$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json) Hash identifier: jQO8UzUm2NEo5zG844ITccPWCFwUtvyG1VjSHeq/awo= Subject key identifier: A5:7C:B2:24:6D:CD:12:4A:7D:DB:B4:09:F1:44:B1:6D:5D:E9:73:4E Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft Manifest number: 041C Signing time: Fri 11 Apr 2025 00:21:43 +0000 Manifest this update: Fri 11 Apr 2025 00:21:42 +0000 Manifest next update: Fri 18 Apr 2025 00:21:42 +0000 Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: PtzEI3AD69yGpwlW3AmXrbh0tcHgPFd9VUc8Z41oAvQ=) 2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: jwlLH9aehVTXk9pUZLFV4it1GAP8lE1rTRj2qtnhA8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: Apr 11 00:21:42 2025 GMT Not After : Apr 18 00:21:42 2025 GMT Subject: CN=67f86097-b166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:ca:be:60:d7:3a:79:01:1b:3f:7d:3a:eb: b6:57:79:92:89:70:b9:e9:22:02:b7:33:a1:5a:4c: be:99:b2:3b:c2:84:19:2f:c1:82:32:97:51:93:94: 61:ef:1d:ac:e3:96:ce:e1:83:21:2d:d6:21:28:9c: f8:5e:ca:f3:3f:45:bb:48:d6:1e:99:b4:bf:2d:16: 13:c8:cc:f0:26:96:ef:48:5d:cc:60:c6:93:f3:89: 38:69:9a:29:9f:be:34:19:c0:55:e0:c7:14:59:37: 69:02:57:99:f1:83:3f:2b:db:5b:18:fd:36:ba:13: d3:ee:fa:62:31:31:e9:70:32:09:fd:9a:3a:b8:d8: ff:9e:19:8f:3c:bf:5c:c2:c3:70:39:58:03:34:da: 83:20:60:0d:a7:7b:2e:e0:8c:c1:29:3e:62:5c:45: 48:25:01:3c:31:c5:eb:6d:bc:af:6f:18:e5:22:93: 6a:8c:ba:60:8b:c4:59:7f:09:7f:68:f2:37:4d:f6: 7e:33:95:a1:5f:97:86:eb:66:72:84:f0:64:dc:61: 5f:5e:6f:1e:ca:61:c3:a0:57:38:16:e0:d0:cc:e2: f0:3c:bc:95:88:16:d2:aa:f9:20:7c:07:5a:0f:53: 1a:49:be:08:47:3d:52:f9:c2:ee:b6:e2:9d:24:dd: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:B2:24:6D:CD:12:4A:7D:DB:B4:09:F1:44:B1:6D:5D:E9:73:4E X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:62:9d:05:64:d7:f5:f8:40:a6:cb:89:de:41:02:19:5e:25: a7:aa:f2:84:0f:11:c8:66:af:d6:5c:c3:92:e0:04:a3:86:6f: a5:d9:10:af:58:ce:f4:1f:44:c7:ea:7e:ea:d5:ab:3f:8b:63: f6:bc:aa:21:24:c7:4f:d4:12:1c:ee:b9:62:71:fd:5b:ca:18: 62:76:b9:67:b0:4b:95:ec:b5:18:4a:35:58:10:8d:3c:53:97: a7:fe:e5:8f:d9:80:aa:c8:38:27:85:e9:bd:23:be:88:af:af: 4c:7f:14:28:54:53:42:56:dd:e8:fd:9f:54:0a:d0:58:e9:a7: 33:7b:e7:fa:6c:85:f3:a3:4a:7f:0a:83:f7:cf:c9:fa:55:34: 8e:19:84:23:c1:67:db:82:26:cf:7b:5e:8e:4d:09:b7:87:31: a3:8d:cd:6c:b8:7a:e4:c8:6d:b0:4b:72:3c:c4:b6:90:ce:36: b6:e7:50:3c:12:1b:53:23:0b:c7:4b:88:d0:31:44:4a:e8:9d: ee:55:ab:96:53:4d:49:ce:9a:dc:8f:46:fa:2e:05:2e:02:da: df:c7:d6:01:b6:da:4c:76:96:30:97:df:de:c6:b8:73:85:62: a3:bc:df:4e:a1:a6:7d:3e:79:7b:d4:09:01:b6:24:8d:d6:be: 3e:7d:00:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjUwNDExMDAyMTQyWhcNMjUwNDE4MDAyMTQyWjAYMRYwFAYD VQQDEw02N2Y4NjA5Ny1iMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5rKvmDXOnkBGz99Ouu2V3mSiXC56SICtzOhWky+mbI7woQZL8GCMpdRk5Rh 7x2s45bO4YMhLdYhKJz4XsrzP0W7SNYembS/LRYTyMzwJpbvSF3MYMaT84k4aZop n740GcBV4McUWTdpAleZ8YM/K9tbGP02uhPT7vpiMTHpcDIJ/Zo6uNj/nhmPPL9c wsNwOVgDNNqDIGANp3su4IzBKT5iXEVIJQE8McXrbbyvbxjlIpNqjLpgi8RZfwl/ aPI3TfZ+M5WhX5eG62ZyhPBk3GFfXm8eymHDoFc4FuDQzOLwPLyViBbSqvkgfAda D1MaSb4IRz1S+cLutuKdJN3onwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV8siRt zRJKfdu0CfFEsW1d6XNOMB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzMxRC9FNzYxMENDRTVGMEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFs VlRDWXNCZnZ3eTdMSE95dUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYp0FZNf1+ECmy4neQQIZXiWnqvKEDxHIZq/WXMOS4ASjhm+l2RCv WM70H0TH6n7q1as/i2P2vKohJMdP1BIc7rlicf1byhhidrlnsEuV7LUYSjVYEI08 U5en/uWP2YCqyDgnhem9I76Ir69MfxQoVFNCVt3o/Z9UCtBY6acze+f6bIXzo0p/ CoP3z8n6VTSOGYQjwWfbgibPe16OTQm3hzGjjc1suHrkyG2wS3I8xLaQzja251A8 EhtTIwvHS4jQMURK6J3uVauWU01Jzprcj0b6LgUuAtrfx9YBttpMdpYwl9/exrhz hWKjvN9OoaZ9Pnl71AkBtiSN1r4+fQCa -----END CERTIFICATE-----Generated at Sat Apr 12 18:57:17 2025 by rpki-client