$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: XiCz4bmxhaSPC6HTGTx1z6itzy8YkqFwd1CJPYyl5Os= Subject key identifier: 61:1C:D1:21:43:6C:AA:40:C0:E4:1F:DB:55:45:E0:22:09:D0:41:47 Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 036C Signing time: Fri 11 Apr 2025 00:54:45 +0000 Manifest this update: Fri 11 Apr 2025 00:54:45 +0000 Manifest next update: Fri 18 Apr 2025 00:54:45 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: uwXOaeibrsiEdVl/VJz7sq9Iaq3OtSFy50Hv4855U2M=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Apr 11 00:54:45 2025 GMT Not After : Apr 18 00:54:45 2025 GMT Subject: CN=67f86855-1ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:72:9d:e9:86:a7:38:1f:25:db:27:04:a1: a3:40:2a:96:96:b9:c8:62:f3:57:a3:a1:e1:03:c8: 85:32:72:6e:b2:0a:7b:a7:87:50:00:ed:ed:53:b3: 27:2b:a2:c7:19:bf:ab:d1:0a:4b:05:7a:03:c4:9c: 77:17:28:4a:c3:db:d1:c6:df:11:59:71:a7:47:06: 64:86:c7:98:26:8c:93:ba:d8:1f:3b:75:39:7f:f1: 16:91:88:1e:3b:da:7e:f9:01:67:2a:6c:b7:52:20: 33:83:8c:fd:08:75:6c:ce:1b:b4:01:72:04:cb:07: b7:90:51:5c:c6:dd:6a:86:46:07:4d:07:d6:0a:93: cd:d2:58:ba:4a:c2:c8:bd:7c:ea:d3:16:32:3d:23: 5b:76:68:97:03:83:8a:f4:20:58:65:3d:34:84:83: d3:77:9d:0c:41:de:31:80:de:5e:bc:ba:31:de:95: a2:f1:d5:cc:ee:4d:52:9a:b5:b5:c5:5b:e8:5b:94: 0c:7a:6e:23:b3:01:fa:e7:cd:dc:ad:84:8f:3c:60: d7:97:4a:05:53:b0:36:7c:86:3b:6e:d1:5f:80:bb: 77:3c:fc:c6:be:96:2b:6d:5c:86:b2:a1:31:7e:80: 6b:ec:94:f6:7d:75:1f:e6:f3:75:e7:6e:4c:d8:7b: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:D1:21:43:6C:AA:40:C0:E4:1F:DB:55:45:E0:22:09:D0:41:47 X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:1e:c9:58:c3:8c:63:d5:bf:23:47:c7:d3:de:69:dc:b4:e1: e1:02:7a:7f:bc:a1:e2:e8:22:e0:98:00:0c:cb:df:80:c0:8d: 63:34:78:ab:ce:88:1c:27:9e:25:a6:79:45:c4:d8:44:3f:8d: 7b:59:73:bf:c1:a5:3a:3b:62:6d:db:a2:a1:b7:ae:47:94:7a: da:a9:57:dd:21:7d:ff:07:a9:0d:1b:cd:3b:6f:f6:16:ba:ee: f8:77:fe:aa:1d:25:7e:ed:f2:20:53:1a:91:82:85:7b:69:d8: 54:5d:e6:aa:bb:f9:63:44:7f:04:43:82:23:1b:ec:0f:ef:25: b0:b7:fb:1b:46:24:14:85:66:d8:0f:6c:c1:6a:5b:93:a8:1f: d6:69:ca:11:25:fc:76:4e:a3:dd:4d:6d:1d:f6:ef:dc:9a:81: c5:89:a5:8d:eb:ed:09:7e:9b:c4:78:f4:f6:bd:67:15:f0:5f: a9:06:43:63:40:cc:0c:3c:53:eb:40:ae:65:3b:75:91:d6:3c: 03:36:2f:c7:c0:ed:ea:60:a9:de:5d:e6:0c:09:7e:75:8d:a1: b4:b4:e9:71:3a:6c:67:f4:95:72:b9:ac:4f:39:d4:7e:08:5c: 22:fb:29:24:a3:48:08:5f:6a:76:19:bd:fb:b1:c7:7a:b4:d1: 2f:91:99:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUwNDExMDA1NDQ1WhcNMjUwNDE4MDA1NDQ1WjAYMRYwFAYD VQQDEw02N2Y4Njg1NS0xYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrJynemGpzgfJdsnBKGjQCqWlrnIYvNXo6HhA8iFMnJusgp7p4dQAO3tU7Mn K6LHGb+r0QpLBXoDxJx3FyhKw9vRxt8RWXGnRwZkhseYJoyTutgfO3U5f/EWkYge O9p++QFnKmy3UiAzg4z9CHVszhu0AXIEywe3kFFcxt1qhkYHTQfWCpPN0li6SsLI vXzq0xYyPSNbdmiXA4OK9CBYZT00hIPTd50MQd4xgN5evLox3pWi8dXM7k1SmrW1 xVvoW5QMem4jswH6583crYSPPGDXl0oFU7A2fIY7btFfgLt3PPzGvpYrbVyGsqEx foBr7JT2fXUf5vN1525M2HsqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEc0SFD bKpAwOQf21VF4CIJ0EFHMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFHslYw4xj1b8jR8fT3mnctOHhAnp/vKHi6CLgmAAMy9+AwI1jNHir zogcJ54lpnlFxNhEP417WXO/waU6O2Jt26Kht65HlHraqVfdIX3/B6kNG807b/YW uu74d/6qHSV+7fIgUxqRgoV7adhUXeaqu/ljRH8EQ4IjG+wP7yWwt/sbRiQUhWbY D2zBaluTqB/WacoRJfx2TqPdTW0d9u/cmoHFiaWN6+0JfpvEePT2vWcV8F+pBkNj QMwMPFPrQK5lO3WR1jwDNi/HwO3qYKneXeYMCX51jaG0tOlxOmxn9JVyuaxPOdR+ CFwi+ykko0gIX2p2Gb37scd6tNEvkZmk -----END CERTIFICATE-----Generated at Sat Apr 12 15:22:34 2025 by rpki-client