$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft File: Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json) Hash identifier: CQx+4xvwyjFQ7JRU6P9VVuz5LqCLXou6I4WUNmWeqW8= Subject key identifier: DF:E0:7A:8C:A9:AB:D9:06:D8:97:BC:B9:59:46:07:22:CA:19:0D:43 Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 Certificate issuer: /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft Manifest number: 01C7 Signing time: Sat 19 Apr 2025 02:18:43 +0000 Manifest this update: Sat 19 Apr 2025 02:18:42 +0000 Manifest next update: Sat 26 Apr 2025 02:18:42 +0000 Files and hashes: 1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: 2q2hWLo6XJ0U91AFBV1ljRS6GeXOh1R5qrgrIN9tCJY=) 2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: UQCZG7itJMxo24ik+1Acdmbu5iaW6o2y95pik3WrmR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Validity Not Before: Apr 19 02:18:42 2025 GMT Not After : Apr 26 02:18:42 2025 GMT Subject: CN=68030802-a1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:56:0a:34:5b:da:d2:74:05:bc:7c:7d:82: ce:3b:70:c5:c9:61:66:bd:b1:28:55:90:58:5e:bb: d1:9e:db:69:42:75:df:1b:44:d9:e7:f3:58:ed:e1: 10:7a:8d:0b:44:7c:a8:cd:d1:1c:8a:7c:5d:12:f2: 39:cc:dc:e5:5e:07:f8:73:73:80:41:04:4d:e0:fb: 72:42:b2:3e:7e:13:97:db:ac:d6:f5:a6:61:1b:6d: 1a:c6:ab:eb:9f:ac:b0:0f:95:35:50:26:95:da:50: e3:5f:47:1d:72:7e:33:fa:50:1c:4b:81:e3:c4:f2: 6d:71:3b:ae:c2:ea:d1:1c:ad:6b:06:67:5c:86:87: bc:ff:3d:f9:21:5e:a9:f2:7e:27:23:70:4e:0a:ce: 51:38:6a:bb:fd:02:bb:47:bc:7e:6e:f5:b0:f9:8d: 6d:01:19:e7:cd:fb:36:fa:b5:a7:d9:57:6d:f5:5d: cd:d7:f7:ba:0c:52:40:b0:1b:17:c2:19:46:7f:3a: 3b:99:65:e5:54:79:8d:a6:45:63:b6:e9:62:73:12: 83:05:b3:f2:d4:3b:c7:66:9b:d3:2d:7a:07:7d:0a: 11:bb:11:b8:3d:60:dd:1a:a9:b4:d6:b5:87:e3:df: a5:43:50:d0:70:de:69:f7:ab:1b:dc:cc:04:b1:ae: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:7A:8C:A9:AB:D9:06:D8:97:BC:B9:59:46:07:22:CA:19:0D:43 X509v3 Authority Key Identifier: keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:56:cb:b3:27:47:54:02:77:50:01:20:41:3d:ef:4c:d9:2b: d6:d4:34:76:9c:2a:ad:28:04:c6:73:9b:0e:d4:24:5d:78:27: bb:b6:2f:64:b2:0c:b8:fe:68:1e:18:1e:d9:fc:24:53:7f:31: 4b:cc:f4:67:dd:29:cc:77:6b:b4:cd:c7:85:da:4c:58:15:a1: 07:bf:ee:78:6e:91:99:35:51:03:36:99:80:f6:57:97:ea:b8: 4a:0b:a3:36:54:7b:c9:ad:ca:69:34:62:67:4b:10:bc:7a:05: 9d:3e:f7:ed:f4:37:e7:34:40:33:95:54:e9:4c:dd:52:fa:c4: 7b:cf:99:f9:0f:6c:dc:be:38:c7:f8:eb:31:b3:7c:9d:70:e8: 11:9a:4d:3d:77:9b:21:9d:16:1f:91:ce:6d:3b:6a:1e:74:af: e4:1a:b1:4e:69:48:90:dc:1a:80:50:b2:11:4d:d8:6c:a5:45: c3:a7:7e:d3:f9:54:59:c4:10:25:cc:01:45:34:8b:09:0d:4c: ee:00:42:c1:ad:98:54:ec:80:ce:c0:aa:ad:80:eb:8e:8a:36: 03:59:7e:8f:2d:ed:71:be:c5:c3:d5:01:e4:4a:12:ad:94:9f: e6:d3:36:8b:76:14:2f:94:b6:e4:93:4e:e4:fb:ed:8f:e3:5d: a1:db:03:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0NzgxMTAvBgNVBAUTKDU2OEY3NjVDQ0FCNDJDNTIzMDc5OEU2OEZCQzM3QzhB QTQ5RjVGNDQwHhcNMjUwNDE5MDIxODQyWhcNMjUwNDI2MDIxODQyWjAYMRYwFAYD VQQDEw02ODAzMDgwMi1hMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UJWCjRb2tJ0Bbx8fYLOO3DFyWFmvbEoVZBYXrvRnttpQnXfG0TZ5/NY7eEQ eo0LRHyozdEcinxdEvI5zNzlXgf4c3OAQQRN4PtyQrI+fhOX26zW9aZhG20axqvr n6ywD5U1UCaV2lDjX0cdcn4z+lAcS4HjxPJtcTuuwurRHK1rBmdchoe8/z35IV6p 8n4nI3BOCs5ROGq7/QK7R7x+bvWw+Y1tARnnzfs2+rWn2Vdt9V3N1/e6DFJAsBsX whlGfzo7mWXlVHmNpkVjtulicxKDBbPy1DvHZpvTLXoHfQoRuxG4PWDdGqm01rWH 49+lQ1DQcN5p96sb3MwEsa6vwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/geoyp q9kG2Je8uVlGByLKGQ1DMB8GA1UdIwQYMBaAFFaPdlzKtCxSMHmOaPvDfIqkn19E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3OC80OTlBOTE1RTZE MTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExGSXdlWTVvLThOOGlxU2ZY MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvOTJYTXEwTEZJd2VZNW8tOE44aXFTZlgwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjQ3OC80OTlBOTE1RTZEMTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExG SXdlWTVvLThOOGlxU2ZYMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVsuzJ0dUAndQASBBPe9M2SvW1DR2nCqtKATGc5sO1CRdeCe7ti9k sgy4/mgeGB7Z/CRTfzFLzPRn3SnMd2u0zceF2kxYFaEHv+54bpGZNVEDNpmA9leX 6rhKC6M2VHvJrcppNGJnSxC8egWdPvft9DfnNEAzlVTpTN1S+sR7z5n5D2zcvjjH +Osxs3ydcOgRmk09d5shnRYfkc5tO2oedK/kGrFOaUiQ3BqAULIRTdhspUXDp37T +VRZxBAlzAFFNIsJDUzuAELBrZhU7IDOwKqtgOuOijYDWX6PLe1xvsXD1QHkShKt lJ/m0zaLdhQvlLbkk07k++2P412h2wOQ -----END CERTIFICATE-----Generated at Sat Apr 19 08:01:10 2025 by rpki-client