$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json) Hash identifier: Lg1RJOfnwmQKgE2ar1zO63+9gFFfYLFvGicepI0F2wQ= Subject key identifier: E3:34:44:6F:17:FB:10:E0:23:41:BF:AD:D7:60:28:9D:5D:0C:E1:7D Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft Manifest number: 05CA Signing time: Wed 02 Apr 2025 23:05:51 +0000 Manifest this update: Wed 02 Apr 2025 23:05:50 +0000 Manifest next update: Wed 09 Apr 2025 23:05:50 +0000 Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: agDZzEhuuKNBJORgqc2ZAGhHgJ0U0ap7MG+YmPyfn0s=) 2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=) 3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B Validity Not Before: Apr 2 23:05:50 2025 GMT Not After : Apr 9 23:05:50 2025 GMT Subject: CN=67edc2cf-7839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:c0:6d:71:38:db:44:25:d7:d1:b3:11:97: 5d:79:09:7c:5b:55:24:b6:3a:e8:2f:44:80:df:b5: 17:ce:20:da:39:db:20:73:39:e1:ef:37:18:f2:be: 78:99:56:03:aa:a4:55:36:2e:8b:0a:fd:9d:00:d0: 32:b2:cc:dd:3b:1b:5d:4e:e9:e3:65:b3:12:81:72: c9:a3:95:a0:f3:36:c3:fc:2f:83:be:50:0e:10:f8: e4:c5:7f:52:52:eb:47:f9:48:83:24:30:88:bd:85: af:ac:21:60:8c:58:7d:1f:5d:9e:91:d0:d3:c4:fa: 31:bb:b0:e9:bb:66:8b:80:f9:5f:0f:ce:f6:f6:d9: 9f:ba:fb:69:fc:a2:ae:62:97:13:05:a8:2c:12:1c: 44:6e:ff:bc:16:ee:9f:cc:f0:8c:11:54:73:12:f4: 07:aa:a9:d5:a3:28:53:bc:2f:f9:da:ba:63:b4:9d: 44:41:b1:7d:75:68:60:84:f0:07:5b:59:e6:4d:8a: 58:d3:50:ca:f5:30:b1:73:ee:75:c3:6a:94:40:30: 45:8e:49:b1:1c:25:86:cd:78:a1:ed:71:39:a3:b9: 57:78:9e:82:f9:3c:aa:27:2a:55:b3:f3:cc:6c:06: c8:50:43:d7:a5:f4:2c:e1:c9:2e:c1:d9:ee:59:6d: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:44:6F:17:FB:10:E0:23:41:BF:AD:D7:60:28:9D:5D:0C:E1:7D X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:52:53:83:14:13:82:bc:d2:27:f5:44:af:97:42:d0:8a:28: d3:68:9a:9d:df:74:98:39:48:6d:d7:89:2b:b4:3e:a0:37:87: f9:4d:63:6d:f0:73:18:1b:d0:e3:0d:a0:57:f0:9d:d8:99:cc: 5b:e5:b9:f0:46:3f:30:a8:e3:97:f5:ed:75:58:e0:e4:23:9a: c6:6d:0f:10:dd:6d:4b:ab:04:4e:af:56:d2:ad:c0:f5:fe:25: 78:ee:e1:e3:3b:d1:97:83:d8:16:91:d4:c0:5d:20:ba:b0:3d: f5:37:ee:a0:30:bc:59:bd:c4:64:c3:ec:8c:06:a7:4b:0e:f7: 8c:b6:e2:6e:06:c1:b1:bb:71:f0:d4:44:9a:75:44:03:a7:de: 31:fd:d5:15:b6:95:00:7d:94:9a:25:5e:51:f7:50:69:f7:4d: f1:c0:8d:c5:dd:bd:3f:5b:e7:e4:db:ed:c5:29:81:20:2f:5e: d8:4d:52:77:89:14:1d:bc:5f:66:07:ac:7b:09:d2:1c:bf:69: 28:f3:78:d3:3d:58:4e:d9:cc:4d:b1:86:20:06:1e:24:0f:71: 2a:8a:47:28:5f:11:9f:fb:7c:0e:c8:67:92:ee:7d:17:b8:ef: 4c:5f:67:70:23:e4:4a:24:95:fd:d1:93:b8:9c:a6:c6:f8:39: 0c:a3:80:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjUwNDAyMjMwNTUwWhcNMjUwNDA5MjMwNTUwWjAYMRYwFAYD VQQDEw02N2VkYzJjZi03ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zPAbXE420Ql19GzEZddeQl8W1UktjroL0SA37UXziDaOdsgcznh7zcY8r54 mVYDqqRVNi6LCv2dANAysszdOxtdTunjZbMSgXLJo5Wg8zbD/C+DvlAOEPjkxX9S UutH+UiDJDCIvYWvrCFgjFh9H12ekdDTxPoxu7Dpu2aLgPlfD8729tmfuvtp/KKu YpcTBagsEhxEbv+8Fu6fzPCMEVRzEvQHqqnVoyhTvC/52rpjtJ1EQbF9dWhghPAH W1nmTYpY01DK9TCxc+51w2qUQDBFjkmxHCWGzXih7XE5o7lXeJ6C+TyqJypVs/PM bAbIUEPXpfQs4ckuwdnuWW2vjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM0RG8X +xDgI0G/rddgKJ1dDOF9MB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4 bnViVVdya0pEWWpWMnZOXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUlODFBOCvNIn9USvl0LQiijTaJqd33SYOUht14krtD6gN4f5TWNt 8HMYG9DjDaBX8J3Ymcxb5bnwRj8wqOOX9e11WODkI5rGbQ8Q3W1LqwROr1bSrcD1 /iV47uHjO9GXg9gWkdTAXSC6sD31N+6gMLxZvcRkw+yMBqdLDveMtuJuBsGxu3Hw 1ESadUQDp94x/dUVtpUAfZSaJV5R91Bp903xwI3F3b0/W+fk2+3FKYEgL17YTVJ3 iRQdvF9mB6x7CdIcv2ko83jTPVhO2cxNsYYgBh4kD3EqikcoXxGf+3wOyGeS7n0X uO9MX2dwI+RKJJX90ZO4nKbG+DkMo4Ce -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:37 2025 by rpki-client