$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: c4xbkzKtu7/r07wsksJ1rNe2975tkHd8pirRowTALTc= Subject key identifier: 9D:E8:1B:77:37:43:12:79:77:42:3D:2F:F3:A2:9C:8F:55:6B:97:4C Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 66 Signing time: Wed 09 Apr 2025 05:51:33 +0000 Manifest this update: Wed 09 Apr 2025 05:51:33 +0000 Manifest next update: Wed 16 Apr 2025 05:51:33 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: jOhqB4ORzDedcUZ5Zn7YsHIbTmxpotaylPBZpULSN50=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA Validity Not Before: Apr 9 05:51:33 2025 GMT Not After : Apr 16 05:51:33 2025 GMT Subject: CN=67f60ae5-0470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a9:0e:72:8d:c3:c7:dd:99:c5:13:30:70:fc: 2f:32:99:a4:a8:d0:b1:66:b1:b8:d3:22:6e:05:a1: ae:c0:46:ae:3a:fe:b1:65:19:4a:56:94:66:bb:37: 0a:44:03:60:d0:bc:3a:9e:05:2d:a0:1f:f3:c6:07: b9:a9:d0:1b:f0:9f:c5:11:b5:0f:77:10:fb:f0:51: c3:67:e4:6e:ba:93:71:17:86:7d:21:2a:12:6f:cd: 65:9e:36:a8:24:e4:31:1b:d1:82:80:2e:a7:dc:94: a7:59:62:ce:79:b5:64:18:b7:9b:6c:cf:4d:75:77: 06:bf:f4:2e:fe:fa:1c:92:df:07:08:2f:68:b6:4d: 35:5d:0f:38:10:1d:02:3b:b7:e2:08:c0:c9:08:c0: 86:26:33:ef:9d:bf:b0:c6:5d:c8:cc:07:87:6b:79: 36:24:02:09:74:7e:01:98:6d:83:0e:ad:a9:70:b2: 77:46:36:e7:53:7d:4d:19:ac:17:e0:fd:b4:21:f8: ac:81:c4:5a:aa:53:d8:bb:e5:97:05:65:43:7d:28: 74:de:0b:91:5e:e8:56:47:d1:39:73:88:6e:51:b3: 7c:4a:c0:33:20:8d:8f:6f:3b:00:2e:16:7d:9f:81: 08:12:9e:c5:a7:4c:b3:86:63:28:c9:54:10:44:c7: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E8:1B:77:37:43:12:79:77:42:3D:2F:F3:A2:9C:8F:55:6B:97:4C X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ef:ad:0e:c7:90:9f:8b:2d:53:aa:61:e0:de:64:df:d7:f8: 59:a8:7e:55:12:a0:e3:12:1d:f1:1a:43:54:02:ea:18:fd:3d: 07:27:14:48:d6:f4:f0:92:38:cc:66:8c:ef:83:ba:c8:5f:71: 7e:71:d5:60:bd:51:1f:8a:db:38:54:0f:aa:48:98:eb:c3:9a: 22:4d:55:38:28:dd:b3:08:d4:7b:44:9a:9c:5b:02:5e:6a:fc: 1e:e7:f3:35:f9:ba:f1:4b:90:b4:1d:50:a7:1c:e4:09:c7:89: 26:44:35:b0:0f:47:2f:c1:03:c2:8f:1d:ea:47:6d:62:19:8b: 01:69:10:e5:9f:bc:50:fb:f3:b2:0f:88:23:ac:48:df:69:0a: 43:3d:2d:49:a1:e1:9b:d5:de:55:38:69:1c:2b:58:3b:64:8a: db:92:65:42:78:6d:c6:f7:9f:6b:a8:d0:77:53:9b:6b:59:16: 93:7a:f4:53:7c:54:6a:f7:6b:e1:06:8a:82:20:4c:f1:3a:d4: fc:de:0d:cc:fd:da:79:8f:d1:ff:83:03:d4:be:71:3a:1c:aa: 09:a0:34:6f:b3:87:5d:74:72:a8:25:a6:b1:d1:bb:4f:d0:95: 50:2d:04:35:f6:fc:43:d7:25:43:57:a1:08:50:03:b5:67:14: a8:11:0b:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzZGQTExMC8GA1UEBRMoNTUzM0E3QzU3QkY0REIxRTUzOEY5RTc3RTBCNDg2OEI4 RjkwQzU4MjAeFw0yNTA0MDkwNTUxMzNaFw0yNTA0MTYwNTUxMzNaMBgxFjAUBgNV BAMTDTY3ZjYwYWU1LTA0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvqQ5yjcPH3ZnFEzBw/C8ymaSo0LFmsbjTIm4Foa7ARq46/rFlGUpWlGa7NwpE A2DQvDqeBS2gH/PGB7mp0Bvwn8URtQ93EPvwUcNn5G66k3EXhn0hKhJvzWWeNqgk 5DEb0YKALqfclKdZYs55tWQYt5tsz011dwa/9C7++hyS3wcIL2i2TTVdDzgQHQI7 t+IIwMkIwIYmM++dv7DGXcjMB4dreTYkAgl0fgGYbYMOralwsndGNudTfU0ZrBfg /bQh+KyBxFqqU9i75ZcFZUN9KHTeC5Fe6FZH0TlziG5Rs3xKwDMgjY9vOwAuFn2f gQgSnsWnTLOGYyjJVBBExyCvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnegbdzdD Enl3Qj0v86Kcj1Vrl0wwHwYDVR0jBBgwFoAUVTOnxXv02x5Tj5534LSGi4+QxYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NkZBLzlDNTJBN0U4ODRD OTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRPbnhYdjAyeDVUajU1MzRMU0dpNC1ReFlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NkZBLzlDNTJBN0U4ODRDOTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1 VGo1NTM0TFNHaTQtUXhZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGnvrQ7HkJ+LLVOqYeDeZN/X+FmoflUSoOMSHfEaQ1QC6hj9PQcnFEjW 9PCSOMxmjO+DushfcX5x1WC9UR+K2zhUD6pImOvDmiJNVTgo3bMI1HtEmpxbAl5q /B7n8zX5uvFLkLQdUKcc5AnHiSZENbAPRy/BA8KPHepHbWIZiwFpEOWfvFD787IP iCOsSN9pCkM9LUmh4ZvV3lU4aRwrWDtkituSZUJ4bcb3n2uo0HdTm2tZFpN69FN8 VGr3a+EGioIgTPE61PzeDcz92nmP0f+DA9S+cTocqgmgNG+zh110cqglprHRu0/Q lVAtBDX2/EPXJUNXoQhQA7VnFKgRC0s= -----END CERTIFICATE-----Generated at Thu Apr 10 18:56:12 2025 by rpki-client