$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft File: vejnZNDzasWboDNpTTo883QGugk.mft (raw, json) Hash identifier: 0THIbSZ4BZyE6GC6yeqqyblKsfqAmqz5lwiZ4E7nQYE= Subject key identifier: 54:F7:AD:53:40:66:18:94:4B:86:7D:70:F9:2B:EE:90:96:E2:DA:3E Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 Certificate issuer: /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft Manifest number: 04D6 Signing time: Sat 29 Mar 2025 00:02:58 +0000 Manifest this update: Sat 29 Mar 2025 00:02:58 +0000 Manifest next update: Sat 05 Apr 2025 00:02:58 +0000 Files and hashes: 1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: tgflmsRsrQauD61u+RCJgpAeLcT4m5e8ttfw1Xk/saU=) 2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: L8/HXBwqySwlOhLxO82Zr1Wb19RHvnnX8QYHJjZFrIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A192 Validity Not Before: Mar 29 00:02:58 2025 GMT Not After : Apr 5 00:02:58 2025 GMT Subject: CN=67e738b2-e580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:0b:79:a2:60:fc:e9:23:87:a8:ab:9f:43: 59:30:08:8e:90:2b:7f:19:14:0a:a8:6b:59:49:46: 7e:af:96:50:11:92:ce:c2:62:69:1d:d0:cd:f2:5f: a7:d9:57:8b:ad:68:e9:d0:4c:d6:01:5d:e8:12:9f: e9:3a:41:9a:b0:c5:7f:1d:3b:b9:8b:68:e9:47:8a: 25:c3:5c:56:c1:ce:d0:03:6d:d1:3b:d9:9b:df:89: db:40:f2:2a:d0:2a:0d:7c:24:18:5c:80:25:51:3d: 7f:b0:9a:6c:9c:f4:bd:ef:1e:52:d6:fe:83:34:4e: 27:23:e0:84:b0:2e:74:9d:61:67:22:20:5a:c8:37: 8f:6d:5d:b0:a3:c9:34:3b:b9:5c:48:e2:a6:10:39: af:32:12:c8:b3:75:56:71:7d:be:28:a9:26:50:f8: 1a:e4:54:5d:b4:8d:89:ef:5f:a9:52:fc:c2:42:5f: ed:f7:5f:8d:55:e9:18:57:87:67:b4:bf:ad:81:86: ff:c0:87:26:c2:fb:47:db:80:07:b8:94:29:79:fa: 1b:8c:5e:2b:d0:5b:84:d2:16:b9:43:41:03:5e:59: 90:d8:a1:72:8f:9b:bc:b5:86:a2:53:41:d8:d3:e6: c8:43:6e:74:c0:4b:14:3b:dd:3e:45:ba:f7:7d:3b: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:AD:53:40:66:18:94:4B:86:7D:70:F9:2B:EE:90:96:E2:DA:3E X509v3 Authority Key Identifier: keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:5b:d1:13:98:5d:bd:5c:7b:91:8c:da:a6:c8:d0:e3:ca: c8:5e:ac:4c:74:d2:71:6d:4c:05:4b:8a:a6:ca:bf:75:f4:61: fb:66:46:61:e4:0f:1e:01:b8:b7:2b:4a:c3:1e:ae:85:60:91: 85:fc:31:6f:e7:9c:67:4c:cb:9a:66:86:0a:e5:b7:70:63:99: 48:33:5d:b5:a8:6f:12:fb:c1:f2:5e:5f:84:8f:56:e5:5e:a6: fe:e2:e6:9a:4e:5f:7c:03:f6:db:d9:87:68:f0:9d:3b:b9:ff: ae:9a:c4:5f:e3:b1:b7:f8:dd:43:54:07:0a:fc:7f:fe:cc:7d: ae:17:7c:9a:9b:93:1d:88:17:1d:e1:f3:ef:aa:fe:8f:2a:c3: 51:7e:5b:c0:e9:bc:62:78:0e:cc:93:2a:1a:50:30:9a:f5:bb: 78:33:f3:73:f7:1b:b3:c2:53:97:c6:3e:f4:ae:aa:87:76:3e: 76:d7:75:ab:85:85:6f:52:2d:c0:13:c5:ae:27:f6:04:ff:05: bf:80:ea:42:bf:ce:f2:6e:a2:85:1e:7e:44:08:ce:27:db:96: 42:00:16:e7:c2:0e:cf:1a:aa:d5:85:5a:08:10:74:ff:a7:96: ae:ea:dd:66:b4:d1:ac:9a:8e:f2:7f:5b:d2:b4:4e:9e:39:ff: 40:f2:e0:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz NzQwNkJBMDkwHhcNMjUwMzI5MDAwMjU4WhcNMjUwNDA1MDAwMjU4WjAYMRYwFAYD VQQDEw02N2U3MzhiMi1lNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4oLeaJg/Okjh6irn0NZMAiOkCt/GRQKqGtZSUZ+r5ZQEZLOwmJpHdDN8l+n 2VeLrWjp0EzWAV3oEp/pOkGasMV/HTu5i2jpR4olw1xWwc7QA23RO9mb34nbQPIq 0CoNfCQYXIAlUT1/sJpsnPS97x5S1v6DNE4nI+CEsC50nWFnIiBayDePbV2wo8k0 O7lcSOKmEDmvMhLIs3VWcX2+KKkmUPga5FRdtI2J71+pUvzCQl/t91+NVekYV4dn tL+tgYb/wIcmwvtH24AHuJQpefobjF4r0FuE0ha5Q0EDXlmQ2KFyj5u8tYaiU0HY 0+bIQ250wEsUO90+Rbr3fTvG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT3rVNA ZhiUS4Z9cPkr7pCW4to+MB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2y1vRE5hdvVx7kYzapsjQ48rIXqxMdNJxbUwFS4qmyr919GH7ZkZh 5A8eAbi3K0rDHq6FYJGF/DFv55xnTMuaZoYK5bdwY5lIM121qG8S+8HyXl+Ej1bl Xqb+4uaaTl98A/bb2Ydo8J07uf+umsRf47G3+N1DVAcK/H/+zH2uF3yam5MdiBcd 4fPvqv6PKsNRflvA6bxieA7MkyoaUDCa9bt4M/Nz9xuzwlOXxj70rqqHdj5213Wr hYVvUi3AE8WuJ/YE/wW/gOpCv87ybqKFHn5ECM4n25ZCABbnwg7PGqrVhVoIEHT/ p5au6t1mtNGsmo7yf1vStE6eOf9A8uC8 -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:12 2025 by rpki-client