$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft File: VIQw6riOTjePtQBa-uXKucAAeho.mft (raw, json) Hash identifier: qG3yt+qvgPPDy1ZbC+UU66066O44Y9FEmloGMW730Go= Subject key identifier: 07:7A:8E:B0:0F:40:31:E6:C2:AD:74:99:2F:3F:6E:8C:51:02:91:AE Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft Manifest number: 66 Signing time: Sat 29 Mar 2025 06:33:10 +0000 Manifest this update: Sat 29 Mar 2025 06:33:09 +0000 Manifest next update: Sat 05 Apr 2025 06:33:09 +0000 Files and hashes: 1: VIQw6riOTjePtQBa-uXKucAAeho.crl (hash: zo1aoDGfmcYDgQl+kM4OrW2Jdw1JUEHFPjAa5q8U2as=) 2: B91F8BF69EE211EF883C7D14C4F9AE02.roa (hash: Y3nxj0fo17afWS9kISA2qz006sX13/ROncukXnBfO9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818 Validity Not Before: Mar 29 06:33:09 2025 GMT Not After : Apr 5 06:33:09 2025 GMT Subject: CN=67e79426-e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:b9:86:1b:73:8e:2a:a2:70:6a:88:2d:57: 43:0b:0f:0e:1d:06:b8:c5:f4:df:c1:0d:98:2c:3e: c2:b4:de:22:1f:12:19:94:ed:00:1b:26:8c:ef:e6: 2a:9a:de:3e:50:46:40:1b:4f:7d:cc:46:e7:32:c7: 66:eb:b4:70:aa:95:90:8f:3f:eb:c8:2e:d9:dd:67: 1e:d2:40:b5:8d:9a:62:00:5d:7c:34:fe:4e:b0:1a: 40:13:a1:06:bf:1b:56:87:74:fe:f1:b7:27:a9:50: 7c:ee:5c:0c:68:7e:2b:76:f4:2e:7c:13:e0:65:6f: 02:10:8d:50:e3:6e:bd:6a:09:ac:68:3b:a1:8a:60: 81:32:aa:11:51:b6:52:e8:3c:31:fa:f3:6a:34:c2: c3:7b:3f:27:4a:fd:c6:5c:f2:48:9d:08:d1:94:c7: 01:61:da:66:82:78:e3:c0:4d:59:98:96:6f:d7:50: 86:7a:f3:b1:0e:5a:5b:77:f1:2f:3a:1b:47:a6:42: 6f:68:a2:fb:d7:a0:c9:f2:89:1e:a4:bc:6d:20:81: 87:c3:cf:62:85:db:fd:f0:08:dc:0f:57:ed:90:b6: 38:e2:9e:81:37:df:1d:76:61:e6:bd:d7:fa:73:4a: 84:30:a3:dc:c6:3e:aa:97:02:5e:57:4d:41:1c:c6: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:8E:B0:0F:40:31:E6:C2:AD:74:99:2F:3F:6E:8C:51:02:91:AE X509v3 Authority Key Identifier: keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:e7:63:8a:dd:c8:7f:16:b4:d6:b3:41:bf:5e:05:b6:18: c8:86:2b:48:55:34:f5:61:dc:d0:bb:76:c4:60:04:b7:95:4f: ca:81:1f:77:95:61:fd:1f:03:c7:04:ba:61:cf:12:66:fa:b5: cf:35:f3:31:28:d0:dd:47:85:63:ec:58:2a:d4:0a:71:9d:5f: b3:dd:d8:54:82:30:6b:81:01:31:55:3b:4f:f6:b4:06:32:f8: 54:8b:3b:ed:6a:eb:13:2b:d3:ed:b3:4f:90:cf:f8:c6:47:e4: e4:e3:80:72:ac:29:c0:4e:9c:d3:ae:0d:95:89:ea:99:53:89: 87:a4:a1:ae:39:ab:90:a5:1e:8e:53:8d:76:1a:01:02:63:c1: f2:38:92:d1:80:16:de:39:df:ac:33:3f:e7:b5:2e:db:1e:f2: fe:cd:f1:94:c0:56:2d:d3:ad:40:da:b0:a1:00:dd:e3:0f:d7: ed:37:55:db:78:96:1c:06:0b:28:d0:77:1f:4b:c7:c3:74:10: 01:cb:c1:80:9e:ab:72:c9:99:b5:3d:e8:8a:cc:88:00:34:ef: 13:b0:de:94:b0:a8:49:15:f6:83:0f:8a:bc:32:c1:aa:74:1f: a5:81:32:93:cd:33:f5:aa:29:d3:5d:6f:ef:24:98:0f:39:de: 55:be:bb:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNTQ4NDMwRUFCODhFNEUzNzhGQjUwMDVBRkFFNUNBQjlD MDAwN0ExQTAeFw0yNTAzMjkwNjMzMDlaFw0yNTA0MDUwNjMzMDlaMBgxFjAUBgNV BAMTDTY3ZTc5NDI2LWU2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcKrmGG3OOKqJwaogtV0MLDw4dBrjF9N/BDZgsPsK03iIfEhmU7QAbJozv5iqa 3j5QRkAbT33MRucyx2brtHCqlZCPP+vILtndZx7SQLWNmmIAXXw0/k6wGkAToQa/ G1aHdP7xtyepUHzuXAxofit29C58E+BlbwIQjVDjbr1qCaxoO6GKYIEyqhFRtlLo PDH682o0wsN7PydK/cZc8kidCNGUxwFh2maCeOPATVmYlm/XUIZ687EOWlt38S86 G0emQm9oovvXoMnyiR6kvG0ggYfDz2KF2/3wCNwPV+2QtjjinoE33x12Yea91/pz SoQwo9zGPqqXAl5XTUEcxveJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB3qOsA9A MebCrXSZLz9ujFECka4wHwYDVR0jBBgwFoAUVIQw6riOTjePtQBa+uXKucAAehow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4LzdFMUY2QUUyOTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVklRdzZyaU9UamVQdFFCYS11WEt1Y0FBZWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODE4LzdFMUY2QUUyOTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1ZJUXc2cmlPVGpl UHRRQmEtdVhLdWNBQWVoby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGH52OK3ch/FrTWs0G/XgW2GMiGK0hVNPVh3NC7dsRgBLeVT8qBH3eV Yf0fA8cEumHPEmb6tc818zEo0N1HhWPsWCrUCnGdX7Pd2FSCMGuBATFVO0/2tAYy +FSLO+1q6xMr0+2zT5DP+MZH5OTjgHKsKcBOnNOuDZWJ6plTiYekoa45q5ClHo5T jXYaAQJjwfI4ktGAFt4536wzP+e1Ltse8v7N8ZTAVi3TrUDasKEA3eMP1+03Vdt4 lhwGCyjQdx9Lx8N0EAHLwYCeq3LJmbU96IrMiAA07xOw3pSwqEkV9oMPirwywap0 H6WBMpPNM/WqKdNdb+8kmA853lW+uxE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:51 2025 by rpki-client