$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft File: V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json) Hash identifier: BX07KKS2KGjLLT+e3HO9TjBnJYebmycQ2DLt2pXotzw= Subject key identifier: B2:35:BB:91:10:2B:44:86:B8:C9:26:BA:DC:57:04:07:03:44:B4:C4 Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 108B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft Manifest number: 1081 Signing time: Wed 16 Apr 2025 17:19:26 +0000 Manifest this update: Wed 16 Apr 2025 17:19:25 +0000 Manifest next update: Wed 23 Apr 2025 17:19:25 +0000 Files and hashes: 1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: 5/DXhxhu+wm4+ICMx/Tw8VTMskSFsNg8PSh2cIdslWw=) 2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: qxrPSY85HQzoS5SwzTHbqWN+Z7CNWTWllsLf46VBiDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4235 (0x108b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B, serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: Apr 16 17:19:25 2025 GMT Not After : Apr 23 17:19:25 2025 GMT Subject: CN=67ffe69e-6add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:b5:07:fb:d5:93:f5:87:3a:5e:b0:0d:8d: 9e:f9:c2:b9:5f:7b:1f:4a:d3:4d:f5:f8:08:2e:5c: 94:0f:6e:d9:b5:b9:ba:88:5d:c9:87:23:19:1e:f8: d6:98:6c:1d:f5:48:4b:3e:0b:ca:42:d4:57:1d:a6: b8:bf:db:8a:9d:7a:d0:f4:15:b4:82:6a:1d:cc:97: 03:d8:7d:45:a5:65:51:5a:50:83:42:b1:12:d2:4f: 09:4a:f5:ce:9e:a1:a1:b5:45:05:4b:f3:f0:e1:e2: 86:4b:0a:79:4f:49:ab:1c:72:02:14:b7:78:65:a6: 58:8a:3a:c8:6e:c5:60:52:74:fd:02:e3:4f:18:6f: fc:b2:6c:5e:c4:cb:8a:32:49:d0:ee:45:87:f2:9c: fc:41:92:4f:2c:80:7a:0c:41:31:65:e9:5c:b5:3d: aa:e5:9d:4a:71:7c:17:c5:a8:4b:8a:29:b7:04:68: 9f:ab:a3:f4:1a:0b:8c:5c:e1:25:4d:96:78:8f:e8: 24:db:c1:61:ad:0e:8a:79:c7:c3:08:20:d6:fc:79: 0c:6d:e8:2b:d7:34:4b:ad:45:56:a7:18:52:1b:c7: d6:73:b7:60:db:a3:0d:8f:4c:d6:aa:dc:44:6a:7c: 47:c1:b9:d1:2d:3a:69:aa:00:9d:51:0d:2d:70:29: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:BB:91:10:2B:44:86:B8:C9:26:BA:DC:57:04:07:03:44:B4:C4 X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cf:59:ed:5b:06:fb:21:7d:8f:aa:70:2e:e1:ce:6e:e4:7e: 8d:17:1e:85:f6:cb:28:56:07:c3:2a:5e:73:59:d6:d7:2d:9a: 72:dd:74:68:bf:e6:4d:93:61:9d:8c:90:50:f4:09:6f:a6:e7: 24:96:e3:0b:f3:52:ed:00:64:87:52:24:ed:f3:e0:7c:94:21: 24:e1:fe:50:d4:a9:61:2e:2d:ba:56:ed:1c:84:2e:cd:2f:20: bc:7d:25:51:e9:b5:dc:9d:db:af:62:c1:95:1b:7a:96:5d:a2: ef:6f:b8:04:1e:6c:fb:8b:04:06:b3:93:6f:04:ad:96:82:85: 09:e3:f5:4d:45:7b:b2:41:f3:5f:08:3f:fe:a8:c6:3a:7b:9a: e0:e9:7f:ea:33:10:36:da:0a:08:d5:95:38:62:bd:a3:17:e9: 6f:db:83:91:56:50:01:44:ea:6f:42:cd:50:9e:6e:dc:5d:18: ab:7d:bb:a9:99:11:38:fa:7d:32:b8:a4:86:e6:30:b1:ed:12: 3b:13:d6:b0:b2:a4:cf:b4:0a:d0:7d:0a:6d:d9:fc:9f:25:b3: 2d:7d:ec:15:3b:f9:44:6f:6c:c9:d9:5c:26:a2:e9:59:54:77: 9a:3b:a8:70:28:66:87:ad:72:ad:b5:9c:e0:11:52:e1:e2:c7: 9b:20:4d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjUwNDE2MTcxOTI1WhcNMjUwNDIzMTcxOTI1WjAYMRYwFAYD VQQDEw02N2ZmZTY5ZS02YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt21B/vVk/WHOl6wDY2e+cK5X3sfStNN9fgILlyUD27Ztbm6iF3JhyMZHvjW mGwd9UhLPgvKQtRXHaa4v9uKnXrQ9BW0gmodzJcD2H1FpWVRWlCDQrES0k8JSvXO nqGhtUUFS/Pw4eKGSwp5T0mrHHICFLd4ZaZYijrIbsVgUnT9AuNPGG/8smxexMuK MknQ7kWH8pz8QZJPLIB6DEExZelctT2q5Z1KcXwXxahLiim3BGifq6P0GguMXOEl TZZ4j+gk28FhrQ6KecfDCCDW/HkMbegr1zRLrUVWpxhSG8fWc7dg26MNj0zWqtxE anxHwbnRLTppqgCdUQ0tcCm7bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI1u5EQ K0SGuMkmutxXBAcDRLTEMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA1Qi9CMzE5NjZDNDJDNUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2 aFpqaDlGX0dNM21hZXgwUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2z1ntWwb7IX2PqnAu4c5u5H6NFx6F9ssoVgfDKl5zWdbXLZpy3XRo v+ZNk2GdjJBQ9AlvpuckluML81LtAGSHUiTt8+B8lCEk4f5Q1KlhLi26Vu0chC7N LyC8fSVR6bXcnduvYsGVG3qWXaLvb7gEHmz7iwQGs5NvBK2WgoUJ4/VNRXuyQfNf CD/+qMY6e5rg6X/qMxA22goI1ZU4Yr2jF+lv24ORVlABROpvQs1Qnm7cXRirfbup mRE4+n0yuKSG5jCx7RI7E9awsqTPtArQfQpt2fyfJbMtfewVO/lEb2zJ2VwmoulZ VHeaO6hwKGaHrXKttZzgEVLh4sebIE2c -----END CERTIFICATE-----Generated at Wed Apr 16 22:31:46 2025 by rpki-client