$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: INxkMaFSpdY3m5OewEO5NvP2P5YtEmCW+zt6JaCypEk= Subject key identifier: 5E:16:57:2A:24:25:66:56:98:40:60:A0:5D:91:44:5B:45:C2:BC:15 Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 01E2 Signing time: Sat 31 May 2025 02:23:16 +0000 Manifest this update: Sat 31 May 2025 02:23:15 +0000 Manifest next update: Sat 07 Jun 2025 02:23:15 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: PgvIZd+jc4W82z6ZXm5eSVUFE3r8ZbJ89rGRBqCTSf4=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: May 31 02:23:15 2025 GMT Not After : Jun 7 02:23:15 2025 GMT Subject: CN=683a6813-2846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8d:e8:81:f1:b8:13:cb:60:a4:4d:76:ee:ea: 95:f3:53:3d:0b:d3:62:eb:02:3c:a2:63:cc:a5:90: d7:be:d1:96:3f:d3:4b:78:3e:11:a9:cb:10:c1:d2: 63:4c:16:7d:40:c5:92:3b:29:6b:8d:c8:60:9c:c3: 5f:7f:51:55:db:bd:ff:d5:0b:6f:c9:41:d4:e3:36: fa:b5:a7:35:ef:b5:38:d5:31:5d:7e:7e:4f:b6:1d: 97:d8:b1:ab:da:11:cc:e6:ae:5f:fa:7a:35:01:59: b8:ef:9f:95:8e:16:cc:1e:f0:cf:f3:58:ce:f9:07: b9:9e:f7:be:e8:dd:38:84:90:c0:50:6a:75:34:d9: 5e:76:d6:af:3e:ad:b3:39:85:bb:8a:b0:72:df:fd: 62:95:99:cc:3a:cc:ff:d4:08:7a:79:01:44:1d:78: ad:ee:f2:4e:41:59:b8:1e:1c:2b:34:cd:28:7e:28: a5:0f:ae:d9:ab:e2:c0:f6:5e:d6:4d:54:38:0e:b6: 74:c7:50:4c:fb:aa:a6:3c:5f:3e:59:d4:50:b0:c0: d8:e8:55:f3:f9:e5:72:94:a9:68:28:e3:b5:25:a3: 6d:fb:12:c6:a3:cb:1e:17:85:eb:10:7e:ee:37:eb: c1:a8:9c:e0:c3:b2:2b:6b:31:9f:da:f8:b6:3c:61: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:16:57:2A:24:25:66:56:98:40:60:A0:5D:91:44:5B:45:C2:BC:15 X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:65:5b:a8:9b:22:3d:b2:24:8b:ba:25:4b:a1:ce:7e:72: c6:df:c1:f5:10:1c:81:e2:25:84:e7:9d:d6:44:39:a1:e0:39: 7d:61:52:09:91:43:97:87:06:6b:21:59:d4:e8:3a:8d:73:86: b5:a7:a4:c2:df:19:76:2a:67:d3:77:63:1a:b0:c0:39:68:29: 38:c9:95:11:5f:8a:f9:96:5b:7d:3c:d1:73:d9:96:e0:c7:6f: 63:85:98:f6:f5:9c:b4:1c:d2:24:43:b2:1d:5e:8e:44:e8:60: f7:b8:41:ba:e3:e0:12:75:3f:0b:9b:eb:5a:fb:0b:c8:61:91: a0:d9:ec:e5:8b:db:71:7a:e0:df:fb:fb:17:3b:06:d3:8b:4f: 99:15:cb:d0:9d:96:7d:58:5f:a2:d1:df:5a:18:44:f9:27:88: 28:1c:05:4b:96:c5:60:f3:58:78:d2:10:1a:42:7b:19:12:0b: 45:5a:18:8b:a9:f5:03:ca:2c:df:b2:68:f7:68:ef:40:bc:cb: af:66:52:cc:f5:47:55:a0:b1:99:8c:63:54:2d:0c:f0:b0:82: 8f:7e:94:0b:d4:87:15:53:e1:dc:ca:7f:b2:79:35:c9:89:8b: 99:25:7a:88:85:46:46:b6:0d:51:84:33:bf:85:58:8f:01:22: 3e:cd:6b:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwNTMxMDIyMzE1WhcNMjUwNjA3MDIyMzE1WjAYMRYwFAYD VQQDEw02ODNhNjgxMy0yODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA643ogfG4E8tgpE127uqV81M9C9Ni6wI8omPMpZDXvtGWP9NLeD4RqcsQwdJj TBZ9QMWSOylrjchgnMNff1FV273/1QtvyUHU4zb6tac177U41TFdfn5Pth2X2LGr 2hHM5q5f+no1AVm475+VjhbMHvDP81jO+Qe5nve+6N04hJDAUGp1NNledtavPq2z OYW7irBy3/1ilZnMOsz/1Ah6eQFEHXit7vJOQVm4HhwrNM0ofiilD67Zq+LA9l7W TVQ4DrZ0x1BM+6qmPF8+WdRQsMDY6FXz+eVylKloKOO1JaNt+xLGo8seF4XrEH7u N+vBqJzgw7IrazGf2vi2PGGfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4WVyok JWZWmEBgoF2RRFtFwrwVMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbwGVbqJsiPbIki7olS6HOfnLG38H1EByB4iWE553WRDmh4Dl9YVIJ kUOXhwZrIVnU6DqNc4a1p6TC3xl2KmfTd2MasMA5aCk4yZURX4r5llt9PNFz2Zbg x29jhZj29Zy0HNIkQ7IdXo5E6GD3uEG64+ASdT8Lm+ta+wvIYZGg2ezli9txeuDf +/sXOwbTi0+ZFcvQnZZ9WF+i0d9aGET5J4goHAVLlsVg81h40hAaQnsZEgtFWhiL qfUDyizfsmj3aO9AvMuvZlLM9UdVoLGZjGNULQzwsIKPfpQL1IcVU+Hcyn+yeTXJ iYuZJXqIhUZGtg1RhDO/hViPASI+zWvo -----END CERTIFICATE-----Generated at Sat May 31 16:38:53 2025 by rpki-client