$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: K4+XLzmapDcvP5QHUIeJMP2hJ93svng+6Pk5gssAFO0= Subject key identifier: 88:55:25:73:FB:0E:01:89:D0:D5:23:81:6C:D3:CA:7C:15:67:62:CE Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 34B8 Signing time: Sat 31 May 2025 15:13:54 +0000 Manifest this update: Sat 31 May 2025 15:13:53 +0000 Manifest next update: Sat 07 Jun 2025 15:13:53 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: Du1aZQYKROh5TSxNVAx8yszG86vUEp7ew6QdBaGJbp0=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: VG6uEFBAKDNWG5jrp+h5u5H00t+QV3JS7QeUIT589uA=) 4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: LAU2JxX8T47cr50yu6tjbJf0N73aEylHsaRmxgaBsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: May 31 15:13:53 2025 GMT Not After : Jun 7 15:13:53 2025 GMT Subject: CN=683b1cb1-858a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:24:69:83:be:2f:d1:16:5f:8b:6e:62:3c: db:07:5a:4c:32:05:1a:f9:97:03:75:c9:b4:2b:a7: e7:46:70:25:d6:b9:c5:d1:0c:04:c6:84:b5:83:15: b6:53:f2:10:ba:03:f9:37:3d:b6:c3:c6:50:d0:b8: f2:c2:c1:9c:23:24:ac:ab:80:00:5e:ce:17:92:9d: 08:2e:13:df:80:f1:1e:1c:e5:00:85:3d:56:57:29: 83:e9:3d:5d:e3:6f:58:30:43:f6:e6:43:e6:76:52: 8c:1f:05:43:f4:f1:e1:80:34:3e:31:8f:87:0c:d7: d9:30:34:17:34:55:56:13:e8:e2:74:83:56:8b:aa: cd:91:87:50:9b:82:0a:ed:13:93:7e:ed:78:3a:7f: 3b:74:e2:02:06:35:7b:30:c6:68:98:e8:7f:8d:95: c0:b6:62:d2:e0:01:78:03:66:8f:ff:ff:ca:e7:7e: 23:40:2e:38:94:ad:1e:94:2c:6f:6b:d8:03:7a:cb: 5a:48:89:7e:5f:b0:59:ca:67:6b:73:f2:7c:ab:1f: 88:76:b4:29:5a:7a:fe:e4:58:fa:9c:46:2a:47:71: 82:91:2e:90:bf:0b:1d:0e:87:5d:cc:da:86:33:1b: f4:aa:8b:2a:fa:e0:6f:d1:66:49:e4:d0:ac:d5:9a: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:25:73:FB:0E:01:89:D0:D5:23:81:6C:D3:CA:7C:15:67:62:CE X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1f:b2:93:df:79:71:b9:15:21:71:a3:2a:c5:5a:74:73:8e: 05:2d:5d:c3:54:9d:80:d4:b5:f0:1d:8e:dc:9e:14:96:d4:c3: bf:14:31:9a:38:fa:f0:46:2d:e9:f3:b4:b6:ca:c2:da:40:16: be:29:7c:41:ad:e0:92:70:a5:fc:06:5d:80:e4:5e:63:73:36: 2a:c3:ec:df:30:87:be:4a:06:4b:a7:8a:0e:44:27:c0:b7:2c: a9:2b:e8:0b:4f:7b:71:12:56:d1:b6:ab:da:c9:f5:7a:66:a9: 62:16:e2:9d:14:bd:48:23:04:1c:58:1f:bc:0e:e1:ff:c8:5c: c0:90:eb:4f:e9:dc:4a:21:a0:13:61:cb:5e:2c:37:de:bc:d5: da:28:1e:4a:85:2e:bb:f9:80:36:a1:40:f2:6c:38:0d:b0:c6: f6:94:ab:2f:5e:47:54:4b:94:74:29:8f:5f:9a:d7:d4:4b:dc: d9:c6:ac:d8:cb:0b:b1:5d:c0:95:55:94:75:46:78:6d:0b:31: 47:7d:90:2c:76:6d:4a:10:5d:b8:51:99:27:66:a7:dc:c7:f1: 1c:0b:2e:fe:44:16:33:8e:bb:87:f8:2a:c7:3d:66:f8:eb:21: 14:bf:3e:66:91:4d:65:4e:d1:a4:0f:85:c2:82:f5:ec:5c:11: 30:42:f6:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjUwNTMxMTUxMzUzWhcNMjUwNjA3MTUxMzUzWjAYMRYwFAYD VQQDEw02ODNiMWNiMS04NThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnIkaYO+L9EWX4tuYjzbB1pMMgUa+ZcDdcm0K6fnRnAl1rnF0QwExoS1gxW2 U/IQugP5Nz22w8ZQ0LjywsGcIySsq4AAXs4Xkp0ILhPfgPEeHOUAhT1WVymD6T1d 429YMEP25kPmdlKMHwVD9PHhgDQ+MY+HDNfZMDQXNFVWE+jidINWi6rNkYdQm4IK 7ROTfu14On87dOICBjV7MMZomOh/jZXAtmLS4AF4A2aP///K534jQC44lK0elCxv a9gDestaSIl+X7BZymdrc/J8qx+IdrQpWnr+5Fj6nEYqR3GCkS6QvwsdDoddzNqG Mxv0qosq+uBv0WZJ5NCs1ZqzTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhVJXP7 DgGJ0NUjgWzTynwVZ2LOMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtH7KT33lxuRUhcaMqxVp0c44FLV3DVJ2A1LXwHY7cnhSW1MO/FDGa OPrwRi3p87S2ysLaQBa+KXxBreCScKX8Bl2A5F5jczYqw+zfMIe+SgZLp4oORCfA tyypK+gLT3txElbRtqvayfV6ZqliFuKdFL1IIwQcWB+8DuH/yFzAkOtP6dxKIaAT YcteLDfevNXaKB5KhS67+YA2oUDybDgNsMb2lKsvXkdUS5R0KY9fmtfUS9zZxqzY ywuxXcCVVZR1RnhtCzFHfZAsdm1KEF24UZknZqfcx/EcCy7+RBYzjruH+CrHPWb4 6yEUvz5mkU1lTtGkD4XCgvXsXBEwQvaR -----END CERTIFICATE-----Generated at Sat May 31 17:20:33 2025 by rpki-client