$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json) Hash identifier: Pmcxu79AkjZO+7BkNic1ido9l2MQ3n8NGsHDw7FjDp0= Subject key identifier: 03:33:F4:D8:9C:6D:E4:DF:76:EA:80:9F:B9:38:22:8D:F8:16:D2:2D Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:54:23 +0000 Manifest this update: Sat 31 May 2025 06:54:23 +0000 Manifest next update: Sat 07 Jun 2025 06:54:22 +0000 Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: Fb7LVOTw3D7VTNivskgXJ2bUXkafiVErMhlNueEMTvA=) 2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0 Validity Not Before: May 31 06:54:23 2025 GMT Not After : Jun 7 06:54:22 2025 GMT Subject: CN=683aa79f-ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:24:a9:d9:5b:72:5d:6b:f4:5d:12:f3:ba:3a: 34:85:39:04:30:eb:b4:2d:20:be:d1:36:97:36:f6: 90:cc:be:2d:16:82:d2:90:58:94:91:12:03:0d:f0: 83:3c:d7:47:74:37:87:89:2d:e3:45:27:1f:f3:17: ab:48:72:7a:54:57:ed:c9:79:7f:36:0c:97:52:38: 4a:f0:de:03:61:82:ad:e9:38:a7:8c:e0:bb:88:fa: b1:11:41:a9:27:cf:d2:d8:17:39:28:bd:1e:e9:43: b6:69:b9:52:6f:ad:26:74:56:5d:18:04:ee:5c:71: ad:2d:d5:e9:c1:7b:02:ad:c6:2b:e4:39:84:73:80: 5f:87:ee:b8:4c:cd:46:4e:f9:17:31:19:34:ad:3c: a2:27:37:5f:4a:9a:58:de:b5:69:08:9e:0e:03:27: 28:16:28:a0:07:16:d9:9a:0e:7a:11:2f:2c:85:21: bb:2d:6a:f8:7f:f9:90:fb:2a:79:cd:f1:2f:4e:67: d3:6f:a8:9f:49:fa:e8:e3:4f:6e:32:f9:9d:12:2b: cc:92:d5:f2:5f:91:c5:0e:7d:56:44:eb:4a:1f:7b: 47:2f:d4:5a:c1:22:94:2e:ba:ea:ac:00:fc:70:37: 86:35:9c:de:0d:78:96:32:21:43:a3:92:ef:26:2a: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:F4:D8:9C:6D:E4:DF:76:EA:80:9F:B9:38:22:8D:F8:16:D2:2D X509v3 Authority Key Identifier: keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:62:8b:10:62:45:23:e6:31:45:6c:ed:35:21:79:0f:fa:4e: 15:f6:4c:63:5e:9e:0e:44:b9:00:6f:c1:fa:f1:4e:72:b6:c9: 60:cc:22:6d:f4:70:83:26:92:09:65:ea:1f:e6:38:c9:7d:af: 1f:02:47:34:51:5f:a8:7c:ea:99:00:5d:7b:21:f3:e1:d1:58: 1b:e6:c5:83:68:1c:de:66:f2:82:1f:80:b0:c4:da:af:d7:3e: 01:96:3d:48:7a:dc:92:c1:00:9c:c7:5d:7a:2d:4b:4b:3c:b1: fc:d9:19:ea:a6:56:cb:d0:ea:dc:74:2f:01:fd:9b:17:98:93: 2b:a5:ad:85:ad:80:48:4b:64:db:fc:ca:d0:a1:d7:5c:aa:06: b2:b5:0d:7a:7d:1c:db:45:83:43:48:a6:ff:ef:95:a8:7c:a6: 2c:75:9e:ec:46:0b:76:7c:5c:ef:3c:77:be:47:a3:3a:1e:63: 37:46:b9:b1:df:c1:f3:0e:98:6e:9f:38:4e:63:4c:56:94:15: a7:7d:ce:07:bb:f0:2b:cf:61:57:b4:4f:ac:72:5c:7a:7d:d7: 6e:be:6b:62:4f:88:14:3e:51:aa:b4:2b:f1:41:80:86:3e:4a: 36:90:48:ea:01:81:42:1b:c2:02:6f:98:37:24:a2:a2:ed:a6: 50:c6:a5:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTg4NDExMC8GA1UEBRMoQkUzQkZCMjc4REI5QTAzREVBMzg1NkQ3RkUyMjkyMTgz NzREOEZDMDAeFw0yNTA1MzEwNjU0MjNaFw0yNTA2MDcwNjU0MjJaMBgxFjAUBgNV BAMTDTY4M2FhNzlmLWVkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmJKnZW3Jda/RdEvO6OjSFOQQw67QtIL7RNpc29pDMvi0WgtKQWJSREgMN8IM8 10d0N4eJLeNFJx/zF6tIcnpUV+3JeX82DJdSOErw3gNhgq3pOKeM4LuI+rERQakn z9LYFzkovR7pQ7ZpuVJvrSZ0Vl0YBO5cca0t1enBewKtxivkOYRzgF+H7rhMzUZO +RcxGTStPKInN19KmljetWkIng4DJygWKKAHFtmaDnoRLyyFIbstavh/+ZD7KnnN 8S9OZ9NvqJ9J+ujjT24y+Z0SK8yS1fJfkcUOfVZE60ofe0cv1FrBIpQuuuqsAPxw N4Y1nN4NeJYyIUOjku8mKty3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAzP02Jxt 5N926oCfuTgijfgW0i0wHwYDVR0jBBgwFoAUvjv7J425oD3qOFbX/iKSGDdNj8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1ODg0LzYxQjA3MDVBQ0RF QjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmp2N0o0MjVvRDNxT0ZiWF9pS1NHRGROajhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 ODg0LzYxQjA3MDVBQ0RFQjExRUY4QjVCMzAxRkM0RjlBRTAyL3ZqdjdKNDI1b0Qz cU9GYlhfaUtTR0RkTmo4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxiixBiRSPmMUVs7TUheQ/6ThX2TGNeng5EuQBvwfrxTnK2yWDMIm30 cIMmkgll6h/mOMl9rx8CRzRRX6h86pkAXXsh8+HRWBvmxYNoHN5m8oIfgLDE2q/X PgGWPUh63JLBAJzHXXotS0s8sfzZGeqmVsvQ6tx0LwH9mxeYkyulrYWtgEhLZNv8 ytCh11yqBrK1DXp9HNtFg0NIpv/vlah8pix1nuxGC3Z8XO88d75HozoeYzdGubHf wfMOmG6fOE5jTFaUFad9zge78CvPYVe0T6xyXHp9126+a2JPiBQ+Uaq0K/FBgIY+ SjaQSOoBgUIbwgJvmDckoqLtplDGpdA= -----END CERTIFICATE-----Generated at Sat May 31 15:51:49 2025 by rpki-client