$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: HtW2FowNlDnAlEL6DFvTJc+H+KD7cunSXDlFGYaYmf4= Subject key identifier: 01:1B:ED:52:DC:2D:39:85:11:ED:13:6E:58:F5:D2:22:8C:BC:1C:F3 Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 19 Signing time: Sat 29 Mar 2025 07:16:47 +0000 Manifest this update: Sat 29 Mar 2025 07:16:47 +0000 Manifest next update: Sat 05 Apr 2025 07:16:47 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: p/3wZk+XpuZXfoogCgR5SfBtQ+i9yVg08m/ZfkLfvFw=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D Validity Not Before: Mar 29 07:16:47 2025 GMT Not After : Apr 5 07:16:47 2025 GMT Subject: CN=67e79e5f-fd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:db:26:96:1e:82:78:8f:00:bf:4d:92:12:0e: 74:52:b2:05:66:ce:09:4a:91:1d:4f:6e:fa:40:3e: e2:c4:b7:ad:d3:bd:ba:c5:df:6b:5b:0a:3a:e1:b3: 0e:bc:3c:12:93:be:c8:dc:b0:fc:6d:8a:37:5e:79: 6f:1d:8e:c7:db:e9:9f:70:80:90:91:24:7c:bb:57: 06:e3:39:30:67:1c:75:f1:d1:ce:b8:45:c0:18:c8: 2d:a6:cc:cd:ed:1a:d1:6b:c9:6d:64:61:b6:96:1e: 95:9c:3e:12:d6:3c:28:67:8f:d2:3d:a1:14:48:4c: c1:a2:03:8e:46:c8:90:ca:03:5b:2c:62:da:1c:d0: 2b:29:ff:88:b4:b1:e4:a1:a1:55:76:dd:2d:d3:83: 3f:86:fc:b0:57:06:30:7e:a6:69:7b:56:f6:04:a0: 69:9f:a1:c8:ad:74:0d:ca:c9:1d:38:dd:fa:91:d8: d4:cf:bf:6b:a4:4d:b8:84:a9:f8:bb:8c:89:b4:59: 32:c2:d8:c8:47:db:59:13:53:13:8b:09:fe:da:a5: dd:c4:cf:46:21:d0:73:95:86:8e:58:f9:0b:4b:1c: ec:8f:45:02:f9:bf:5f:62:39:b1:fa:84:b8:b5:16: 9e:6b:ae:3e:87:83:22:cb:b8:ce:c8:76:b1:82:f6: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1B:ED:52:DC:2D:39:85:11:ED:13:6E:58:F5:D2:22:8C:BC:1C:F3 X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:88:11:9f:86:6b:da:d3:0d:cd:70:3f:58:ab:dd:ca:aa:5a: d2:c1:7b:cf:55:0d:c9:4c:58:e8:08:fb:92:d1:02:99:6c:fc: 13:4d:0a:9b:5e:2f:eb:8c:57:38:7c:d2:8f:66:cb:e9:63:78: f6:b4:10:a5:a5:b4:19:ed:41:f7:cc:40:a9:4f:02:2f:0c:e3: 71:19:39:db:ae:17:4e:dc:ac:6f:41:34:cb:db:f8:ea:be:12: 72:34:6f:08:ec:73:74:e7:d6:d9:e4:03:91:4b:20:c9:45:1a: 0c:23:23:6a:b8:8b:6a:11:50:67:f7:d4:e6:59:8d:1f:1e:7c: be:a1:bf:5b:3b:3c:b3:9b:21:76:f6:e2:d9:05:8c:87:c9:f0: 64:ad:78:cd:20:f1:91:74:6f:14:44:f0:fd:1a:b0:c4:9a:4b: b5:4b:4a:4d:7d:6f:9e:8b:4d:91:1e:6b:71:12:45:93:a2:eb: 12:87:fb:61:1f:eb:92:86:4a:7d:3d:3a:99:da:35:2a:e4:42: 93:25:9c:b6:72:2f:5e:ec:24:37:ec:bc:f8:f8:cd:fd:8a:44: 0f:d5:6a:7f:2f:70:33:8f:3a:15:e3:71:55:6f:8a:04:f6:d6: 2d:9e:0d:69:2c:a7:e1:36:61:f4:00:72:87:ee:fe:18:fa:69: ab:98:cd:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTAzMjkwNzE2NDdaFw0yNTA0MDUwNzE2NDdaMBgxFjAUBgNV BAMTDTY3ZTc5ZTVmLWZkMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD32yaWHoJ4jwC/TZISDnRSsgVmzglKkR1PbvpAPuLEt63TvbrF32tbCjrhsw68 PBKTvsjcsPxtijdeeW8djsfb6Z9wgJCRJHy7VwbjOTBnHHXx0c64RcAYyC2mzM3t GtFryW1kYbaWHpWcPhLWPChnj9I9oRRITMGiA45GyJDKA1ssYtoc0Csp/4i0seSh oVV23S3Tgz+G/LBXBjB+pml7VvYEoGmfocitdA3KyR043fqR2NTPv2ukTbiEqfi7 jIm0WTLC2MhH21kTUxOLCf7apd3Ez0Yh0HOVho5Y+QtLHOyPRQL5v19iObH6hLi1 Fp5rrj6HgyLLuM7IdrGC9icBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUARvtUtwt OYUR7RNuWPXSIoy8HPMwHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCIEZ+Ga9rTDc1wP1ir3cqqWtLBe89VDclMWOgI+5LRApls/BNNCpte L+uMVzh80o9my+ljePa0EKWltBntQffMQKlPAi8M43EZOduuF07crG9BNMvb+Oq+ EnI0bwjsc3Tn1tnkA5FLIMlFGgwjI2q4i2oRUGf31OZZjR8efL6hv1s7PLObIXb2 4tkFjIfJ8GSteM0g8ZF0bxRE8P0asMSaS7VLSk19b56LTZEea3ESRZOi6xKH+2Ef 65KGSn09OpnaNSrkQpMlnLZyL17sJDfsvPj4zf2KRA/Van8vcDOPOhXjcVVvigT2 1i2eDWksp+E2YfQAcofu/hj6aauYzS4= -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:48 2025 by rpki-client