$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft File: r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json) Hash identifier: kTfN3AZzCCd3+vZNz5q1PWGD5nslRckdoOLVjmhOPKE= Subject key identifier: DE:8F:E8:B2:D7:69:0F:10:03:C7:DF:48:AB:FF:C5:00:D8:F9:1C:60 Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft Manifest number: 02F1 Signing time: Thu 03 Apr 2025 01:18:59 +0000 Manifest this update: Thu 03 Apr 2025 01:18:59 +0000 Manifest next update: Thu 10 Apr 2025 01:18:59 +0000 Files and hashes: 1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: 9sYsu5QayTbU5McXRJ4UuvSH94GePekE6LYM52uRnh8=) 2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: n3tV3xCdGKrXtayf300FEN17BZ98v1+YuTGqNoc8EF8=) 3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: x1s3eQy6LeBQljvpss9e0xqe6y4ivgOueGGP5hZZQd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B758 Validity Not Before: Apr 3 01:18:59 2025 GMT Not After : Apr 10 01:18:59 2025 GMT Subject: CN=67ede203-37ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:dc:27:e2:6e:45:93:f1:eb:92:07:70:47: 51:f6:0f:15:28:3c:df:d0:66:30:19:71:6c:72:2d: 47:24:5a:46:4f:8b:e4:00:c0:97:95:c2:a7:1e:0e: 75:70:a4:f5:03:8f:69:69:83:b6:ab:74:e4:0d:15: 07:d5:f6:8c:dc:9f:04:dd:bc:75:7c:b0:e3:7d:5a: de:00:9c:14:65:1b:f8:93:ec:36:57:15:26:1c:17: 3f:4d:55:28:62:f5:ff:d7:b6:9a:db:12:b7:9b:90: f0:0b:e3:07:b2:86:5d:8a:b4:87:a3:d9:b2:88:ce: 29:ee:86:17:d6:0a:20:06:65:ab:71:0f:3b:8d:f3: 05:14:01:37:fd:b7:eb:2d:b0:d7:57:19:80:95:01: f8:c4:2b:cd:68:2a:9e:1c:a7:7c:91:81:25:87:cd: e9:ca:30:2e:52:eb:c2:7a:c9:e2:38:d1:ca:49:38: d7:e8:5f:5a:33:27:e6:db:40:6a:d9:7b:88:77:f5: 9f:d2:91:f2:a3:0a:fc:3e:1b:7b:bb:02:d7:6e:b9: 6d:2b:06:c2:82:a6:36:58:4b:18:6c:d8:42:71:fc: ea:7b:3f:90:53:93:94:23:f3:09:10:63:6b:63:50: 60:45:b2:6f:ec:3c:20:62:54:be:65:f3:8e:9f:a4: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8F:E8:B2:D7:69:0F:10:03:C7:DF:48:AB:FF:C5:00:D8:F9:1C:60 X509v3 Authority Key Identifier: keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:58:15:e6:50:e9:55:e7:5b:41:57:5e:89:79:9a:17:9f: 61:df:da:9a:ad:5f:0d:65:14:17:fa:ba:54:11:8e:fd:1e:58: 44:33:b1:e2:34:3a:f6:db:01:b8:90:eb:9a:fe:a4:26:2b:07: c3:5b:e9:57:90:38:0b:c1:0f:b3:34:9e:ce:6d:be:47:41:a5: cf:e2:e5:b7:de:7b:89:60:36:68:0c:89:8e:10:88:9f:ad:58: 26:09:0a:e3:ac:e1:c7:8f:29:dd:e1:74:c7:e7:a2:f2:fa:ab: 8e:22:d6:bd:47:97:ce:da:e1:d2:58:40:61:a5:87:cc:d1:e2: 63:20:d2:ff:63:21:0c:33:88:6a:f3:d4:b3:9d:b2:22:97:9b: 69:5e:dc:67:c0:17:bf:ac:e1:9e:23:fc:ee:0e:43:5e:4c:92: 8a:a2:28:3f:89:a6:1b:20:96:93:93:c0:ca:08:86:b1:83:d6: be:43:ab:07:e0:44:9e:64:65:6a:15:f5:ed:79:08:38:8a:c6: b6:b5:ad:2b:76:2d:93:52:b2:6a:4b:44:88:92:06:e4:0d:58: 90:3b:d8:ac:13:85:2b:01:a4:f2:f6:72:18:07:29:bc:00:8c: 56:11:5b:ab:9d:d7:37:79:80:31:da:42:fd:94:c8:16:86:6f: 94:e3:d4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3NTgxMTAvBgNVBAUTKEFGNTU1ODFCQTEyN0UyMDkwQTBBNTQ2MkZFN0JDRTcw NjE2RjJDREMwHhcNMjUwNDAzMDExODU5WhcNMjUwNDEwMDExODU5WjAYMRYwFAYD VQQDEw02N2VkZTIwMy0zN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu53cJ+JuRZPx65IHcEdR9g8VKDzf0GYwGXFsci1HJFpGT4vkAMCXlcKnHg51 cKT1A49paYO2q3TkDRUH1faM3J8E3bx1fLDjfVreAJwUZRv4k+w2VxUmHBc/TVUo YvX/17aa2xK3m5DwC+MHsoZdirSHo9myiM4p7oYX1gogBmWrcQ87jfMFFAE3/bfr LbDXVxmAlQH4xCvNaCqeHKd8kYElh83pyjAuUuvCesniONHKSTjX6F9aMyfm20Bq 2XuId/Wf0pHyowr8Pht7uwLXbrltKwbCgqY2WEsYbNhCcfzqez+QU5OUI/MJEGNr Y1BgRbJv7DwgYlS+ZfOOn6Sf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6P6LLX aQ8QA8ffSKv/xQDY+RxgMB8GA1UdIwQYMBaAFK9VWBuhJ+IJCgpUYv57znBhbyzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc1OC80QzdBMjg2OEQz NkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRna0tDbFJpX252T2NHRnZM TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxVllHNkVuNGdrS0NsUmlfbnZPY0dGdkxOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc1OC80QzdBMjg2OEQzNkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRn a0tDbFJpX252T2NHRnZMTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcFgV5lDpVedbQVdeiXmaF59h39qarV8NZRQX+rpUEY79HlhEM7Hi NDr22wG4kOua/qQmKwfDW+lXkDgLwQ+zNJ7Obb5HQaXP4uW33nuJYDZoDImOEIif rVgmCQrjrOHHjynd4XTH56Ly+quOIta9R5fO2uHSWEBhpYfM0eJjINL/YyEMM4hq 89SznbIil5tpXtxnwBe/rOGeI/zuDkNeTJKKoig/iaYbIJaTk8DKCIaxg9a+Q6sH 4ESeZGVqFfXteQg4isa2ta0rdi2TUrJqS0SIkgbkDViQO9isE4UrAaTy9nIYBym8 AIxWEVurndc3eYAx2kL9lMgWhm+U49RJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:53 2025 by rpki-client