$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: WbbYX2c/sBJRNP3B0HnG8nflmJYwG6hg52Bf/6lzCqQ= Subject key identifier: B2:3C:53:C1:E7:2B:DA:56:F0:4F:EA:A5:63:13:59:00:D2:5C:46:68 Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: 8A Signing time: Sat 29 Mar 2025 05:53:45 +0000 Manifest this update: Sat 29 Mar 2025 05:53:44 +0000 Manifest next update: Sat 05 Apr 2025 05:53:44 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: VzdEZlvQHHJKOeFzJzpfpLShhWJnoT5Flk078RBmjw0=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503 Validity Not Before: Mar 29 05:53:44 2025 GMT Not After : Apr 5 05:53:44 2025 GMT Subject: CN=67e78ae8-aa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:0e:63:e1:2c:60:b6:ab:60:6d:56:9e:c5: 98:6e:b7:a5:75:6c:c9:4b:10:bc:e6:24:62:aa:51: 7c:89:9d:1c:6c:af:ef:42:54:d3:3e:05:4f:ba:49: 6b:46:09:0d:ce:8a:ab:4a:a8:e5:f2:34:a3:cd:ad: 96:83:fc:07:c5:26:bf:6a:10:c6:56:10:dd:44:0c: 52:19:8b:46:79:7a:45:87:57:ef:16:a3:6e:fe:64: 3f:1e:51:e5:02:3a:b4:9e:27:e5:22:1f:fb:ea:3f: 0c:6b:af:66:fb:53:ef:0f:2e:6e:89:96:ae:d4:ad: c4:48:9f:c5:72:8e:2a:78:d9:02:5d:ee:46:2d:1f: c8:a9:3e:9a:af:56:f0:a1:10:83:26:f6:c6:ec:f6: b2:df:b9:b5:f4:3e:b6:a7:23:31:be:23:9e:03:05: fb:67:81:15:a5:0f:8c:a4:c5:cc:f4:a9:3c:78:ce: 3e:0b:54:34:a4:21:65:46:d2:c4:dd:e1:ba:df:f1: 5b:d7:61:b8:8c:b4:a5:4b:50:26:3a:7d:5b:2d:a9: 9e:9f:6a:90:91:bf:db:0e:5e:0d:30:fd:05:0d:4d: 1a:74:34:05:58:11:7c:0d:0b:98:2d:3e:c0:a5:b5: 51:38:c3:36:98:36:69:df:62:8b:5f:2c:06:69:5a: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:53:C1:E7:2B:DA:56:F0:4F:EA:A5:63:13:59:00:D2:5C:46:68 X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:d4:80:80:eb:c3:5f:f7:d6:c4:a5:08:3f:f2:eb:1b:56: fc:39:38:4f:33:64:52:09:25:a5:64:13:93:7f:ed:a6:28:45: d5:04:84:e8:ad:2e:05:aa:12:8e:84:02:7f:cf:4d:d5:39:e3: 05:65:d6:2f:4b:62:5f:66:02:c9:09:7a:43:7e:92:a2:47:4b: 75:c2:47:5b:56:99:6c:0d:81:28:4d:16:e1:87:1f:9c:a0:a8: 1b:15:d9:b7:01:2b:c6:7b:6e:57:6e:86:2c:53:dd:62:5c:a7: 83:46:f6:8b:aa:08:69:1e:49:4f:75:f6:0c:ac:36:d2:37:63: 57:40:ed:28:67:d7:c8:4e:51:f5:4c:7a:ed:68:95:66:55:c2: 0e:91:5d:59:19:2a:c2:11:ab:7f:70:cf:af:e0:9d:37:55:d1: 8f:d9:45:c7:63:8b:cd:f7:7c:de:1f:c3:5f:3e:57:72:11:65: 8b:83:bc:fb:73:66:d3:76:5d:46:0e:d4:9a:4f:e2:24:5b:fb: 1b:24:79:b8:93:15:9b:c5:95:11:73:47:a8:3f:d9:7c:36:58: d7:4a:7e:84:09:80:e4:b9:28:97:24:b2:87:fc:27:cd:89:80: 96:b4:a0:ed:33:bc:1b:d2:1d:6d:ba:92:df:a1:81:bd:bf:0d: 13:c7:55:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwMzI5MDU1MzQ0WhcNMjUwNDA1MDU1MzQ0WjAYMRYwFAYD VQQDEw02N2U3OGFlOC1hYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6cOY+EsYLarYG1WnsWYbreldWzJSxC85iRiqlF8iZ0cbK/vQlTTPgVPuklr RgkNzoqrSqjl8jSjza2Wg/wHxSa/ahDGVhDdRAxSGYtGeXpFh1fvFqNu/mQ/HlHl Ajq0niflIh/76j8Ma69m+1PvDy5uiZau1K3ESJ/Fco4qeNkCXe5GLR/IqT6ar1bw oRCDJvbG7Pay37m19D62pyMxviOeAwX7Z4EVpQ+MpMXM9Kk8eM4+C1Q0pCFlRtLE 3eG63/Fb12G4jLSlS1AmOn1bLamen2qQkb/bDl4NMP0FDU0adDQFWBF8DQuYLT7A pbVROMM2mDZp32KLXywGaVreWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI8U8Hn K9pW8E/qpWMTWQDSXEZoMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9tSAgOvDX/fWxKUIP/LrG1b8OThPM2RSCSWlZBOTf+2mKEXVBITo rS4FqhKOhAJ/z03VOeMFZdYvS2JfZgLJCXpDfpKiR0t1wkdbVplsDYEoTRbhhx+c oKgbFdm3ASvGe25XboYsU91iXKeDRvaLqghpHklPdfYMrDbSN2NXQO0oZ9fITlH1 THrtaJVmVcIOkV1ZGSrCEat/cM+v4J03VdGP2UXHY4vN93zeH8NfPldyEWWLg7z7 c2bTdl1GDtSaT+IkW/sbJHm4kxWbxZURc0eoP9l8NljXSn6ECYDkuSiXJLKH/CfN iYCWtKDtM7wb0h1tupLfoYG9vw0Tx1Ut -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:02 2025 by rpki-client