$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: rgJDXAjHNsdaaDkTO2OjWmTKMAnZrRQC0h1Knqt35OM= Subject key identifier: C4:56:7E:34:5B:52:1E:69:60:58:8A:F8:2B:AA:18:40:40:BA:35:4F Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 05E2 Signing time: Fri 18 Apr 2025 22:58:28 +0000 Manifest this update: Fri 18 Apr 2025 22:58:27 +0000 Manifest next update: Fri 25 Apr 2025 22:58:27 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: fscPsea6Wq8svwzBruAuxdUw+TzcsBFa0ek9ISGfxFM=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 22:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Apr 18 22:58:27 2025 GMT Not After : Apr 25 22:58:27 2025 GMT Subject: CN=6802d914-9afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:2b:c7:c0:2d:42:c8:79:da:e0:9f:e1:b6: 93:d7:ee:dd:6e:39:51:87:fe:e2:eb:93:9c:2d:cc: cb:8e:7a:00:8f:ac:34:ce:b7:30:f3:07:28:e9:8b: 7f:e0:11:bc:1f:74:f7:54:63:cf:89:cf:5a:19:cd: 99:ce:d4:45:da:ab:d6:0a:30:be:08:fa:cf:b2:e5: f1:22:fd:24:14:c8:51:4f:4f:1a:6a:28:ce:98:4f: 3b:ab:6f:8d:f6:36:58:2d:87:f1:58:ae:b4:c6:d7: 88:d8:f1:b0:67:ee:fe:71:c6:ad:d2:98:33:f7:b1: 3e:07:c8:7e:91:6e:49:dc:2c:0e:97:af:c0:a3:cf: a2:92:fd:41:e1:2f:95:f0:d9:7b:50:43:9e:7a:01: 9e:ee:2d:7d:42:d4:29:bf:f8:10:b3:b1:c2:6a:13: fa:6c:f7:81:9d:b4:0a:d6:dd:6e:cf:07:ac:95:d2: b3:82:16:d4:93:78:7e:2c:2e:ab:e9:c6:c8:e6:5b: d6:b4:44:ce:5e:37:f7:a0:50:59:3c:42:47:de:d1: de:8c:41:af:5b:95:b2:48:ff:58:91:33:aa:75:a3: 11:92:cc:18:d3:1e:1f:87:96:29:36:e2:f1:86:14: c9:45:74:20:a4:25:e3:36:35:94:fe:c7:54:3e:ec: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:7E:34:5B:52:1E:69:60:58:8A:F8:2B:AA:18:40:40:BA:35:4F X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:2f:1d:a8:93:bb:2c:26:b8:58:2d:e8:a7:dc:5d:2f:6f: aa:0e:e1:45:33:78:30:6f:4f:2f:85:fe:7a:c5:ef:86:12:95: 21:5d:ce:c6:e0:19:3d:c2:2f:50:29:61:0d:70:56:90:86:27: c8:f8:3d:71:eb:c0:70:d8:1b:ac:1e:f9:13:60:25:19:1f:fb: b6:2b:1b:9a:d6:6b:00:99:71:30:3c:98:b2:8e:0f:7c:84:1e: 85:2b:fb:8a:69:06:91:1c:83:6c:63:9b:f7:7a:4f:9e:6b:19: a0:7c:23:14:a9:46:ed:c3:06:c0:29:57:d9:27:ae:59:20:02: 90:08:ab:ab:ba:4e:be:d5:a9:a1:80:43:4c:fa:f4:47:92:2a: 71:34:16:1f:d2:a1:67:44:19:c5:7c:0a:73:1e:2c:17:6f:f2: 1a:e2:5b:f6:51:77:8f:a8:aa:d7:65:3b:8d:ac:5b:ea:55:94: 97:1b:96:fc:ed:d9:b7:52:13:66:1e:51:21:e2:29:62:ad:10: 14:af:d8:c2:11:24:bb:e6:94:d5:fe:fb:c2:86:3b:61:c2:a2: 99:ad:8f:11:50:bf:35:65:8e:53:d0:53:a8:28:ca:45:e9:af: 4d:ce:f1:ed:69:07:f3:92:64:50:56:97:82:a6:16:6c:08:c7: 51:c2:36:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNDE4MjI1ODI3WhcNMjUwNDI1MjI1ODI3WjAYMRYwFAYD VQQDEw02ODAyZDkxNC05YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6grx8AtQsh52uCf4baT1+7dbjlRh/7i65OcLczLjnoAj6w0zrcw8wco6Yt/ 4BG8H3T3VGPPic9aGc2ZztRF2qvWCjC+CPrPsuXxIv0kFMhRT08aaijOmE87q2+N 9jZYLYfxWK60xteI2PGwZ+7+ccat0pgz97E+B8h+kW5J3CwOl6/Ao8+ikv1B4S+V 8Nl7UEOeegGe7i19QtQpv/gQs7HCahP6bPeBnbQK1t1uzwesldKzghbUk3h+LC6r 6cbI5lvWtETOXjf3oFBZPEJH3tHejEGvW5WySP9YkTOqdaMRkswY0x4fh5YpNuLx hhTJRXQgpCXjNjWU/sdUPuztoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRWfjRb Uh5pYFiK+CuqGEBAujVPMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+i8dqJO7LCa4WC3op9xdL2+qDuFFM3gwb08vhf56xe+GEpUhXc7G 4Bk9wi9QKWENcFaQhifI+D1x68Bw2BusHvkTYCUZH/u2Kxua1msAmXEwPJiyjg98 hB6FK/uKaQaRHINsY5v3ek+eaxmgfCMUqUbtwwbAKVfZJ65ZIAKQCKuruk6+1amh gENM+vRHkipxNBYf0qFnRBnFfApzHiwXb/Ia4lv2UXePqKrXZTuNrFvqVZSXG5b8 7dm3UhNmHlEh4ilirRAUr9jCESS75pTV/vvChjthwqKZrY8RUL81ZY5T0FOoKMpF 6a9NzvHtaQfzkmRQVpeCphZsCMdRwjaG -----END CERTIFICATE-----Generated at Sun Apr 20 03:51:00 2025 by rpki-client