$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: H/qnB88HINJhb2MZCeS5fzXMWA9+lFF76CFlUJ6btjo= Subject key identifier: 22:03:98:40:F5:11:02:0D:78:9B:F6:02:69:FA:EC:22:1E:F3:89:64 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 3F Signing time: Sun 01 Jun 2025 07:12:26 +0000 Manifest this update: Sun 01 Jun 2025 07:12:25 +0000 Manifest next update: Sun 08 Jun 2025 07:12:25 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: xJ281IrlGTo1LAH/7+tqxDsL29bsB7qilUJzPuQXZl8=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Jun 1 07:12:25 2025 GMT Not After : Jun 8 07:12:25 2025 GMT Subject: CN=683bfd59-83fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:7b:e2:2d:be:3b:03:ad:25:4e:4f:8c:34: f8:35:64:55:4e:1f:95:a8:48:e7:fc:fd:40:89:de: 47:6e:6b:ff:de:7d:69:55:97:1c:10:f3:4d:4f:4a: dc:40:78:d2:63:a1:c1:25:81:e0:51:09:da:0d:23: 9d:96:67:b3:af:f0:a7:95:97:70:9a:11:ef:9c:6f: a1:dd:8c:be:64:03:b8:93:70:bb:0c:18:72:a5:e8: 8d:67:6d:58:ba:e7:1a:5b:58:4c:b9:7f:1a:35:54: 5e:f8:54:51:a1:ba:23:24:f0:77:81:af:13:00:99: dc:60:e3:61:87:91:47:07:5a:f4:07:79:5c:1d:cd: cb:1e:9e:77:cd:72:c0:a2:b9:66:2b:72:b4:cc:54: c1:cf:a6:9f:93:c4:ef:da:e5:be:4c:1f:f3:d5:46: da:ab:ad:a1:10:ed:6d:17:f7:69:ec:6a:3a:83:c0: 07:87:0a:97:b0:27:27:f3:84:a4:4d:4b:79:61:fe: 50:9b:1f:33:00:7d:be:92:bc:48:63:26:f3:c6:33: 82:d3:9f:2f:cd:10:69:a2:8e:52:82:f2:06:ad:3a: 6c:89:11:be:4e:7b:b5:8b:03:14:27:2e:5a:14:1c: 15:01:74:21:1e:22:42:86:12:09:98:97:13:84:f7: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:98:40:F5:11:02:0D:78:9B:F6:02:69:FA:EC:22:1E:F3:89:64 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:89:5a:8d:4a:cd:df:dd:e4:7c:d1:db:57:c9:58:ca:5c:98: f4:dc:6b:e0:9a:49:55:a4:5d:81:c7:45:0c:b7:2d:6c:9e:27: b0:c0:65:b3:92:d0:9b:69:e3:c1:d9:68:58:3b:31:45:50:b1: 37:e4:40:ef:4f:5e:40:cc:2a:f3:49:c7:df:6c:be:5c:93:e5: 1a:de:4c:8d:47:e5:41:36:e2:a8:d2:31:f2:84:7d:9d:c7:66: a1:2b:2e:e1:b5:78:56:77:78:89:b7:58:d1:06:e2:23:d7:49: d9:48:40:7f:11:e4:a7:58:56:a0:16:6d:74:ab:e8:31:74:8f: b7:9d:a0:cf:8c:c6:f3:99:39:2d:3d:a7:3f:7d:ac:d4:0f:b3: a0:18:f3:4a:5b:69:53:7f:ca:e7:d8:d6:2a:04:fc:82:db:f0: 9b:87:06:fb:52:9f:71:ef:a7:f3:5b:3f:22:7b:8b:ac:ad:8b: 83:e3:7d:98:17:97:a2:e5:1a:36:11:a2:5c:0b:24:e1:f1:a1: 0a:f5:0c:bf:76:25:94:a2:9d:ec:81:6c:e5:54:90:30:be:87: d2:1e:fb:93:28:87:95:32:51:ea:76:f4:ae:f3:49:a2:f4:d6: 3c:f4:14:6d:dc:d4:2c:b7:8e:28:64:80:08:02:b1:86:d5:b5: a7:54:64:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA2MDEwNzEyMjVaFw0yNTA2MDgwNzEyMjVaMBgxFjAUBgNV BAMTDTY4M2JmZDU5LTgzZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBknviLb47A60lTk+MNPg1ZFVOH5WoSOf8/UCJ3kdua//efWlVlxwQ801PStxA eNJjocElgeBRCdoNI52WZ7Ov8KeVl3CaEe+cb6HdjL5kA7iTcLsMGHKl6I1nbVi6 5xpbWEy5fxo1VF74VFGhuiMk8HeBrxMAmdxg42GHkUcHWvQHeVwdzcsennfNcsCi uWYrcrTMVMHPpp+TxO/a5b5MH/PVRtqrraEQ7W0X92nsajqDwAeHCpewJyfzhKRN S3lh/lCbHzMAfb6SvEhjJvPGM4LTny/NEGmijlKC8gatOmyJEb5Oe7WLAxQnLloU HBUBdCEeIkKGEgmYlxOE94uHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIgOYQPUR Ag14m/YCafrsIh7ziWQwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSJWo1Kzd/d5HzR21fJWMpcmPTca+CaSVWkXYHHRQy3LWyeJ7DAZbOS 0Jtp48HZaFg7MUVQsTfkQO9PXkDMKvNJx99svlyT5RreTI1H5UE24qjSMfKEfZ3H ZqErLuG1eFZ3eIm3WNEG4iPXSdlIQH8R5KdYVqAWbXSr6DF0j7edoM+MxvOZOS09 pz99rNQPs6AY80pbaVN/yufY1ioE/ILb8JuHBvtSn3Hvp/NbPyJ7i6yti4PjfZgX l6LlGjYRolwLJOHxoQr1DL92JZSineyBbOVUkDC+h9Ie+5Moh5UyUep29K7zSaL0 1jz0FG3c1Cy3jihkgAgCsYbVtadUZPA= -----END CERTIFICATE-----Generated at Mon Jun 2 22:11:38 2025 by rpki-client