$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: iAqJrl2PSNAspDF5gWjz2TosA7moNJXTTQvwNNMiiXg= Subject key identifier: 39:B1:87:E7:04:72:34:3B:BA:51:3A:BB:A2:CA:65:2B:C9:D2:07:DD Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 0522 Signing time: Fri 04 Apr 2025 23:38:49 +0000 Manifest this update: Fri 04 Apr 2025 23:38:49 +0000 Manifest next update: Fri 11 Apr 2025 23:38:49 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: kHYmedFN24J4JlvRzBXwCTuXoFPIyhOQwLyWOPSgD+Y=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21 Validity Not Before: Apr 4 23:38:49 2025 GMT Not After : Apr 11 23:38:49 2025 GMT Subject: CN=67f06d89-ec60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:dd:05:bb:d3:16:1d:a8:c8:b9:02:7b:4d: 73:54:e1:77:fd:2a:ea:d8:bd:66:8b:49:36:35:6f: de:f2:1d:e1:b2:68:e9:0d:f3:6c:c3:e1:c7:5e:f5: 05:14:b2:0c:9a:e9:b4:79:15:29:52:c7:c3:9c:30: aa:f7:e3:18:49:97:a2:f4:0c:57:5d:6b:a9:d8:85: bf:68:35:10:d6:3d:ba:32:89:5a:c9:99:34:da:60: 47:30:9a:33:e4:ad:a0:84:8f:d1:cd:36:d5:3d:a8: 55:5a:0b:e8:d1:5b:ae:13:f7:07:0d:4f:6a:83:e5: 72:45:02:a0:0e:d7:69:5c:6a:c9:4e:bf:4a:81:8e: 56:68:fa:57:d4:4e:66:50:aa:a7:04:89:9a:47:97: ee:44:6b:65:a9:91:dc:87:ef:c5:56:3b:eb:dc:bb: 6d:cf:b1:3d:78:a0:3c:82:44:fd:79:f4:8e:7e:62: 08:d4:ce:f5:1e:ad:7e:86:07:06:43:07:40:88:4b: d3:00:e0:60:ce:73:12:b4:40:7b:4a:fc:57:46:57: 26:fb:b1:e3:ca:a1:61:2f:a6:3a:a3:2d:a0:29:e0: b9:ac:f1:f2:4a:16:55:da:a0:7f:1a:a2:c1:df:e9: c1:10:86:65:52:be:4f:7c:7a:dd:8a:82:a2:17:9d: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:87:E7:04:72:34:3B:BA:51:3A:BB:A2:CA:65:2B:C9:D2:07:DD X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:93:94:b3:14:3b:70:e8:7b:43:d1:16:a7:55:8d:b3:46:e3: ee:95:2a:87:21:e4:34:1a:ff:ca:76:09:7c:bc:e6:bc:b4:24: 83:7a:63:c7:e9:f7:90:3a:ca:4a:a7:14:c5:d1:f7:a2:6a:43: da:eb:f7:28:0a:f6:b7:da:3f:d9:92:ef:22:36:fc:c7:4f:e0: ca:e5:e9:b1:4d:80:76:76:71:e9:51:9e:5d:d4:ce:bd:bf:70: 16:ad:e6:fb:ff:be:cf:3f:c1:23:65:f0:c4:45:93:5b:c4:7f: ca:71:b2:0c:d1:90:25:89:b5:ca:cd:df:15:a1:3d:06:b5:5f: f6:5e:cb:1a:51:6a:8e:4e:2a:b3:1d:43:41:8a:86:23:c7:7e: 35:06:2f:de:a4:7c:b8:da:e4:b7:08:8b:e8:df:04:be:7e:f5: 9d:e6:32:dc:1c:0d:92:03:9f:0f:ba:86:10:20:ee:2e:c8:20: 16:99:0f:71:b7:ef:d8:e5:70:b5:1a:bc:5a:f5:68:16:f1:03: f4:7f:8b:76:df:37:31:fa:aa:c5:73:ea:96:7e:de:26:85:bc: 78:ee:4f:63:cc:4f:10:5f:6d:ba:3b:ea:bc:20:2c:35:b1:d7: a7:1c:cc:b8:84:9e:40:6a:51:f2:f3:e1:eb:76:1b:f4:37:1f: 98:73:c4:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwNDA0MjMzODQ5WhcNMjUwNDExMjMzODQ5WjAYMRYwFAYD VQQDEw02N2YwNmQ4OS1lYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopfdBbvTFh2oyLkCe01zVOF3/Srq2L1mi0k2NW/e8h3hsmjpDfNsw+HHXvUF FLIMmum0eRUpUsfDnDCq9+MYSZei9AxXXWup2IW/aDUQ1j26MolayZk02mBHMJoz 5K2ghI/RzTbVPahVWgvo0VuuE/cHDU9qg+VyRQKgDtdpXGrJTr9KgY5WaPpX1E5m UKqnBImaR5fuRGtlqZHch+/FVjvr3Lttz7E9eKA8gkT9efSOfmII1M71Hq1+hgcG QwdAiEvTAOBgznMStEB7SvxXRlcm+7HjyqFhL6Y6oy2gKeC5rPHyShZV2qB/GqLB 3+nBEIZlUr5PfHrdioKiF50JewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmxh+cE cjQ7ulE6u6LKZSvJ0gfdMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJk5SzFDtw6HtD0RanVY2zRuPulSqHIeQ0Gv/Kdgl8vOa8tCSDemPH 6feQOspKpxTF0feiakPa6/coCva32j/Zku8iNvzHT+DK5emxTYB2dnHpUZ5d1M69 v3AWreb7/77PP8EjZfDERZNbxH/KcbIM0ZAlibXKzd8VoT0GtV/2XssaUWqOTiqz HUNBioYjx341Bi/epHy42uS3CIvo3wS+fvWd5jLcHA2SA58PuoYQIO4uyCAWmQ9x t+/Y5XC1Grxa9WgW8QP0f4t23zcx+qrFc+qWft4mhbx47k9jzE8QX226O+q8ICw1 sdenHMy4hJ5AalHy8+Hrdhv0Nx+Yc8SG -----END CERTIFICATE-----Generated at Sun Apr 6 18:41:39 2025 by rpki-client