$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: 8It5EnVRGnHQ6qUGY+AZgiQsEIopzUc3eT0xf6CgAD4= Subject key identifier: 0E:5F:EE:07:A8:EC:5C:3F:54:15:CC:CD:0E:B0:46:4C:B0:D7:25:37 Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1E37 Signing time: Fri 30 May 2025 16:15:37 +0000 Manifest this update: Fri 30 May 2025 16:15:37 +0000 Manifest next update: Fri 06 Jun 2025 16:15:37 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: SdZ/XnET8VdjhO8cd+2S7Bson0LYggQBgNjUdstJLxw=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: b7pdRooRIYxeq417I4r+N7hToQ0VSgAm22j8JdCbQTY=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: NSYgbjxaHQUqVX7cmhBmev0VQjPDBDIHp8wuQxin4zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7774 (0x1e5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: May 30 16:15:37 2025 GMT Not After : Jun 6 16:15:37 2025 GMT Subject: CN=6839d9a9-bf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cd:47:35:74:0d:e0:62:2d:1f:25:c4:46:3e: e0:ef:56:f7:27:7e:ee:80:19:db:2b:16:fe:79:e2: 89:bc:26:76:d3:70:3f:13:de:30:bd:e0:ac:2d:6d: 86:40:fd:a6:01:e2:1c:de:9c:91:68:23:61:42:96: 8b:8c:e2:82:fb:70:0b:f9:b0:ed:57:d7:2a:df:fe: 96:11:f2:42:8c:4a:0f:21:26:e0:27:ae:8d:01:03: 88:94:c2:73:9e:77:42:9f:ff:a3:9e:45:14:c9:d2: 87:5c:9d:d3:7d:8e:25:81:43:d9:6a:42:95:df:22: a6:13:54:1e:2e:60:12:39:0c:da:94:7d:e2:52:be: 4d:fa:30:f1:58:c5:95:59:38:eb:e2:e8:ec:a3:1b: 35:d2:45:a9:87:40:b7:b4:c8:46:de:38:3b:2a:c6: 13:ce:9a:ca:3f:3d:3a:3f:a9:29:8f:40:6d:b5:47: 6b:03:92:46:3f:3a:18:95:47:30:98:66:81:b4:68: 68:11:0e:85:37:17:2b:37:13:b5:94:fd:66:78:96: 9a:5e:4f:38:31:de:d4:a9:60:dd:d7:fe:de:04:f1: f8:95:c4:7f:35:c0:08:32:59:b7:1c:a8:61:35:ec: 75:8f:95:05:0f:4c:92:f5:f3:c8:41:bb:04:53:5b: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:EE:07:A8:EC:5C:3F:54:15:CC:CD:0E:B0:46:4C:B0:D7:25:37 X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:40:8e:53:ec:16:64:4f:ec:98:d6:25:cf:65:c1:1e:02:86: a5:e8:79:e3:30:b4:0d:39:69:63:49:98:3a:e8:6e:33:19:65: 0c:14:16:65:d0:77:b2:b1:96:b6:85:fa:47:08:62:bb:24:3d: fa:59:f0:4c:4c:68:25:72:37:ab:4b:81:62:e4:42:7f:b8:15: ee:0d:e4:63:e3:0a:8c:8c:4f:62:8d:d7:4e:5b:d2:ec:28:9d: 2a:94:11:18:bb:55:83:73:58:db:93:1d:62:03:69:59:44:6d: 6b:71:df:ae:3f:fc:72:cf:cc:f9:47:44:97:c2:88:e7:64:ef: 92:dc:6e:86:7c:84:fc:ae:0a:28:99:b0:55:60:48:09:9d:19: c2:8c:df:2e:68:c1:25:f9:f4:2b:71:7b:97:30:eb:36:29:94: 72:2e:d1:9c:0f:59:ef:f5:5b:dc:5c:92:76:61:cb:fa:5f:46: 00:b8:6e:88:90:c3:c0:da:b7:ce:d7:52:bc:17:73:c8:30:6b: 4e:4a:f7:33:25:bf:c6:b3:d5:32:6b:b4:bd:d5:fe:04:f2:0d: ec:22:c5:da:c6:17:64:15:2c:7a:82:ff:7d:0a:af:e2:86:4d: 42:b4:fc:23:b5:54:a7:06:c6:cc:9b:df:aa:6d:f6:ac:e7:03: dc:ff:1b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUwNTMwMTYxNTM3WhcNMjUwNjA2MTYxNTM3WjAYMRYwFAYD VQQDEw02ODM5ZDlhOS1iZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA781HNXQN4GItHyXERj7g71b3J37ugBnbKxb+eeKJvCZ203A/E94wveCsLW2G QP2mAeIc3pyRaCNhQpaLjOKC+3AL+bDtV9cq3/6WEfJCjEoPISbgJ66NAQOIlMJz nndCn/+jnkUUydKHXJ3TfY4lgUPZakKV3yKmE1QeLmASOQzalH3iUr5N+jDxWMWV WTjr4ujsoxs10kWph0C3tMhG3jg7KsYTzprKPz06P6kpj0BttUdrA5JGPzoYlUcw mGaBtGhoEQ6FNxcrNxO1lP1meJaaXk84Md7UqWDd1/7eBPH4lcR/NcAIMlm3HKhh Nex1j5UFD0yS9fPIQbsEU1uy9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5f7geo 7Fw/VBXMzQ6wRkyw1yU3MB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSQI5T7BZkT+yY1iXPZcEeAoal6HnjMLQNOWljSZg66G4zGWUMFBZl 0HeysZa2hfpHCGK7JD36WfBMTGglcjerS4Fi5EJ/uBXuDeRj4wqMjE9ijddOW9Ls KJ0qlBEYu1WDc1jbkx1iA2lZRG1rcd+uP/xyz8z5R0SXwojnZO+S3G6GfIT8rgoo mbBVYEgJnRnCjN8uaMEl+fQrcXuXMOs2KZRyLtGcD1nv9VvcXJJ2Ycv6X0YAuG6I kMPA2rfO11K8F3PIMGtOSvczJb/Gs9Uya7S91f4E8g3sIsXaxhdkFSx6gv99Cq/i hk1CtPwjtVSnBsbMm9+qbfas5wPc/xt4 -----END CERTIFICATE-----Generated at Sat May 31 17:16:16 2025 by rpki-client