$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: RbUZXh1XAYw13PGAFNJgnLWO7ZyS5kd8D1SM/3OT5fw= Subject key identifier: 20:F6:1E:56:E3:C1:C1:93:38:D6:E8:C8:78:8C:6C:1F:98:94:73:10 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1305 Signing time: Fri 04 Apr 2025 17:08:11 +0000 Manifest this update: Fri 04 Apr 2025 17:08:11 +0000 Manifest next update: Fri 11 Apr 2025 17:08:11 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: o9q89c52+0KoooS4ihFiQYQaXWQb9gcfQZpB/otwdEY=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: ++7RC+lcxadURbh9ihJKswyqNjTMzF1VYIMw23UQZNY=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: YugUSTWItaHwoU0lMPP/vlXY7+UmWW6qtCLtQUAsjJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4883 (0x1313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0 Validity Not Before: Apr 4 17:08:11 2025 GMT Not After : Apr 11 17:08:11 2025 GMT Subject: CN=67f011fb-1252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:c4:7e:9a:d4:4a:58:f1:a3:b3:6a:34:94: 22:42:0a:58:db:63:27:1d:5e:15:06:16:11:8a:54: 4d:ac:9c:57:7b:c4:98:d3:14:b6:3c:db:0f:f8:74: 23:e1:1e:6c:23:3b:c2:08:d0:9e:20:f2:13:0a:be: 08:d6:17:f8:18:d4:45:78:19:f5:a3:60:4c:b9:2c: fd:81:1c:c8:01:09:00:bc:09:9e:4d:7a:88:f4:ec: 45:6c:17:a4:10:89:8f:bb:f5:a3:ae:30:86:65:a1: 21:21:46:bb:fb:9d:69:d9:f0:c7:a3:e7:ec:c8:78: b9:34:5a:12:16:4e:8b:8a:9a:19:8a:10:71:a1:f6: eb:90:aa:cd:f8:07:1b:0e:fd:53:e6:75:b8:c1:43: df:01:93:d0:af:69:4d:71:27:dc:1e:22:db:12:79: c0:0f:1a:e2:dc:32:27:c1:37:d3:5d:1d:97:3a:3b: 7c:59:e0:fe:eb:19:1f:05:6c:96:3b:f3:3f:c0:b4: e7:3f:95:6b:66:60:5f:47:2d:20:a8:d1:00:22:f0: 54:46:9d:73:73:24:55:23:33:0a:07:3d:6f:dc:05: 75:ed:b9:e5:5c:42:14:cf:7e:bf:28:9f:2d:e9:81: cd:c6:7c:d0:77:5c:39:16:5c:a5:15:c4:21:4c:19: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:1E:56:E3:C1:C1:93:38:D6:E8:C8:78:8C:6C:1F:98:94:73:10 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2c:7d:cf:86:4e:61:95:26:b8:8e:45:56:9b:a5:66:fd:29: 4c:a2:c1:b8:33:62:d3:b2:74:a2:e8:ca:9a:b5:54:f6:77:01: 3e:d4:05:46:14:be:f2:9f:31:ec:44:aa:22:33:52:9e:54:0d: cf:b2:06:76:8c:fc:fb:95:a6:82:bb:86:d7:af:5a:b7:5b:44: f8:a5:12:a2:77:3e:4e:38:86:25:9e:1c:cc:62:08:71:81:bb: 55:48:8d:79:00:ec:22:c4:e2:6f:ec:f2:00:eb:3d:3f:6a:89: 6f:af:fa:3b:6d:da:c8:ac:a9:58:6f:6d:33:b3:67:d2:b9:22: 8c:1e:f9:da:35:6f:77:97:2b:69:d3:89:1d:57:b6:32:b1:ed: cf:25:df:12:ee:0b:e1:10:d4:0d:4f:5e:29:22:d3:15:89:4b: 38:c0:5f:5d:30:88:53:98:8b:b1:4e:5e:02:39:96:54:8d:76: fd:ba:94:5c:cf:e7:42:72:b0:a7:ba:af:54:bb:13:a3:29:dd: 8e:66:ea:3b:8d:d1:d6:ab:9b:3a:65:6a:2a:f4:38:4a:50:5e: 4f:ff:31:92:45:84:84:f0:e3:30:99:14:7d:93:c1:6d:52:50: 1a:8c:f5:78:06:36:f6:30:e7:d9:9a:45:63:e0:07:26:d9:68: b1:d7:11:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNDA0MTcwODExWhcNMjUwNDExMTcwODExWjAYMRYwFAYD VQQDEw02N2YwMTFmYi0xMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyHEfprUSljxo7NqNJQiQgpY22MnHV4VBhYRilRNrJxXe8SY0xS2PNsP+HQj 4R5sIzvCCNCeIPITCr4I1hf4GNRFeBn1o2BMuSz9gRzIAQkAvAmeTXqI9OxFbBek EImPu/WjrjCGZaEhIUa7+51p2fDHo+fsyHi5NFoSFk6LipoZihBxofbrkKrN+Acb Dv1T5nW4wUPfAZPQr2lNcSfcHiLbEnnADxri3DInwTfTXR2XOjt8WeD+6xkfBWyW O/M/wLTnP5VrZmBfRy0gqNEAIvBURp1zcyRVIzMKBz1v3AV17bnlXEIUz36/KJ8t 6YHNxnzQd1w5FlylFcQhTBkiZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD2Hlbj wcGTONboyHiMbB+YlHMQMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3LH3Phk5hlSa4jkVWm6Vm/SlMosG4M2LTsnSi6MqatVT2dwE+1AVG FL7ynzHsRKoiM1KeVA3PsgZ2jPz7laaCu4bXr1q3W0T4pRKidz5OOIYlnhzMYghx gbtVSI15AOwixOJv7PIA6z0/aolvr/o7bdrIrKlYb20zs2fSuSKMHvnaNW93lytp 04kdV7Yyse3PJd8S7gvhENQNT14pItMViUs4wF9dMIhTmIuxTl4COZZUjXb9upRc z+dCcrCnuq9UuxOjKd2OZuo7jdHWq5s6ZWoq9DhKUF5P/zGSRYSE8OMwmRR9k8Ft UlAajPV4Bjb2MOfZmkVj4Acm2Wix1xHO -----END CERTIFICATE-----Generated at Sun Apr 6 12:35:37 2025 by rpki-client