$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: yCt6pKOw/gDtAoPF4AnbJnsV7Kx2RKEJBFD9fyQz6M0= Subject key identifier: 51:4E:19:E2:90:CD:F6:00:3F:ED:55:ED:B2:79:A9:42:49:BF:55:E4 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: E1 Signing time: Thu 03 Apr 2025 04:45:13 +0000 Manifest this update: Thu 03 Apr 2025 04:45:13 +0000 Manifest next update: Thu 10 Apr 2025 04:45:12 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: etO9/XLXrfOwDgWvgWnjZ46HEQxTKT5/IQckDAhi4vU=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E Validity Not Before: Apr 3 04:45:13 2025 GMT Not After : Apr 10 04:45:12 2025 GMT Subject: CN=67ee1259-4ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:a6:47:97:c5:bd:66:ac:ac:f4:c3:fd:35: 0a:b2:d9:10:d7:c4:2d:63:11:ea:09:2f:da:79:02: 1d:e2:66:4b:5e:c2:43:e8:1d:aa:29:7a:6c:e1:ad: 79:b8:3b:3d:4e:01:36:27:b4:ea:23:ea:0f:33:83: 78:a9:dd:34:c3:69:88:01:8b:4e:61:70:e7:0c:01: 64:bf:ba:93:d5:72:2b:16:59:b5:e0:aa:75:3e:de: 48:47:65:26:ba:47:53:4c:c0:b1:2a:5e:3d:a3:55: 67:56:24:45:17:90:5a:88:27:3a:1f:fb:b6:9a:af: a6:ed:ff:10:c2:57:c1:8c:94:c9:12:43:8f:90:59: 53:b8:8e:ba:1e:24:50:78:9e:ff:df:55:72:b7:08: b1:9a:35:a2:66:17:a8:b9:2b:37:5f:4f:d0:2b:d6: 91:bb:56:aa:2d:7f:a9:a0:12:7c:ef:84:6f:3a:07: ae:ae:08:c9:4e:fc:12:2b:a4:8d:20:02:84:4d:a0: a3:73:2e:9a:1d:5d:07:db:e7:06:7a:86:50:db:75: d6:54:20:4f:2d:1b:43:59:f7:a9:5c:34:a8:1c:cb: a0:b0:9e:14:91:d1:50:c1:4f:24:e8:0c:28:71:38: 79:91:e8:48:5e:e8:24:8d:37:f1:68:13:11:04:ea: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:19:E2:90:CD:F6:00:3F:ED:55:ED:B2:79:A9:42:49:BF:55:E4 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4f:d1:e4:38:31:3a:c1:1d:d0:6f:d1:08:e5:19:91:bf:d1: 34:b5:a4:69:56:90:af:9b:31:dd:90:21:0d:d3:b5:2f:5c:7d: 65:34:d2:58:7d:00:4f:01:35:90:bd:6b:2f:2b:d9:00:73:3c: d3:dc:31:57:e1:62:af:50:76:13:de:60:71:d4:9a:60:17:38: 21:5f:7a:5f:a0:ac:53:e4:a2:b3:de:b3:2a:e7:a7:89:c6:75: fd:1c:94:a5:3e:ad:45:d6:1a:bf:2c:b9:45:55:04:f2:db:a3: e8:cb:35:98:c9:d2:9d:d5:5d:30:ea:9e:15:68:b4:25:96:81: 00:48:e3:b9:90:3e:be:9f:8b:56:40:92:2f:cf:cc:53:b0:19: 42:0a:72:82:39:09:5e:e6:58:5f:07:ff:46:e6:ae:eb:c3:c2: 68:73:26:8e:12:bb:9d:22:44:c5:77:04:9f:a6:1a:a5:8c:37: 4a:b3:5e:a7:45:87:13:a5:cd:87:18:a0:fd:55:07:c9:5d:7c: 99:eb:71:9f:9f:a2:9e:0b:b4:30:ca:25:89:89:88:76:14:04: 18:f8:36:93:af:65:d6:a6:4d:61:54:3d:f1:c0:7f:f4:2e:b8: bb:5b:2d:49:0f:c9:27:a9:b3:f9:58:db:94:7d:da:81:e9:c6: 73:73:5c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNDAzMDQ0NTEzWhcNMjUwNDEwMDQ0NTEyWjAYMRYwFAYD VQQDEw02N2VlMTI1OS00Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxymR5fFvWasrPTD/TUKstkQ18QtYxHqCS/aeQId4mZLXsJD6B2qKXps4a15 uDs9TgE2J7TqI+oPM4N4qd00w2mIAYtOYXDnDAFkv7qT1XIrFlm14Kp1Pt5IR2Um ukdTTMCxKl49o1VnViRFF5BaiCc6H/u2mq+m7f8QwlfBjJTJEkOPkFlTuI66HiRQ eJ7/31VytwixmjWiZheouSs3X0/QK9aRu1aqLX+poBJ874RvOgeurgjJTvwSK6SN IAKETaCjcy6aHV0H2+cGeoZQ23XWVCBPLRtDWfepXDSoHMugsJ4UkdFQwU8k6Awo cTh5kehIXugkjTfxaBMRBOpvVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFOGeKQ zfYAP+1V7bJ5qUJJv1XkMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2T9HkODE6wR3Qb9EI5RmRv9E0taRpVpCvmzHdkCEN07UvXH1lNNJY fQBPATWQvWsvK9kAczzT3DFX4WKvUHYT3mBx1JpgFzghX3pfoKxT5KKz3rMq56eJ xnX9HJSlPq1F1hq/LLlFVQTy26PoyzWYydKd1V0w6p4VaLQlloEASOO5kD6+n4tW QJIvz8xTsBlCCnKCOQle5lhfB/9G5q7rw8JocyaOErudIkTFdwSfphqljDdKs16n RYcTpc2HGKD9VQfJXXyZ63Gfn6KeC7QwyiWJiYh2FAQY+DaTr2XWpk1hVD3xwH/0 Lri7Wy1JD8knqbP5WNuUfdqB6cZzc1xk -----END CERTIFICATE-----Generated at Fri Apr 4 22:25:00 2025 by rpki-client