$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: hWPcAW9afy49inzu0UMmsGKT38hphZvWrFpR/R70Utk= Subject key identifier: 69:F6:67:E1:42:61:D6:8F:8B:40:45:6A:69:3D:45:37:14:98:C7:A1 Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 3470 Signing time: Sat 12 Apr 2025 14:43:19 +0000 Manifest this update: Sat 12 Apr 2025 14:43:19 +0000 Manifest next update: Sat 19 Apr 2025 14:43:19 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: oE2SWp8+17S9ySQ8Y1i/cjQ054Y3i30VrFpzNgQAwUc=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Apr 12 14:43:19 2025 GMT Not After : Apr 19 14:43:19 2025 GMT Subject: CN=67fa7c07-ac49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:53:bc:8f:6f:80:fa:04:3a:c4:87:c3:da: 9f:ee:88:33:7b:b3:cc:3b:30:57:cb:69:15:62:2f: 3f:04:fc:bb:9d:16:ef:03:8a:9e:96:ee:0f:9a:0c: b1:f0:9b:d5:95:30:66:12:f7:be:2d:aa:87:90:99: cf:fe:26:4b:cd:f6:80:8f:9d:77:04:62:19:fc:4a: 5c:ee:ba:d4:21:3d:ab:f2:5c:2d:aa:6b:2f:75:5d: da:b9:dd:7d:9f:b5:da:f8:6d:b7:8e:1b:60:c8:c8: 08:5a:ea:18:6e:ec:e9:9a:5e:1a:84:29:7c:0f:55: f0:7f:eb:4d:f3:ed:ca:68:b9:d4:62:db:f4:01:fc: f3:26:7d:b0:33:78:a8:dd:64:e7:6f:60:12:2d:bb: 5a:a6:20:84:1d:91:c2:7e:9a:00:de:01:93:32:d6: 28:dc:d0:73:96:de:2c:9f:2b:1e:4d:9b:d7:13:bb: 72:20:8e:93:83:fc:0a:af:b2:70:23:27:90:eb:da: e9:c0:cf:e2:59:67:5c:ca:2c:55:08:fd:86:04:d1: c1:e1:66:20:a0:ae:86:15:01:43:3d:20:ab:31:5f: 0f:2a:14:6d:aa:36:30:f4:88:64:60:02:d3:60:63: 3e:fb:02:c0:2f:b0:ca:ff:ff:82:01:00:38:09:38: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F6:67:E1:42:61:D6:8F:8B:40:45:6A:69:3D:45:37:14:98:C7:A1 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:6e:f2:8e:8e:84:cd:cc:93:bf:51:49:4c:f1:ab:3c:6c: 25:7d:53:e9:ed:a6:61:54:3f:1f:09:3a:5a:5c:f4:92:71:53: bf:e4:08:fb:87:90:56:be:c8:ab:06:9a:4d:3a:79:c7:cf:07: 1a:ed:b0:34:16:38:fd:3e:9f:bc:ad:e6:3b:92:d7:fc:21:43: 65:c0:66:20:56:60:ce:bd:7d:a4:30:90:cf:fe:da:2b:88:61: e9:51:94:26:62:80:e5:cf:87:80:67:a9:99:8c:a6:6d:86:06: 35:a9:e3:04:1d:9f:12:9c:34:c2:3c:2b:52:a3:8f:cd:66:40: 45:4e:30:12:d7:fa:58:62:87:bf:b7:10:0b:d9:df:b4:62:8d: 55:b6:63:f6:ab:47:b6:30:47:29:8f:3a:19:9d:0e:6d:27:e6: 3a:5d:e9:53:b6:ed:73:26:41:ca:cf:0b:4d:43:7b:2d:4c:a7: 2a:6e:68:ec:dc:24:da:50:3c:bb:65:1f:eb:77:21:ca:76:95: df:03:cc:18:f2:f9:65:e0:b9:a0:3a:d3:7f:8f:e4:65:f1:18: 24:40:4f:b8:38:bc:e1:cb:6e:81:39:c6:64:b7:94:6a:a9:82: 3d:37:9e:85:27:84:a4:62:4f:98:c3:0d:0f:fd:cf:cf:4d:19: 10:ea:6d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNDEyMTQ0MzE5WhcNMjUwNDE5MTQ0MzE5WjAYMRYwFAYD VQQDEw02N2ZhN2MwNy1hYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvVTvI9vgPoEOsSHw9qf7ogze7PMOzBXy2kVYi8/BPy7nRbvA4qelu4Pmgyx 8JvVlTBmEve+LaqHkJnP/iZLzfaAj513BGIZ/Epc7rrUIT2r8lwtqmsvdV3aud19 n7Xa+G23jhtgyMgIWuoYbuzpml4ahCl8D1Xwf+tN8+3KaLnUYtv0AfzzJn2wM3io 3WTnb2ASLbtapiCEHZHCfpoA3gGTMtYo3NBzlt4snyseTZvXE7tyII6Tg/wKr7Jw IyeQ69rpwM/iWWdcyixVCP2GBNHB4WYgoK6GFQFDPSCrMV8PKhRtqjYw9IhkYALT YGM++wLAL7DK//+CAQA4CTiD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn2Z+FC YdaPi0BFamk9RTcUmMehMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAD27yjo6EzcyTv1FJTPGrPGwlfVPp7aZhVD8fCTpaXPSScVO/5Aj7 h5BWvsirBppNOnnHzwca7bA0Fjj9Pp+8reY7ktf8IUNlwGYgVmDOvX2kMJDP/tor iGHpUZQmYoDlz4eAZ6mZjKZthgY1qeMEHZ8SnDTCPCtSo4/NZkBFTjAS1/pYYoe/ txAL2d+0Yo1VtmP2q0e2MEcpjzoZnQ5tJ+Y6XelTtu1zJkHKzwtNQ3stTKcqbmjs 3CTaUDy7ZR/rdyHKdpXfA8wY8vll4LmgOtN/j+Rl8RgkQE+4OLzhy26BOcZkt5Rq qYI9N56FJ4SkYk+Yww0P/c/PTRkQ6m38 -----END CERTIFICATE-----Generated at Sun Apr 13 05:29:09 2025 by rpki-client