$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: Xd+EmAEgkazrD7LllgEgxXYoLSmW7ytiJFe0si4Xipg= Subject key identifier: 06:F0:39:45:64:43:56:DF:A0:8F:5C:1B:DB:AE:EF:2F:3D:39:FF:BE Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 273A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 2722 Signing time: Sat 31 May 2025 15:37:48 +0000 Manifest this update: Sat 31 May 2025 15:37:47 +0000 Manifest next update: Sat 07 Jun 2025 15:37:47 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: 344O30qk52WtOeD+e6rL28V51+9D93FBVJ4iZQqBRLE=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10042 (0x273a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: May 31 15:37:47 2025 GMT Not After : Jun 7 15:37:47 2025 GMT Subject: CN=683b224c-e88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:37:f5:e8:3a:78:57:f0:54:19:6a:75:6e: ac:61:46:64:b1:c5:33:16:8c:c7:5d:8c:ee:56:f2: a5:05:b2:e5:69:2b:6a:1e:98:47:18:01:67:56:13: 42:37:58:17:1b:54:67:78:05:b1:1b:39:3d:48:19: 7a:16:63:b1:fe:66:61:f0:7b:07:8d:fb:fc:11:84: 40:33:ee:56:c7:1b:12:45:75:7a:7b:a2:b0:81:28: 66:5d:3c:5e:2b:ea:18:0d:92:05:fc:2a:dc:3f:04: 8a:d0:3e:65:fd:df:c3:bb:c3:09:08:14:56:53:00: 98:5b:3d:ec:63:5b:79:fc:61:87:b1:79:c8:6b:7e: 9a:63:c8:b9:25:08:76:4a:92:c5:77:dd:86:79:78: 82:5c:33:2d:35:06:df:28:72:b7:e8:ae:0f:a7:3d: e4:4b:a7:75:6c:3d:e4:c2:41:0f:72:d9:c2:9b:8f: 5f:e6:7e:62:c0:52:a2:ff:71:0f:46:08:33:6d:43: 50:17:32:56:e9:0d:6c:64:ad:2c:3c:21:84:a1:4d: b2:2b:8e:2b:8e:03:22:a4:fb:86:bf:a6:68:f4:69: a4:c4:0c:96:9a:0a:3e:7f:af:09:42:39:95:38:21: 05:40:a6:28:75:9c:0f:c2:bf:d0:9e:f2:ee:fc:66: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F0:39:45:64:43:56:DF:A0:8F:5C:1B:DB:AE:EF:2F:3D:39:FF:BE X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:56:52:a8:9d:71:f0:24:b4:d9:c7:10:9b:bd:0b:d6:af:3f: 00:ab:04:e6:5c:45:fd:bc:08:5d:14:f5:d4:b7:7c:e1:12:87: a0:5a:78:ad:06:c5:b9:24:c5:85:22:6d:00:dc:9c:cc:4b:aa: b9:44:e7:00:94:5c:4a:02:d7:f1:e7:97:c8:31:7d:37:f3:f8: 91:ab:c5:25:bd:75:32:7b:8e:84:b8:de:ce:73:e1:75:b6:da: e3:d6:57:b7:5d:2d:4e:49:c0:54:95:64:bf:5d:3b:f7:1d:8c: 8d:34:d3:57:df:f9:e6:ff:b0:b3:ea:ae:f3:c8:7a:06:3e:ab: 2f:8f:cb:78:1f:ab:5e:11:22:eb:f8:39:e3:68:5e:13:91:c5: df:9e:1e:03:7c:1d:87:cd:d5:0b:fc:09:67:36:39:16:ff:2b: 26:5f:ff:fa:9a:5b:14:80:12:4b:8b:6d:43:e0:3c:92:f6:75: c1:03:4f:75:13:6c:c1:78:f9:5f:4e:70:d5:02:35:3e:97:68: e0:6d:34:88:77:e3:e3:0f:b3:c7:79:57:89:b6:82:0f:45:8e: 00:c1:b8:5f:03:17:e0:64:98:c4:eb:fe:7f:3e:e4:11:ff:c8: d8:70:2a:ee:b8:a5:94:3d:d7:45:db:50:cc:4c:54:e5:0d:e6: 81:d0:f2:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUwNTMxMTUzNzQ3WhcNMjUwNjA3MTUzNzQ3WjAYMRYwFAYD VQQDEw02ODNiMjI0Yy1lODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OA39eg6eFfwVBlqdW6sYUZkscUzFozHXYzuVvKlBbLlaStqHphHGAFnVhNC N1gXG1RneAWxGzk9SBl6FmOx/mZh8HsHjfv8EYRAM+5WxxsSRXV6e6KwgShmXTxe K+oYDZIF/CrcPwSK0D5l/d/Du8MJCBRWUwCYWz3sY1t5/GGHsXnIa36aY8i5JQh2 SpLFd92GeXiCXDMtNQbfKHK36K4Ppz3kS6d1bD3kwkEPctnCm49f5n5iwFKi/3EP RggzbUNQFzJW6Q1sZK0sPCGEoU2yK44rjgMipPuGv6Zo9GmkxAyWmgo+f68JQjmV OCEFQKYodZwPwr/QnvLu/GYqowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbwOUVk Q1bfoI9cG9uu7y89Of++MB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVlKonXHwJLTZxxCbvQvWrz8AqwTmXEX9vAhdFPXUt3zhEoegWnit BsW5JMWFIm0A3JzMS6q5ROcAlFxKAtfx55fIMX038/iRq8UlvXUye46EuN7Oc+F1 ttrj1le3XS1OScBUlWS/XTv3HYyNNNNX3/nm/7Cz6q7zyHoGPqsvj8t4H6teESLr +DnjaF4TkcXfnh4DfB2HzdUL/AlnNjkW/ysmX//6mlsUgBJLi21D4DyS9nXBA091 E2zBePlfTnDVAjU+l2jgbTSId+PjD7PHeVeJtoIPRY4AwbhfAxfgZJjE6/5/PuQR /8jYcCruuKWUPddF21DMTFTlDeaB0PJT -----END CERTIFICATE-----Generated at Sat May 31 17:46:29 2025 by rpki-client