0lMPP/vlXY7+UmWW6qtCLtQUAsjJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4898 (0x1322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 4 16:57:15 2025 GMT Not After : May 11 16:57:15 2025 GMT Subject: CN=68179c6b-53d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:87:f1:1b:30:97:19:f2:86:96:ff:19:60:6a: a2:31:d6:10:23:a3:95:bc:af:e2:54:87:ac:86:f0: 54:48:95:2d:02:c0:98:40:2a:b8:67:03:a8:2a:13: 81:10:50:a2:35:41:10:17:39:d0:f5:c0:3f:b9:cb: 3c:f4:17:4b:f5:72:77:69:c7:4e:c2:e5:25:05:c0: c8:e0:a8:d4:31:0b:e2:a9:d5:7b:1c:a8:c0:60:c6: 07:53:2e:f9:c8:03:90:7f:35:03:64:5f:45:81:08: 77:94:ab:67:31:49:c3:41:e8:91:d3:cf:ea:05:80: ea:49:62:80:03:f0:0d:33:2b:de:fb:56:b1:3b:c5: 9d:b8:3c:f6:f4:47:c7:dd:03:6f:27:d2:41:30:d5: f2:99:95:ac:ca:e7:9e:a9:5a:d5:2d:fb:f6:a4:24: 76:e5:6f:02:ba:67:7a:32:19:d0:79:75:b6:42:04: 88:ec:8d:fa:d9:aa:47:c4:f1:fa:69:d5:85:68:19: d3:57:25:05:96:81:d7:3e:c7:0a:c0:5e:6f:29:41: 7d:d1:34:ab:ad:06:ed:43:ca:b4:0b:e6:35:96:dd: 55:02:61:6c:37:74:7f:a6:38:ad:12:7c:d9:d6:17: e9:79:a3:69:35:c4:1d:d7:36:49:c1:5f:48:a8:66: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:99:17:9F:2E:A7:B4:C0:AB:F9:C1:DA:00:64:0F:0D:94:B0:78 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:a3:93:da:95:bd:3a:17:cf:3a:b2:00:1f:1a:9c:5c:77: dd:c8:e3:eb:a5:64:34:f1:6e:8f:dc:19:20:82:85:4e:c4:a3: 77:1b:43:5c:52:6c:76:8a:f2:74:0a:96:5c:22:8d:d5:0b:5d: c2:d5:5f:63:10:37:22:99:8f:f9:c2:ba:2e:db:e4:7e:49:88: 7a:e9:d9:2f:10:f9:5d:39:4d:0e:54:20:a7:89:d1:8c:dd:a6: 03:30:cc:ec:61:fd:7b:f5:fb:d7:23:54:54:75:5b:62:89:71: 40:e9:50:18:ca:fc:10:72:ac:8a:29:af:68:88:a3:9a:05:a8: ac:6e:44:57:08:b2:b1:6d:5d:7f:13:56:1d:92:d5:8c:d3:69: 85:7f:6e:32:ad:a0:b3:44:aa:6a:c6:da:eb:5c:e6:43:b2:be: 73:4b:7d:16:2a:3b:e1:b3:b4:ae:50:f5:5f:e0:80:cc:5a:23: 3f:02:82:09:2a:bc:9b:6b:46:1f:0b:b5:1c:10:02:8e:6a:28: 74:18:ab:a6:91:ca:5e:f4:d2:26:53:66:8a:ec:7e:20:56:29: d4:8e:7d:9f:a2:c5:bf:63:0a:fe:b4:9f:94:fd:e5:53:23:da: 3b:83:1c:dd:fc:23:c1:4c:ca:9b:b1:a1:0b:0d:0b:ff:7c:43: 84:45:bd:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNTA0MTY1NzE1WhcNMjUwNTExMTY1NzE1WjAYMRYwFAYD VQQDEw02ODE3OWM2Yi01M2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64fxGzCXGfKGlv8ZYGqiMdYQI6OVvK/iVIeshvBUSJUtAsCYQCq4ZwOoKhOB EFCiNUEQFznQ9cA/ucs89BdL9XJ3acdOwuUlBcDI4KjUMQviqdV7HKjAYMYHUy75 yAOQfzUDZF9FgQh3lKtnMUnDQeiR08/qBYDqSWKAA/ANMyve+1axO8WduDz29EfH 3QNvJ9JBMNXymZWsyueeqVrVLfv2pCR25W8Cumd6MhnQeXW2QgSI7I362apHxPH6 adWFaBnTVyUFloHXPscKwF5vKUF90TSrrQbtQ8q0C+Y1lt1VAmFsN3R/pjitEnzZ 1hfpeaNpNcQd1zZJwV9IqGZdwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu9mRef Lqe0wKv5wdoAZA8NlLB4MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWiKOT2pW9OhfPOrIAHxqcXHfdyOPrpWQ08W6P3BkggoVOxKN3G0Nc Umx2ivJ0CpZcIo3VC13C1V9jEDcimY/5wrou2+R+SYh66dkvEPldOU0OVCCnidGM 3aYDMMzsYf179fvXI1RUdVtiiXFA6VAYyvwQcqyKKa9oiKOaBaisbkRXCLKxbV1/ E1YdktWM02mFf24yraCzRKpqxtrrXOZDsr5zS30WKjvhs7SuUPVf4IDMWiM/AoIJ Kryba0YfC7UcEAKOaih0GKumkcpe9NImU2aK7H4gVinUjn2fosW/Ywr+tJ+U/eVT I9o7gxzd/CPBTMqbsaELDQv/fEOERb1I -----END CERTIFICATE-----Generated at Mon May 5 17:06:53 2025 by rpki-client