$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: MeMYtQ9cNQ5sck4ji0vEUw2WtCaMPRyw0GtxIsnjdOU= Subject key identifier: 38:82:69:FD:B1:4A:6B:7C:0E:DD:CE:31:55:68:9E:CD:E8:43:F7:57 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0AF1 Signing time: Fri 04 Apr 2025 19:25:47 +0000 Manifest this update: Fri 04 Apr 2025 19:25:47 +0000 Manifest next update: Fri 11 Apr 2025 19:25:47 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: OrygL2c92ZXHVvjI4PzliCPZ7d10wjwUSZ2Gaj3bFUU=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: +lIDB4ZMJfUSud6W0iovrastNVgYPAXPsXe69l2eSPM=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: D3fpRnO+H4w2WyJAekG120AEE5NS6PdOTqoTbZ8Xvyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8 Validity Not Before: Apr 4 19:25:47 2025 GMT Not After : Apr 11 19:25:47 2025 GMT Subject: CN=67f0323b-2742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:31:7a:53:8b:9c:aa:2c:cd:dc:d5:a3:99: d8:60:4b:82:78:98:41:d7:ed:36:c3:41:fb:9c:e1: b2:e5:3b:ed:75:e2:27:e8:b1:eb:4a:73:49:a9:55: 3f:bd:ab:b5:71:d7:1f:1a:49:65:3b:ac:00:da:58: 90:5b:34:de:ee:18:07:ce:a5:b6:4c:a3:90:d6:1d: 8d:c2:ea:04:8f:6b:b4:84:e8:d7:e2:c5:06:2a:a3: 35:fa:12:80:5a:00:76:72:a2:6a:65:b2:d7:61:f2: 2e:04:6b:8c:73:6f:51:d9:c2:17:46:5e:4f:b0:0f: 8b:02:29:5b:09:1f:97:04:c9:e4:56:7a:ad:f4:1d: 71:2b:c1:c9:24:f0:6b:2b:b9:d3:21:aa:90:1c:9d: f3:37:d1:21:11:e3:9f:e6:5a:63:6e:29:68:93:c1: 5e:84:37:0a:0b:4a:eb:fb:f3:72:40:80:96:ef:74: 9e:c8:25:af:c0:7f:32:43:04:14:07:f0:38:8c:cd: c1:11:e1:f6:a9:f7:c3:b8:fb:b6:7c:6c:1a:41:e3: c2:f5:59:32:98:7e:20:ed:49:8c:4b:22:ae:f5:97: 4b:0f:c8:c1:54:2c:c5:c7:60:2d:0c:66:7d:22:ec: ca:22:83:2d:e6:e7:96:4b:9d:66:0c:b5:ad:cb:25: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:82:69:FD:B1:4A:6B:7C:0E:DD:CE:31:55:68:9E:CD:E8:43:F7:57 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3a:3f:98:4e:fb:f6:b4:e6:75:f9:6b:2a:09:45:d4:cf:04: 05:cb:b2:42:3c:55:ca:54:dd:ec:b5:f2:44:fd:f1:e9:e8:c0: 5a:28:10:23:95:62:fc:27:fc:15:a3:1b:32:08:d9:84:2f:da: 4a:93:4c:88:e3:cc:79:76:9e:a5:60:0f:ae:12:2e:2d:b8:56: f5:b6:cd:79:3c:5c:92:6e:36:d0:d9:96:4c:32:b2:9c:3e:af: ee:e6:2c:71:14:ce:7e:da:4c:20:50:7d:d7:79:cb:7d:eb:98: d5:37:d5:2f:93:48:1f:76:4a:26:0c:cb:ac:16:42:4b:c9:49: 58:55:66:90:07:e0:4b:ec:7e:a6:3a:af:6b:ce:37:d4:ac:59: 41:98:79:e8:2f:84:66:c8:08:f5:c0:2e:ab:d5:95:c4:6e:ba: c1:be:57:47:9c:2f:1d:31:d1:3e:64:ae:33:32:a5:11:36:ed: 93:91:23:dc:fa:8c:ba:7e:5d:5e:91:2c:f4:4b:bc:a7:89:6a: 7b:44:c3:6e:3f:5a:9c:ca:3f:19:b2:f8:56:fd:d6:a4:8d:7c: db:f9:25:3c:64:08:6a:bd:2d:bc:e6:a1:36:be:b4:17:df:d5: 2e:e1:bf:6e:d6:7e:26:c9:5b:20:e3:98:6c:15:14:a0:ef:6a: 1c:c0:12:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjUwNDA0MTkyNTQ3WhcNMjUwNDExMTkyNTQ3WjAYMRYwFAYD VQQDEw02N2YwMzIzYi0yNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB8xelOLnKoszdzVo5nYYEuCeJhB1+02w0H7nOGy5TvtdeIn6LHrSnNJqVU/ vau1cdcfGkllO6wA2liQWzTe7hgHzqW2TKOQ1h2NwuoEj2u0hOjX4sUGKqM1+hKA WgB2cqJqZbLXYfIuBGuMc29R2cIXRl5PsA+LAilbCR+XBMnkVnqt9B1xK8HJJPBr K7nTIaqQHJ3zN9EhEeOf5lpjbilok8FehDcKC0rr+/NyQICW73SeyCWvwH8yQwQU B/A4jM3BEeH2qffDuPu2fGwaQePC9VkymH4g7UmMSyKu9ZdLD8jBVCzFx2AtDGZ9 IuzKIoMt5ueWS51mDLWtyyX7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiCaf2x Smt8Dt3OMVVons3oQ/dXMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Oj+YTvv2tOZ1+WsqCUXUzwQFy7JCPFXKVN3stfJE/fHp6MBaKBAj lWL8J/wVoxsyCNmEL9pKk0yI48x5dp6lYA+uEi4tuFb1ts15PFySbjbQ2ZZMMrKc Pq/u5ixxFM5+2kwgUH3Xect965jVN9Uvk0gfdkomDMusFkJLyUlYVWaQB+BL7H6m Oq9rzjfUrFlBmHnoL4RmyAj1wC6r1ZXEbrrBvldHnC8dMdE+ZK4zMqURNu2TkSPc +oy6fl1ekSz0S7yniWp7RMNuP1qcyj8ZsvhW/dakjXzb+SU8ZAhqvS285qE2vrQX 39Uu4b9u1n4myVsg45hsFRSg72ocwBKv -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:03 2025 by rpki-client