$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: A0jgjS9QdZndYzPH/X584zH4Xuyo43VHwKGM4EUqi20= Subject key identifier: 0A:A5:48:94:93:78:46:51:1C:B3:E4:D2:20:83:62:C2:B3:07:4C:C9 Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 1369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 1362 Signing time: Sat 10 May 2025 16:53:39 +0000 Manifest this update: Sat 10 May 2025 16:53:39 +0000 Manifest next update: Sat 17 May 2025 16:53:39 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: MBtTBFtC1y7v5/CoeWK8Opt8WU15iGmlxFNuQZkPRxA=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4969 (0x1369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: May 10 16:53:39 2025 GMT Not After : May 17 16:53:39 2025 GMT Subject: CN=681f8493-450f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:c7:6b:d9:35:d2:db:3d:8c:8f:75:87:34: c4:44:3f:ba:7b:31:c8:52:98:40:88:15:16:bd:4a: a4:67:62:83:ec:82:36:b9:7d:92:4a:b6:52:6e:25: 29:ac:ee:7d:db:c4:96:9f:1a:45:81:55:ac:d9:19: 84:fc:4b:d4:7f:b7:91:53:cb:5b:39:d9:0a:99:b1: 54:ae:f2:fc:f1:22:3f:ee:fe:2a:ba:ff:ad:be:62: 77:77:84:b3:6d:ad:a4:e2:dd:d5:1c:58:25:18:a2: 1a:d6:b9:4f:7b:87:1a:36:83:02:78:68:55:2f:79: 45:6c:49:1a:27:b1:71:c5:c1:ee:50:c4:52:44:19: 16:9d:63:71:78:aa:5d:0d:bb:bf:53:72:b0:9c:9b: b1:bd:f7:d1:f6:b1:c3:36:00:09:ea:19:82:8a:64: ce:c4:d8:84:5c:b5:17:5e:3a:b5:b8:56:45:e0:65: ca:3d:2c:77:e5:fb:4c:99:a4:f4:96:c5:73:9c:cd: 41:87:e7:c9:bf:33:a9:5d:94:a4:1a:17:29:9d:1c: 3d:00:23:19:2a:8a:d8:4c:e9:5e:ab:b4:84:57:1e: 83:dd:0e:34:de:6e:dc:c1:07:fa:78:63:0a:89:9d: 01:1c:17:1c:b3:c2:93:37:93:44:b0:5e:c0:71:64: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A5:48:94:93:78:46:51:1C:B3:E4:D2:20:83:62:C2:B3:07:4C:C9 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:a5:60:d3:3d:94:92:86:39:21:72:c3:dd:6f:04:fe:8f: 87:97:9d:1c:f1:bc:f1:ca:24:84:a9:ff:62:d7:7a:d4:5d:a5: 3f:86:98:e8:cb:be:fd:ff:e4:85:03:a5:35:b0:55:57:89:da: 02:e6:d4:70:1b:7d:f6:e5:0c:48:ba:20:16:e4:29:e2:fe:d6: d2:73:f5:3b:6b:c6:b8:db:d3:8f:93:9a:0f:6a:6f:cb:1f:b4: 65:2b:9c:dd:bf:93:66:9f:82:ec:70:9f:fc:25:d8:0e:fe:0e: 12:93:bb:d2:ee:0c:cd:ff:87:ab:10:b1:46:9a:c4:8f:4e:d1: e8:85:59:38:55:1d:40:59:2e:06:89:c1:15:b7:eb:9c:27:0f: f1:93:88:1b:92:9e:f7:71:cc:5a:96:b0:06:ec:77:a9:06:36: cc:dd:93:18:44:1f:0b:46:0c:1f:68:bd:bc:f0:f1:58:1d:b2: a5:31:c7:cc:c2:8e:57:fe:fc:99:26:08:69:27:90:31:e2:67: fc:9b:c7:94:b5:58:68:b7:44:60:e5:a2:f3:15:c3:0b:90:2a: 88:47:24:a2:59:0c:9c:5b:a4:5e:2f:0e:0c:4e:ce:4e:32:b0: ac:39:9b:a7:7a:9a:91:da:cf:71:eb:bc:16:54:be:cb:66:5e: ee:ce:ad:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwNTEwMTY1MzM5WhcNMjUwNTE3MTY1MzM5WjAYMRYwFAYD VQQDEw02ODFmODQ5My00NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGfHa9k10ts9jI91hzTERD+6ezHIUphAiBUWvUqkZ2KD7II2uX2SSrZSbiUp rO5928SWnxpFgVWs2RmE/EvUf7eRU8tbOdkKmbFUrvL88SI/7v4quv+tvmJ3d4Sz ba2k4t3VHFglGKIa1rlPe4caNoMCeGhVL3lFbEkaJ7FxxcHuUMRSRBkWnWNxeKpd Dbu/U3KwnJuxvffR9rHDNgAJ6hmCimTOxNiEXLUXXjq1uFZF4GXKPSx35ftMmaT0 lsVznM1Bh+fJvzOpXZSkGhcpnRw9ACMZKorYTOleq7SEVx6D3Q403m7cwQf6eGMK iZ0BHBccs8KTN5NEsF7AcWT4YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqlSJST eEZRHLPk0iCDYsKzB0zJMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+dqVg0z2UkoY5IXLD3W8E/o+Hl50c8bzxyiSEqf9i13rUXaU/hpjo y779/+SFA6U1sFVXidoC5tRwG3325QxIuiAW5Cni/tbSc/U7a8a429OPk5oPam/L H7RlK5zdv5Nmn4LscJ/8JdgO/g4Sk7vS7gzN/4erELFGmsSPTtHohVk4VR1AWS4G icEVt+ucJw/xk4gbkp73ccxalrAG7HepBjbM3ZMYRB8LRgwfaL288PFYHbKlMcfM wo5X/vyZJghpJ5Ax4mf8m8eUtVhot0Rg5aLzFcMLkCqIRySiWQycW6ReLw4MTs5O MrCsOZunepqR2s9x67wWVL7LZl7uzq1b -----END CERTIFICATE-----Generated at Mon May 12 07:46:31 2025 by rpki-client