$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json) Hash identifier: oMoy6YiaZL1gfpdxE49MspaXAu7Qed2avd9i2yoi8nk= Subject key identifier: 33:ED:21:DD:90:CE:FE:0D:D9:EF:EF:FE:A1:64:68:3B:50:2E:0E:7E Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft Manifest number: 0CB5 Signing time: Wed 12 Mar 2025 18:11:05 +0000 Manifest this update: Wed 12 Mar 2025 18:11:03 +0000 Manifest next update: Wed 19 Mar 2025 18:11:03 +0000 Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: ITF8366AkrS3IzkDhpqhnHO8s61sEZaWrdLpnoyUgLk=) 2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 18:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2 Validity Not Before: Mar 12 18:11:03 2025 GMT Not After : Mar 19 18:11:03 2025 GMT Subject: CN=67d1ce39-f179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:22:f1:51:84:6f:d7:44:98:dd:a5:b4:a8: a8:90:c8:a6:d8:98:75:28:4a:99:18:3f:ce:6c:c6: 78:f1:44:4c:bf:39:69:61:3e:92:dc:43:bb:13:61: 11:3a:5f:84:9a:62:80:9e:2f:82:3a:8b:8f:2c:7a: 4e:45:0d:f2:e8:06:cb:d6:b2:88:c6:bb:cf:4a:9b: 55:98:99:18:d1:09:6c:80:dc:d9:cc:bd:42:b1:3b: 14:75:e3:28:6b:da:7d:47:53:1b:c9:5a:3f:11:7e: 61:40:76:d4:e0:f8:8b:f0:5d:c6:56:c9:9e:75:0f: f2:b3:28:e5:d7:fb:52:02:2a:7d:fb:74:bd:18:15: a3:ef:ea:b3:1b:f3:0a:20:51:08:d8:50:a1:fd:75: ec:15:e9:7f:49:9d:09:3b:4c:1c:15:31:fa:d2:c9: e7:84:80:14:bc:33:2e:24:98:f9:7c:e6:58:9e:e7: aa:cf:0d:cb:bd:8a:8c:93:17:89:9b:05:a7:b8:e6: 4a:0a:7b:ac:13:90:d1:d3:73:0e:ca:63:38:52:8f: 1f:a3:09:59:02:73:ac:30:48:60:f2:45:13:48:4b: 1d:44:d7:9e:cd:77:fd:47:dc:5a:56:0a:b4:04:dd: 91:79:66:d8:c6:f4:20:05:5d:a7:e8:ab:24:ce:45: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:ED:21:DD:90:CE:FE:0D:D9:EF:EF:FE:A1:64:68:3B:50:2E:0E:7E X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b7:ad:78:00:40:8f:e8:69:66:2b:23:61:d3:ef:c8:73:74: 03:45:d3:13:ef:38:c6:01:10:82:8b:75:ca:92:e4:8d:32:9d: 51:47:a2:8b:7d:93:66:35:d8:26:71:4a:a3:36:74:71:c2:cf: 7f:a3:65:3f:ee:af:6e:75:79:63:a9:51:b9:da:25:74:82:91: 80:3d:50:88:76:28:2f:f8:a8:aa:8a:46:5e:c2:2e:fe:05:d5: f9:f0:42:c3:b3:74:1b:0e:67:65:59:fd:4c:9e:67:ea:91:b0: 81:39:e8:76:37:83:df:5b:5b:ad:7e:64:ba:1f:a8:1f:fc:2e: a8:ed:c7:79:1b:e5:3c:4b:0c:8d:7b:82:e2:b3:b9:59:71:35: eb:29:28:d2:58:9f:a2:77:0e:6a:d0:66:33:cb:b7:4f:cd:23: 1b:7f:6a:82:be:43:a0:32:7d:ff:bd:bd:49:94:b5:db:c5:d6: 9a:93:d7:96:14:9c:60:4e:c7:82:9b:69:93:ad:00:f7:29:02: ef:82:e3:e7:82:6d:3b:8a:06:3f:fb:18:b4:9c:33:5f:40:e5: 1d:ed:05:bb:6e:3b:7f:3e:3e:45:a1:00:3a:be:0d:ff:db:d7: d3:22:8a:87:13:eb:75:36:8e:37:d7:9a:72:3b:05:c9:5c:24: e8:8a:f9:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUwMzEyMTgxMTAzWhcNMjUwMzE5MTgxMTAzWjAYMRYwFAYD VQQDEw02N2QxY2UzOS1mMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfoi8VGEb9dEmN2ltKiokMim2Jh1KEqZGD/ObMZ48URMvzlpYT6S3EO7E2ER Ol+EmmKAni+COouPLHpORQ3y6AbL1rKIxrvPSptVmJkY0QlsgNzZzL1CsTsUdeMo a9p9R1MbyVo/EX5hQHbU4PiL8F3GVsmedQ/ysyjl1/tSAip9+3S9GBWj7+qzG/MK IFEI2FCh/XXsFel/SZ0JO0wcFTH60snnhIAUvDMuJJj5fOZYnueqzw3LvYqMkxeJ mwWnuOZKCnusE5DR03MOymM4Uo8fowlZAnOsMEhg8kUTSEsdRNeezXf9R9xaVgq0 BN2ReWbYxvQgBV2n6KskzkXtzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPtId2Q zv4N2e/v/qFkaDtQLg5+MB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCt614AECP6GlmKyNh0+/Ic3QDRdMT7zjGARCCi3XKkuSNMp1RR6KL fZNmNdgmcUqjNnRxws9/o2U/7q9udXljqVG52iV0gpGAPVCIdigv+KiqikZewi7+ BdX58ELDs3QbDmdlWf1MnmfqkbCBOeh2N4PfW1utfmS6H6gf/C6o7cd5G+U8SwyN e4Lis7lZcTXrKSjSWJ+idw5q0GYzy7dPzSMbf2qCvkOgMn3/vb1JlLXbxdaak9eW FJxgTseCm2mTrQD3KQLvguPngm07igY/+xi0nDNfQOUd7QW7bjt/Pj5FoQA6vg3/ 29fTIoqHE+t1No4315pyOwXJXCToivmj -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:57 2025 by rpki-client