$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: ZwOyKwaILsqM6547czsoE+5dSZAI17urqv+pvwurHr8= Subject key identifier: 94:75:A1:1C:AF:FB:1A:DD:9B:C2:6C:D7:FA:55:FE:F6:55:E8:BA:86 Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: 3A Signing time: Sat 29 Mar 2025 06:55:26 +0000 Manifest this update: Sat 29 Mar 2025 06:55:26 +0000 Manifest next update: Sat 05 Apr 2025 06:55:26 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: C/VqYr8vPK/PKYKq9601cmXV5pHieTPyFllQGfDngN4=) 2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: 46zNjtnLZ5ywrRRPOzjWlNv+erVogDzKd0OwWv6xC4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8 Validity Not Before: Mar 29 06:55:26 2025 GMT Not After : Apr 5 06:55:26 2025 GMT Subject: CN=67e7995e-cb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:65:a5:f2:27:a9:24:de:3e:e8:1f:8a:69:26: c8:f8:40:34:c6:2e:15:b7:86:09:d9:62:69:6d:3a: bb:b0:72:38:84:5f:92:2a:d2:1a:59:8c:2d:b9:0a: 55:6d:4b:43:75:47:73:6a:c8:08:fa:28:ca:d9:5d: 5a:be:14:b0:d5:0a:61:d5:24:d1:85:93:fe:31:17: 3e:0c:3f:ff:f8:14:e2:a2:d4:40:e9:2a:69:6c:cb: fb:03:d4:48:5c:6e:ea:64:d9:0f:df:d7:e3:d1:e2: c4:ca:b2:7f:45:4c:4b:6a:ec:31:fb:d8:52:ba:8d: 7b:3e:a0:fc:d0:17:88:85:a1:98:c2:08:72:35:e6: 9e:3f:e9:d1:f4:8f:e7:bc:00:77:b1:f7:ea:20:55: 67:d8:49:2a:6d:45:b7:c7:f2:51:a7:54:9d:19:7f: e3:48:2a:5a:2e:eb:65:25:dd:0e:a6:ec:83:53:32: 2b:97:a2:92:4e:6f:76:4a:d3:ce:25:b9:e7:d6:b3: a2:c7:cd:27:66:55:ae:1d:41:e5:02:bb:dd:ed:9c: d8:3d:fc:5a:e5:c4:66:da:8d:43:55:56:d4:f0:11: ae:b8:c1:e6:fc:c9:8a:47:8d:61:fb:dc:32:2d:ec: 17:8c:30:70:49:61:59:86:f3:c4:7f:de:5d:65:b7: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:A1:1C:AF:FB:1A:DD:9B:C2:6C:D7:FA:55:FE:F6:55:E8:BA:86 X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:82:31:69:b0:f6:46:02:48:b8:1b:e3:db:bb:1b:33:42:91: 53:ff:42:dd:93:15:9f:ec:4f:bc:c0:fb:29:57:fc:8c:6e:57: 1b:a6:96:3a:f8:92:f9:e0:f7:a4:0c:03:2a:e0:8e:aa:4f:73: fd:9b:b8:c6:a5:04:32:2d:08:ef:f2:09:f3:8e:05:a9:71:c5: ad:0e:b1:7f:38:71:1c:fe:a5:f4:d8:29:a6:1a:04:b5:e7:7d: b0:4e:ef:94:bb:04:96:6d:28:12:d6:d2:78:df:78:9c:b8:08: 12:5a:58:43:ef:ff:6d:9f:2e:ba:1a:68:0a:37:26:c5:24:70: 64:fa:2a:31:40:02:f6:d2:f8:16:99:2f:4c:d8:de:cc:25:22: e6:eb:6b:90:ae:59:97:ff:46:6a:02:68:ea:5f:e1:3b:5e:f1: 39:4e:23:df:2a:8b:a2:7c:a6:b3:f3:b8:33:49:77:71:d2:87: d5:4e:6e:b2:18:d0:84:a2:8a:fb:2b:9e:66:2b:84:2f:72:df: 2e:27:1c:d9:2f:21:a5:80:14:4b:bd:f7:7c:b6:46:a7:82:29: 17:00:2e:b8:29:82:3d:5c:24:c2:f4:99:c8:04:b9:4d:91:1c: 59:cc:8b:f0:26:02:fe:af:9a:cb:a4:75:31:23:54:67:e4:06: 4c:8e:f2:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUVGODExMC8GA1UEBRMoNTZDNjkzMDVCNUVCQTU0MjU1NUQ4Qzc4QzU2MUFCN0E2 Q0QxQUEyQzAeFw0yNTAzMjkwNjU1MjZaFw0yNTA0MDUwNjU1MjZaMBgxFjAUBgNV BAMTDTY3ZTc5OTVlLWNiNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4ZaXyJ6kk3j7oH4ppJsj4QDTGLhW3hgnZYmltOruwcjiEX5Iq0hpZjC25ClVt S0N1R3NqyAj6KMrZXVq+FLDVCmHVJNGFk/4xFz4MP//4FOKi1EDpKmlsy/sD1Ehc bupk2Q/f1+PR4sTKsn9FTEtq7DH72FK6jXs+oPzQF4iFoZjCCHI15p4/6dH0j+e8 AHex9+ogVWfYSSptRbfH8lGnVJ0Zf+NIKlou62Ul3Q6m7INTMiuXopJOb3ZK084l uefWs6LHzSdmVa4dQeUCu93tnNg9/FrlxGbajUNVVtTwEa64web8yYpHjWH73DIt 7BeMMHBJYVmG88R/3l1ltw6hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlHWhHK/7 Gt2bwmzX+lX+9lXouoYwHwYDVR0jBBgwFoAUVsaTBbXrpUJVXYx4xWGremzRqiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUY4Lzk3OTlFNkQwQkJD NDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnNhVEJiWHJwVUpWWFl4NHhXR3JlbXpScWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RUY4Lzk3OTlFNkQwQkJDNDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVK VlhZeDR4V0dyZW16UnFpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2CMWmw9kYCSLgb49u7GzNCkVP/Qt2TFZ/sT7zA+ylX/IxuVxumljr4 kvng96QMAyrgjqpPc/2buMalBDItCO/yCfOOBalxxa0OsX84cRz+pfTYKaYaBLXn fbBO75S7BJZtKBLW0njfeJy4CBJaWEPv/22fLroaaAo3JsUkcGT6KjFAAvbS+BaZ L0zY3swlIubra5CuWZf/RmoCaOpf4Tte8TlOI98qi6J8prPzuDNJd3HSh9VObrIY 0ISiivsrnmYrhC9y3y4nHNkvIaWAFEu993y2RqeCKRcALrgpgj1cJML0mcgEuU2R HFnMi/AmAv6vmsukdTEjVGfkBkyO8vk= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:40 2025 by rpki-client