$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json) Hash identifier: Ijo8w9J6/xxBUDPrOZO1aDX9w4HtNFgxAmIsjZNRYIo= Subject key identifier: F5:BD:AD:DD:89:8F:28:F7:17:06:5E:E9:E1:8F:7E:A5:56:9C:AE:D0 Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 Certificate issuer: /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft Manifest number: 0659 Signing time: Wed 16 Apr 2025 22:05:36 +0000 Manifest this update: Wed 16 Apr 2025 22:05:36 +0000 Manifest next update: Wed 23 Apr 2025 22:05:36 +0000 Files and hashes: 1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: RFIayO+lCF/pzqK2C+PhJgW4/W0sX4z66sEhToRxyDk=) 2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: aQZNfhiseoXahMcYa1mO4OhpMyMyYPdZKpX7ChBPpY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B27, serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Validity Not Before: Apr 16 22:05:36 2025 GMT Not After : Apr 23 22:05:36 2025 GMT Subject: CN=680029b0-e4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:69:80:0a:d7:7c:3d:0e:49:dc:fa:11:0d: 2f:46:4a:96:96:d4:22:7c:af:b6:3c:b2:11:ee:a3: e6:7b:e3:22:32:34:0f:ae:4a:e5:7f:ca:c2:97:dc: aa:11:3b:c5:a6:e6:ab:40:c9:1a:d8:82:1f:84:c0: 0c:e4:d7:b0:69:97:a0:33:88:ae:47:db:6a:1e:3c: d1:f3:39:34:ec:15:59:92:96:1a:e6:87:77:23:76: 0e:89:42:b8:2a:bb:e8:02:1c:66:a2:69:48:90:4b: 57:c0:95:b5:da:92:78:f9:ef:e4:59:55:43:05:d8: a9:fd:7f:ed:7c:ff:66:81:d0:d5:85:5c:e6:e1:88: cf:05:82:15:a4:45:8d:70:4c:b6:2f:bd:ad:99:c3: 27:08:70:67:2f:d3:06:f9:e9:03:9f:6f:34:9a:72: ae:17:96:6e:3d:d5:b7:54:1b:1d:d1:44:cd:65:d4: 23:39:ff:bd:d7:20:23:d6:ec:e7:44:26:4d:25:4b: 34:35:a8:22:97:d2:6f:1c:7a:b4:33:2f:3f:12:9e: 6e:86:d9:4a:c5:1c:b4:4f:ed:89:a3:a9:64:0b:57: b1:e7:5a:80:4b:30:2d:0f:82:7d:e1:df:ca:5c:b7: 69:e7:b7:d2:a4:aa:b7:f4:19:37:f8:1d:00:38:bb: 90:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BD:AD:DD:89:8F:28:F7:17:06:5E:E9:E1:8F:7E:A5:56:9C:AE:D0 X509v3 Authority Key Identifier: keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:84:b1:d7:83:29:b5:f9:47:58:c9:18:da:e9:d8:25:67:31: 21:39:b5:0a:ac:4d:50:37:31:e8:a3:e4:21:47:65:b2:f4:ca: 6b:d8:61:6f:7d:83:80:fa:b6:de:2d:4a:e9:2c:e9:6b:d6:a4: 32:d2:3c:bd:a9:02:cf:80:d9:d1:38:d9:9e:a9:13:f0:b2:94: e0:fd:cd:ee:df:79:83:dd:a3:e1:24:0d:02:07:65:82:cc:8d: 42:95:28:b8:23:b7:05:ff:7e:aa:9a:37:61:67:9f:9f:c3:91: c8:1d:dc:db:07:5a:8d:84:aa:9c:52:31:b3:26:88:44:9b:49: 20:9a:66:16:93:8a:0f:24:d6:c1:af:1b:2f:97:4d:26:f7:8b: f0:88:61:3b:e7:92:2b:98:1c:bf:c6:95:57:84:b5:bf:a4:21: ec:22:91:2a:67:65:b4:ec:dd:37:dd:97:97:d7:a5:76:23:ab: a8:81:30:5c:95:38:ae:3a:33:9f:7c:3a:9a:a7:6f:01:cb:94: d9:98:21:51:66:8f:95:cc:37:38:2f:e9:68:f4:40:6d:eb:9d: 09:f7:44:e5:27:fa:84:37:65:bb:52:4e:e0:e5:35:6c:52:b0: 46:67:96:a4:d1:10:3a:c5:af:e0:d6:d6:fb:2c:c1:eb:ec:4a: d2:5a:7a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3 ODc2QkRCOTMwHhcNMjUwNDE2MjIwNTM2WhcNMjUwNDIzMjIwNTM2WjAYMRYwFAYD VQQDEw02ODAwMjliMC1lNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBRpgArXfD0OSdz6EQ0vRkqWltQifK+2PLIR7qPme+MiMjQPrkrlf8rCl9yq ETvFpuarQMka2IIfhMAM5NewaZegM4iuR9tqHjzR8zk07BVZkpYa5od3I3YOiUK4 KrvoAhxmomlIkEtXwJW12pJ4+e/kWVVDBdip/X/tfP9mgdDVhVzm4YjPBYIVpEWN cEy2L72tmcMnCHBnL9MG+ekDn280mnKuF5ZuPdW3VBsd0UTNZdQjOf+91yAj1uzn RCZNJUs0Nagil9JvHHq0My8/Ep5uhtlKxRy0T+2Jo6lkC1ex51qASzAtD4J94d/K XLdp57fSpKq39Bk3+B0AOLuQVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW9rd2J jyj3FwZe6eGPfqVWnK7QMB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPhLHXgym1+UdYyRja6dglZzEhObUKrE1QNzHoo+QhR2Wy9Mpr2GFv fYOA+rbeLUrpLOlr1qQy0jy9qQLPgNnRONmeqRPwspTg/c3u33mD3aPhJA0CB2WC zI1ClSi4I7cF/36qmjdhZ5+fw5HIHdzbB1qNhKqcUjGzJohEm0kgmmYWk4oPJNbB rxsvl00m94vwiGE755IrmBy/xpVXhLW/pCHsIpEqZ2W07N033ZeX16V2I6uogTBc lTiuOjOffDqap28By5TZmCFRZo+VzDc4L+lo9EBt650J90TlJ/qEN2W7Uk7g5TVs UrBGZ5ak0RA6xa/g1tb7LMHr7ErSWnqu -----END CERTIFICATE-----Generated at Fri Apr 18 03:41:04 2025 by rpki-client