$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json) Hash identifier: cg0lZ78zrItCgKP4i4zSJFDvcYsRu9RIX2GoZGDzwHg= Subject key identifier: 5A:04:85:99:90:9F:59:42:43:D6:B2:DD:15:EE:B1:E9:89:3F:1D:3A Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:17:29 +0000 Manifest this update: Sat 31 May 2025 07:17:29 +0000 Manifest next update: Sat 07 Jun 2025 07:17:29 +0000 Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: rsgEmVOtaQOtLy9+rHnyncuv3fvyyJlciY+U5ZDHwIM=) 2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: iG1+i+/h5uPBH8czu/MsD7AGiWboXVjY7acUxjpESco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8, serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Validity Not Before: May 31 07:17:29 2025 GMT Not After : Jun 7 07:17:29 2025 GMT Subject: CN=683aad09-5a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:3b:e0:93:45:be:aa:2a:be:d4:22:21:6e: ad:43:b9:b7:91:27:15:6e:4c:58:79:97:5b:e7:1d: 29:b7:de:80:f3:65:78:ee:bd:f0:39:91:24:80:4c: da:ad:e9:c7:3e:27:ad:be:e7:a3:92:64:5e:25:af: 85:50:43:75:1e:86:15:30:4a:64:3a:72:d9:13:42: 8c:8f:d4:b5:59:65:5e:61:d8:52:f4:c8:63:ea:ac: 63:95:7f:03:07:1c:dc:d4:7b:15:7b:ab:06:f2:9c: 8e:38:a3:50:29:6c:0b:71:11:32:34:10:fa:7f:0b: 51:49:7b:a9:4d:a2:c0:59:e9:08:dd:5e:02:4b:fc: 1f:68:ec:97:ba:33:eb:03:9f:26:71:da:8e:e8:d3: e1:68:8c:51:28:cb:72:8f:81:45:b1:56:38:2b:25: 93:05:ad:34:74:0e:f0:c9:df:f3:80:61:e6:b0:f1: 94:b4:f4:c8:83:c4:b2:14:79:e1:22:ee:a8:e6:5b: 68:85:41:70:60:b5:ef:9a:f4:08:52:3b:30:ad:a0: b6:a6:14:a6:d5:c8:b4:94:71:ff:5e:fe:fc:80:85: 38:23:8d:f6:ad:c9:2b:a8:03:4d:6e:df:0d:a8:cc: 32:dc:bd:16:a3:51:9e:e6:63:a7:ce:4b:78:28:a6: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:04:85:99:90:9F:59:42:43:D6:B2:DD:15:EE:B1:E9:89:3F:1D:3A X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:95:bf:2e:3a:84:fb:03:b3:86:6c:a3:d2:7f:d6:bb:71:15: ba:6c:93:d6:ca:9c:48:2c:fe:4c:dd:cc:f5:9d:09:99:b4:50: 73:31:20:39:b6:9d:a1:fe:37:06:9d:f7:43:2b:83:8c:c4:4a: b5:2d:9b:71:8b:02:38:0b:f1:1d:4e:3e:b9:f4:0b:6b:71:59: bf:9e:ea:3c:25:3c:7b:7a:9b:82:39:fb:45:ce:5a:27:a4:9b: 21:dd:0d:2f:be:e3:d7:44:cc:01:f6:a0:45:da:e2:3f:ca:31: f6:9e:79:e7:53:53:38:5f:81:f4:df:77:94:99:33:9b:2e:3c: d8:ac:04:7c:49:88:58:32:c5:a0:08:67:89:80:73:12:04:b8: 2d:e4:07:72:b7:96:15:d3:d8:6f:42:c5:59:21:18:12:1e:19: 75:cb:d9:56:38:19:bb:98:fd:a1:83:8c:47:67:0a:3d:af:96: 33:f3:db:98:40:1a:db:9f:72:63:a7:ee:49:26:59:ee:ff:ed: 5b:1d:6f:9f:3c:5b:7e:a2:49:b1:dd:17:12:ef:54:04:b2:20: d3:44:e7:9b:80:c2:a5:0d:a0:9d:aa:95:22:a8:f9:0c:f3:dc: 3e:10:c5:c7:fd:3d:40:29:fa:39:bf:ee:41:ec:fd:34:02:c2: 06:19:1f:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTA1MzEwNzE3MjlaFw0yNTA2MDcwNzE3MjlaMBgxFjAUBgNV BAMTDTY4M2FhZDA5LTVhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMdjvgk0W+qiq+1CIhbq1DubeRJxVuTFh5l1vnHSm33oDzZXjuvfA5kSSATNqt 6cc+J62+56OSZF4lr4VQQ3UehhUwSmQ6ctkTQoyP1LVZZV5h2FL0yGPqrGOVfwMH HNzUexV7qwbynI44o1ApbAtxETI0EPp/C1FJe6lNosBZ6QjdXgJL/B9o7Je6M+sD nyZx2o7o0+FojFEoy3KPgUWxVjgrJZMFrTR0DvDJ3/OAYeaw8ZS09MiDxLIUeeEi 7qjmW2iFQXBgte+a9AhSOzCtoLamFKbVyLSUcf9e/vyAhTgjjfatySuoA01u3w2o zDLcvRajUZ7mY6fOS3gopr6hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWgSFmZCf WUJD1rLdFe6x6Yk/HTowHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0I4LzRDNzY5RkYwRkI1QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpG cDFfVDlGMkZWbDFaSnVOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKVvy46hPsDs4Zso9J/1rtxFbpsk9bKnEgs/kzdzPWdCZm0UHMxIDm2 naH+Nwad90Mrg4zESrUtm3GLAjgL8R1OPrn0C2txWb+e6jwlPHt6m4I5+0XOWiek myHdDS++49dEzAH2oEXa4j/KMfaeeedTUzhfgfTfd5SZM5suPNisBHxJiFgyxaAI Z4mAcxIEuC3kB3K3lhXT2G9CxVkhGBIeGXXL2VY4GbuY/aGDjEdnCj2vljPz25hA GtufcmOn7kkmWe7/7Vsdb588W36iSbHdFxLvVASyINNE55uAwqUNoJ2qlSKo+Qzz 3D4Qxcf9PUAp+jm/7kHs/TQCwgYZH+I= -----END CERTIFICATE-----Generated at Sat May 31 17:32:56 2025 by rpki-client