$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: 6I3+0MOB71bboUQuPm45zmkg3MmuaiTcTevRXJ92/G8= Subject key identifier: 80:5C:0F:E6:E0:B5:79:B6:13:0C:44:A2:9B:C5:A6:16:68:AC:7B:D9 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 0106 Signing time: Sat 31 May 2025 04:38:00 +0000 Manifest this update: Sat 31 May 2025 04:37:59 +0000 Manifest next update: Sat 07 Jun 2025 04:37:59 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: ZhFepAt8zHMm8DivO+8BrBD439hcPMxNZN9Q6CQcG0c=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: May 31 04:37:59 2025 GMT Not After : Jun 7 04:37:59 2025 GMT Subject: CN=683a87a7-cc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:3e:01:35:9d:28:03:44:6b:34:46:a2:05: 58:28:c1:e5:88:67:33:6e:0f:db:84:71:93:b2:e1: 3f:1f:fe:c8:ca:d5:f5:e1:d2:6b:3b:9e:ab:3d:57: 6c:31:22:6b:ec:2d:ec:14:75:22:ea:8d:f0:9b:72: 7d:f9:be:0f:8e:cc:a2:0d:fb:82:7d:ba:d4:59:96: 12:df:62:14:02:10:df:9b:d4:fa:b5:b6:de:c8:36: 6b:e0:6c:9c:58:3f:c5:1b:34:50:f6:ae:20:9d:e4: 35:24:01:ed:97:ae:68:fc:07:da:ae:64:18:c8:0f: 3d:6f:6b:6a:a9:59:fc:18:d3:a4:af:93:79:27:fb: 6e:76:77:6e:bd:cf:25:34:b8:3e:1d:c1:28:24:d2: b6:48:db:23:02:1e:c4:c7:c3:79:c8:6f:db:51:e9: 89:43:bc:c9:bc:34:0a:cb:08:4b:51:67:88:85:39: e6:7a:10:e2:a6:c9:20:2a:4c:3d:2f:fa:38:58:47: b8:61:71:35:75:2f:31:72:3f:6a:ad:13:22:ff:21: 68:12:12:76:7b:84:c8:b5:ec:3c:c4:81:d1:27:72: 90:86:0d:ee:6f:ef:2f:fa:d9:55:d3:3d:7e:5d:16: 50:de:ee:17:a1:13:bb:f9:6c:48:0e:1b:61:fa:bf: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5C:0F:E6:E0:B5:79:B6:13:0C:44:A2:9B:C5:A6:16:68:AC:7B:D9 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:16:88:ec:c7:96:b7:9b:39:36:ab:a4:8b:e8:33:0f:f7: 34:e0:5a:3b:13:d4:27:bd:8a:95:97:a7:ee:a0:dd:6a:63:e0: fb:56:20:9e:9e:89:a8:14:6e:6b:f3:a4:fe:da:30:29:36:90: 4a:27:1c:d5:06:8c:07:b3:48:9a:c1:47:30:83:dd:55:19:84: 1f:d7:01:83:a5:05:9c:24:1e:45:13:0d:9d:30:69:ae:13:42: 35:34:c8:22:5f:ed:12:9b:92:90:91:62:18:5c:d5:a9:0f:4f: 9c:ae:07:92:e2:e9:cf:c8:75:ec:3c:ca:5a:97:46:40:be:2b: 31:30:09:b9:33:15:56:48:84:7d:f4:fd:1d:c1:ca:a9:62:a0: 6d:d7:89:d2:f9:94:0c:b7:3c:57:b3:71:e7:f8:9d:ee:53:6f: b1:ea:44:02:6b:58:ca:01:bc:28:75:0c:bb:e5:91:71:0c:20: 01:5b:c0:dc:9f:ff:b5:81:70:50:51:69:d7:2f:5f:6f:de:5e: a8:4c:85:7b:04:90:bc:b6:87:7e:8c:f9:6d:e2:c0:86:4f:e6: b2:7f:2f:08:d3:e0:2d:a5:7d:a1:25:07:f8:96:b0:25:36:e5: 19:9a:61:d3:30:20:73:5e:c0:75:93:41:6c:36:e6:19:7c:94: ad:c8:0f:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwNTMxMDQzNzU5WhcNMjUwNjA3MDQzNzU5WjAYMRYwFAYD VQQDEw02ODNhODdhNy1jYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HY+ATWdKANEazRGogVYKMHliGczbg/bhHGTsuE/H/7IytX14dJrO56rPVds MSJr7C3sFHUi6o3wm3J9+b4PjsyiDfuCfbrUWZYS32IUAhDfm9T6tbbeyDZr4Gyc WD/FGzRQ9q4gneQ1JAHtl65o/AfarmQYyA89b2tqqVn8GNOkr5N5J/tudnduvc8l NLg+HcEoJNK2SNsjAh7Ex8N5yG/bUemJQ7zJvDQKywhLUWeIhTnmehDipskgKkw9 L/o4WEe4YXE1dS8xcj9qrRMi/yFoEhJ2e4TItew8xIHRJ3KQhg3ub+8v+tlV0z1+ XRZQ3u4XoRO7+WxIDhth+r8HswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBcD+bg tXm2EwxEopvFphZorHvZMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZxaI7MeWt5s5Nquki+gzD/c04Fo7E9QnvYqVl6fuoN1qY+D7ViCe nomoFG5r86T+2jApNpBKJxzVBowHs0iawUcwg91VGYQf1wGDpQWcJB5FEw2dMGmu E0I1NMgiX+0Sm5KQkWIYXNWpD0+crgeS4unPyHXsPMpal0ZAvisxMAm5MxVWSIR9 9P0dwcqpYqBt14nS+ZQMtzxXs3Hn+J3uU2+x6kQCa1jKAbwodQy75ZFxDCABW8Dc n/+1gXBQUWnXL19v3l6oTIV7BJC8tod+jPlt4sCGT+ayfy8I0+AtpX2hJQf4lrAl NuUZmmHTMCBzXsB1k0FsNuYZfJStyA8Z -----END CERTIFICATE-----Generated at Sat May 31 17:04:51 2025 by rpki-client