$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft File: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json) Hash identifier: ZpWB0nqM0O9wSGsLcouEOi4+pnhX3haFwbWW7snPY0o= Subject key identifier: 64:EC:1B:D2:64:53:AF:49:9A:A9:BA:9B:BA:CE:16:83:6D:3C:4D:9E Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft Manifest number: 0711 Signing time: Tue 08 Apr 2025 21:38:46 +0000 Manifest this update: Tue 08 Apr 2025 21:38:46 +0000 Manifest next update: Tue 15 Apr 2025 21:38:46 +0000 Files and hashes: 1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: R4Et+Zl66f7qkdb24W60W7GvKMuOP7buNdCOASV0B3k=) 2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: 92lyXbjZ3ilhbPTi3bIiIM9WxhIE8HDP3fXz3FH+B/0=) 3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: 7lwNL3t/JdazFMQVAAWu8rGphtVMmdlmg5/1e8s3fEI=) 4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: Yj2T58ly70pMGwVD+Jsc26BVVEHVfIBLr1Bjam0IA4A=) 5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: VBFrb7hmUOgI2LuDUX5a6ibtYNZDHswnzaDArlyUmUg=) 6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: Keuv9NsRlWrR3IwwftF+Sux47myitkAj0p1n+TAix+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A Validity Not Before: Apr 8 21:38:46 2025 GMT Not After : Apr 15 21:38:46 2025 GMT Subject: CN=67f59766-d0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:24:63:cb:34:12:fd:37:a0:98:5f:58:43: 01:9d:19:f7:5e:3e:b0:b3:63:98:51:84:0f:b9:de: d7:94:ab:fa:94:96:84:e4:cd:4a:1d:68:0e:ba:d7: 10:0e:6d:4b:2b:19:cb:a0:35:64:6b:58:fc:30:21: 83:a9:e0:59:6d:e5:98:51:51:4e:1e:a8:f4:5e:b1: 5a:b1:a0:1a:e8:b2:7a:c9:43:bc:bb:ee:85:82:27: 90:88:98:b7:23:66:4c:28:83:dd:db:a1:6f:e0:6d: d9:85:18:7a:fb:43:a6:57:10:2c:1e:23:f6:c2:05: 27:ad:d9:4a:8e:b7:db:82:11:d7:08:1a:e6:53:22: c7:f0:da:ef:84:0a:74:46:a4:07:0b:1f:1f:16:53: 18:f2:26:dc:95:19:4f:36:2b:80:ed:21:35:a8:1d: 5e:88:38:40:f9:51:85:4e:16:9a:3d:c0:39:4b:c5: 6b:9f:8d:30:49:20:d4:01:01:c5:6a:61:4c:d4:21: b6:70:9b:af:e2:db:1e:a9:c6:4d:2c:04:85:4b:05: 51:3a:20:89:7b:d6:2a:40:d3:a5:4f:92:cf:2e:2c: 12:08:c8:c8:83:47:61:2b:0a:8a:7e:c8:f6:f6:38: a1:1e:70:81:44:0b:d6:9f:4e:e3:83:56:34:53:f2: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:1B:D2:64:53:AF:49:9A:A9:BA:9B:BA:CE:16:83:6D:3C:4D:9E X509v3 Authority Key Identifier: keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e3:f2:c4:f1:d3:84:a2:e8:1d:16:0c:8d:d9:f6:9f:17:7d: a5:36:11:c2:9c:13:52:c2:2b:79:8f:fd:26:31:4a:f3:fa:c7: f9:8b:bd:62:e6:b8:05:3f:ac:54:52:ab:12:4e:bb:d0:05:8c: 88:5b:a1:0c:c2:e6:4a:9e:78:f3:a4:20:4a:da:01:da:83:88: b2:63:43:7c:ea:e8:3c:f5:4f:ad:70:82:4b:96:e6:47:0b:27: ad:cd:7c:1f:9d:f3:59:43:b2:42:1d:8a:19:6d:91:69:82:c6: dd:54:3b:6a:9a:e1:b1:93:c3:97:b1:69:5d:de:35:f9:f2:32: 1d:c2:bd:bf:3a:a2:9d:35:9b:14:3a:74:7d:99:8e:4f:4c:04: d4:08:0d:91:85:83:e1:42:36:cc:32:68:ac:09:86:9c:53:1e: 70:55:ef:12:2a:9d:4c:b6:4a:f4:32:e5:73:1e:bb:8c:7f:10: f7:ca:e6:60:84:d0:25:7f:8d:0a:7c:7a:4b:ee:89:a5:aa:93: 6e:06:92:f9:da:1f:73:3b:0c:14:ad:da:3f:d5:24:9c:f6:ee: 4e:de:f1:aa:56:da:68:e7:1a:a0:a5:ad:62:e4:6d:a8:ba:05: 76:49:1b:04:8c:72:3d:97:99:a3:31:4e:d1:95:10:b3:a2:14: 7a:1c:5e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKEJDQjgwREU0NDcwNUNGQzRGODM5Nzg1OTBDOUYzRkMy RTJDMkY4NTIwHhcNMjUwNDA4MjEzODQ2WhcNMjUwNDE1MjEzODQ2WjAYMRYwFAYD VQQDEw02N2Y1OTc2Ni1kMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw4kY8s0Ev03oJhfWEMBnRn3Xj6ws2OYUYQPud7XlKv6lJaE5M1KHWgOutcQ Dm1LKxnLoDVka1j8MCGDqeBZbeWYUVFOHqj0XrFasaAa6LJ6yUO8u+6FgieQiJi3 I2ZMKIPd26Fv4G3ZhRh6+0OmVxAsHiP2wgUnrdlKjrfbghHXCBrmUyLH8NrvhAp0 RqQHCx8fFlMY8ibclRlPNiuA7SE1qB1eiDhA+VGFThaaPcA5S8Vrn40wSSDUAQHF amFM1CG2cJuv4tseqcZNLASFSwVROiCJe9YqQNOlT5LPLiwSCMjIg0dhKwqKfsj2 9jihHnCBRAvWn07jg1Y0U/JejwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTsG9Jk U69Jmqm6m7rOFoNtPE2eMB8GA1UdIwQYMBaAFLy4DeRHBc/E+Dl4WQyfP8LiwvhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GMUE5QkFCQzMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4VDRPWGhaREo4X3d1TEMt RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZMZ041RWNGejhUNE9YaFpESjhfd3VMQy1GSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GMUE5QkFCQzMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4 VDRPWGhaREo4X3d1TEMtRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw4/LE8dOEougdFgyN2fafF32lNhHCnBNSwit5j/0mMUrz+sf5i71i 5rgFP6xUUqsSTrvQBYyIW6EMwuZKnnjzpCBK2gHag4iyY0N86ug89U+tcIJLluZH CyetzXwfnfNZQ7JCHYoZbZFpgsbdVDtqmuGxk8OXsWld3jX58jIdwr2/OqKdNZsU OnR9mY5PTATUCA2RhYPhQjbMMmisCYacUx5wVe8SKp1Mtkr0MuVzHruMfxD3yuZg hNAlf40KfHpL7omlqpNuBpL52h9zOwwUrdo/1SSc9u5O3vGqVtpo5xqgpa1i5G2o ugV2SRsEjHI9l5mjMU7RlRCzohR6HF7T -----END CERTIFICATE-----Generated at Thu Apr 10 23:23:26 2025 by rpki-client