$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: VhSGiTzPzVofy+iIM453Ri8uKQwbebg0akjti3zbqZ4= Subject key identifier: 7A:94:A7:24:66:38:72:EB:24:C6:6C:C4:FD:96:9E:D1:33:02:80:AF Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 01C5 Signing time: Sat 05 Apr 2025 02:24:54 +0000 Manifest this update: Sat 05 Apr 2025 02:24:53 +0000 Manifest next update: Sat 12 Apr 2025 02:24:53 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: ZZeg237pQmrKtFSOpx2fT8wwZ16qKPqXxECXesA/+qo=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: cnsvLrD9d71bslE6am613R88KBMFCsrauhJ9vutckNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679 Validity Not Before: Apr 5 02:24:53 2025 GMT Not After : Apr 12 02:24:53 2025 GMT Subject: CN=67f09476-53f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:ff:66:b4:65:8e:36:dc:30:1d:ba:45:ad: 10:c4:78:33:26:b5:3d:1a:b2:2b:4d:fe:93:ad:19: 27:15:61:6a:76:51:1d:02:87:1c:a6:e8:ca:d9:cc: a9:e8:25:60:e1:a4:eb:19:30:d9:6c:a2:d8:7a:00: af:04:24:c2:43:f5:66:61:13:9b:2d:de:c8:09:4d: c7:9e:24:6d:19:1b:9b:6c:a2:f5:36:d4:3a:8d:be: a8:b2:53:ce:0b:e8:f9:73:53:91:00:df:10:93:fc: d8:cd:d8:be:37:27:e6:76:8b:20:48:77:f0:1e:a9: 56:82:7c:63:b3:92:1c:f1:e6:8e:68:52:f1:aa:17: 07:df:60:97:cd:d9:d4:b6:06:f4:bf:57:ce:96:d5: ae:27:33:44:21:43:16:f6:73:f2:1b:99:a4:f8:2d: 04:5c:b0:e2:8b:70:e9:8d:fa:1d:58:52:48:24:04: 3a:6a:6d:e1:46:00:d2:b7:87:bd:99:e7:11:87:65: ed:7f:c3:ea:25:9a:bb:1f:89:a7:89:f7:db:f9:d1: 0e:34:ff:f8:e6:09:6e:4d:b3:05:48:54:2b:bb:8e: 19:62:d9:58:a6:85:3c:15:14:e5:45:f2:04:5e:eb: 3a:af:6b:8e:17:04:7f:ea:d7:25:68:eb:4b:d1:2a: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:A7:24:66:38:72:EB:24:C6:6C:C4:FD:96:9E:D1:33:02:80:AF X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:55:d7:31:3b:a5:4c:1b:3f:49:0e:bf:0d:c2:54:22:4b:5b: 66:3a:aa:7b:23:a7:0d:b4:96:47:74:b7:4e:7d:b3:68:04:4e: 9c:2b:f3:63:d1:93:d5:12:4d:a1:7a:7a:c3:c2:eb:78:65:0a: 21:da:82:02:73:fa:5d:cc:5e:7b:83:86:ec:8c:2a:35:d9:3f: 1a:28:6c:b8:38:1c:3a:80:c1:5d:75:3f:82:bb:5c:fd:f6:b5: 15:c9:2a:ba:d6:5e:cf:6d:62:1f:3a:21:a4:9e:76:9c:8b:72: 22:38:92:37:70:02:7c:b5:03:8f:a3:d0:e2:46:d3:9d:63:53: 35:fd:05:cc:34:e0:e2:e6:e5:52:53:d6:ff:32:7e:4b:36:ce: 29:ee:8f:f2:7a:60:1f:b2:22:31:36:69:9c:a7:ad:bf:26:1f: 74:0e:3e:37:fd:a2:d0:e5:fb:3d:67:b6:6a:78:32:8e:b7:54: 40:91:8d:49:32:aa:a0:54:70:d3:09:4e:32:1a:81:c7:98:25: 18:23:55:8c:b1:55:53:82:d1:9b:df:bc:bf:f8:d3:ba:e4:03: 6d:4a:35:c7:90:5f:ec:1e:92:71:e3:0e:3b:3f:49:2a:d4:c9: ff:52:95:85:88:b3:c0:8a:e8:14:a0:3b:e1:4b:6b:62:f1:55: d8:c4:10:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwNDA1MDIyNDUzWhcNMjUwNDEyMDIyNDUzWjAYMRYwFAYD VQQDEw02N2YwOTQ3Ni01M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuP/ZrRljjbcMB26Ra0QxHgzJrU9GrIrTf6TrRknFWFqdlEdAoccpujK2cyp 6CVg4aTrGTDZbKLYegCvBCTCQ/VmYRObLd7ICU3HniRtGRubbKL1NtQ6jb6oslPO C+j5c1ORAN8Qk/zYzdi+NyfmdosgSHfwHqlWgnxjs5Ic8eaOaFLxqhcH32CXzdnU tgb0v1fOltWuJzNEIUMW9nPyG5mk+C0EXLDii3DpjfodWFJIJAQ6am3hRgDSt4e9 mecRh2Xtf8PqJZq7H4mniffb+dEONP/45gluTbMFSFQru44ZYtlYpoU8FRTlRfIE Xus6r2uOFwR/6tclaOtL0SplNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqUpyRm OHLrJMZsxP2WntEzAoCvMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+VdcxO6VMGz9JDr8NwlQiS1tmOqp7I6cNtJZHdLdOfbNoBE6cK/Nj 0ZPVEk2henrDwut4ZQoh2oICc/pdzF57g4bsjCo12T8aKGy4OBw6gMFddT+Cu1z9 9rUVySq61l7PbWIfOiGknnaci3IiOJI3cAJ8tQOPo9DiRtOdY1M1/QXMNODi5uVS U9b/Mn5LNs4p7o/yemAfsiIxNmmcp62/Jh90Dj43/aLQ5fs9Z7ZqeDKOt1RAkY1J MqqgVHDTCU4yGoHHmCUYI1WMsVVTgtGb37y/+NO65ANtSjXHkF/sHpJx4w47P0kq 1Mn/UpWFiLPAiugUoDvhS2ti8VXYxBBY -----END CERTIFICATE-----Generated at Sun Apr 6 21:33:48 2025 by rpki-client