$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: MSOoYhsEBK5c17vRa+4Nvni+bTMd6Szj44jubmODbOg= Subject key identifier: 5F:BA:CD:CF:AC:0D:F2:CB:EA:00:D8:4F:51:D0:A7:11:30:86:CB:CC Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 3489 Signing time: Sat 31 May 2025 14:43:00 +0000 Manifest this update: Sat 31 May 2025 14:43:00 +0000 Manifest next update: Sat 07 Jun 2025 14:43:00 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: REpHHhX2/myoUxSkDCrO90xnyBF0vVp0IXN03Ia1zOA=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: May 31 14:43:00 2025 GMT Not After : Jun 7 14:43:00 2025 GMT Subject: CN=683b1574-c4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:10:d7:8d:d1:04:e3:da:c1:0c:4f:71:c6: 4e:80:c5:81:55:40:0e:bb:82:4c:d2:b2:8b:a1:2d: 94:2a:c7:a0:08:e5:27:ae:21:cd:82:3c:22:60:03: 1d:6a:b3:df:8f:ba:aa:31:0e:ae:ac:59:fd:9a:65: cf:b1:b6:5b:2c:80:d4:4b:14:e3:3b:b3:9e:82:32: 87:d7:70:ee:2c:c4:34:5e:1e:b8:47:d8:ed:ae:46: 49:f9:14:7f:d6:09:80:9c:f3:e3:90:02:78:7e:33: b1:72:ca:11:99:bd:63:65:9b:d1:43:14:f8:e3:8b: 46:c4:eb:f1:27:1f:b2:18:b7:48:6c:4f:ac:ae:fa: f3:d5:28:04:fe:6e:c9:a1:1e:d8:ea:ae:58:cb:a2: 5d:8b:06:62:77:7f:f7:44:d8:ed:dc:81:89:82:38: 98:f1:3a:d4:5a:81:ac:ab:00:42:a7:c3:3c:a8:09: cd:92:63:97:f1:68:4c:bc:0d:ec:52:d1:06:7f:b3: aa:db:fe:e5:3f:3a:01:93:88:4a:2b:ed:c7:95:4c: 29:dd:7f:e1:c6:37:60:f1:c8:e9:e7:fb:a6:23:3b: b8:7d:84:98:f1:11:44:70:40:a0:1e:05:ad:49:5e: 92:24:15:8a:8d:f5:50:db:55:31:39:c0:b5:af:d2: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BA:CD:CF:AC:0D:F2:CB:EA:00:D8:4F:51:D0:A7:11:30:86:CB:CC X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:42:04:8c:af:ba:a9:81:f4:15:ca:77:e9:19:68:1a:42:6e: 55:6c:db:2e:0f:8c:64:9c:e7:c3:ff:66:53:2c:c5:7c:3b:8c: 1b:0f:ac:c3:60:8c:8d:04:fe:67:6b:e4:c6:20:35:ed:aa:ef: c8:17:35:0a:04:b2:31:61:99:4c:05:21:d5:10:2c:55:34:47: 75:17:83:84:a5:d2:07:ca:89:c6:f7:30:dd:8c:19:23:89:df: 37:89:36:40:ae:d6:77:72:8d:24:93:f2:9f:c0:3d:26:99:8c: 28:eb:6f:8b:6c:d5:d8:97:63:92:28:ad:d9:9a:fe:1b:7d:b4: 6b:0f:b8:71:23:1b:de:30:ff:19:56:ad:04:5e:05:84:67:25: a8:ce:58:5b:26:b8:3a:81:d5:bb:ba:e9:1c:db:bd:15:07:be: 66:ff:dc:7e:13:99:84:10:80:db:87:84:65:d4:8d:29:a6:7a: 6c:e1:f0:4e:9a:02:e1:64:57:80:29:c1:4d:13:ce:a7:cd:44: e8:05:5f:e0:d3:a0:fe:95:74:2b:4f:52:ec:0a:6e:f8:2e:13: 95:33:a4:c1:94:1b:85:43:b0:d2:aa:b3:9b:33:99:31:ef:51: 44:53:28:84:71:07:2e:3c:9a:e1:b2:84:27:dc:42:49:17:44: f8:83:7a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUwNTMxMTQ0MzAwWhcNMjUwNjA3MTQ0MzAwWjAYMRYwFAYD VQQDEw02ODNiMTU3NC1jNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD4Q143RBOPawQxPccZOgMWBVUAOu4JM0rKLoS2UKsegCOUnriHNgjwiYAMd arPfj7qqMQ6urFn9mmXPsbZbLIDUSxTjO7OegjKH13DuLMQ0Xh64R9jtrkZJ+RR/ 1gmAnPPjkAJ4fjOxcsoRmb1jZZvRQxT444tGxOvxJx+yGLdIbE+srvrz1SgE/m7J oR7Y6q5Yy6JdiwZid3/3RNjt3IGJgjiY8TrUWoGsqwBCp8M8qAnNkmOX8WhMvA3s UtEGf7Oq2/7lPzoBk4hKK+3HlUwp3X/hxjdg8cjp5/umIzu4fYSY8RFEcECgHgWt SV6SJBWKjfVQ21UxOcC1r9KMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+6zc+s DfLL6gDYT1HQpxEwhsvMMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdQgSMr7qpgfQVynfpGWgaQm5VbNsuD4xknOfD/2ZTLMV8O4wbD6zD YIyNBP5na+TGIDXtqu/IFzUKBLIxYZlMBSHVECxVNEd1F4OEpdIHyonG9zDdjBkj id83iTZArtZ3co0kk/KfwD0mmYwo62+LbNXYl2OSKK3Zmv4bfbRrD7hxIxveMP8Z Vq0EXgWEZyWozlhbJrg6gdW7uukc270VB75m/9x+E5mEEIDbh4Rl1I0ppnps4fBO mgLhZFeAKcFNE86nzUToBV/g06D+lXQrT1LsCm74LhOVM6TBlBuFQ7DSqrObM5kx 71FEUyiEcQcuPJrhsoQn3EJJF0T4g3o6 -----END CERTIFICATE-----Generated at Sat May 31 16:40:49 2025 by rpki-client