$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: L+KxqIekTpdXiaktwlxKIxgqz/fAP2YIPlgV2MWPxQQ= Subject key identifier: 66:93:14:BA:28:92:61:7A:DB:02:97:F2:42:A6:77:C4:96:2E:D0:7B Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 04DA Signing time: Fri 18 Apr 2025 23:45:56 +0000 Manifest this update: Fri 18 Apr 2025 23:45:56 +0000 Manifest next update: Fri 25 Apr 2025 23:45:56 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: OGR7M1S06Xk2NiqSZ8g4P1zfqihcMkDmswUclwahkcw=) 2: 9CC8124414FB11EC89900016C4F9AE02.roa (hash: gWhjyEMqWUAxPMY1zAfvuV7x9xBFM4K3zu0o2snNnwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: Apr 18 23:45:56 2025 GMT Not After : Apr 25 23:45:56 2025 GMT Subject: CN=6802e434-16cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:04:fa:d4:12:7e:fd:71:bc:55:97:9f:d3: 45:9d:6d:be:cd:5b:83:6d:a3:96:48:f5:bb:b4:87: 24:82:91:15:6f:ff:36:3e:92:5b:94:d2:64:59:e7: 01:db:84:2c:11:25:78:fe:83:9e:b5:a4:6d:9d:6d: 89:39:6b:88:22:6d:59:6f:56:20:5a:1f:96:42:b7: 84:69:7d:ca:d0:f3:62:d9:2a:5f:06:b3:32:b8:81: 1a:9f:81:3b:14:40:ff:4a:fc:3b:8c:e6:d4:e3:4b: fe:79:dd:7c:c0:24:13:95:97:b4:15:03:e1:76:42: 91:be:05:d7:5a:b5:3c:ad:20:65:eb:78:cb:22:49: 5d:8f:14:17:f0:20:4c:83:4b:05:49:df:ab:5f:ab: b8:5c:94:20:c1:b5:6d:00:c4:93:e2:c3:21:e7:95: 24:9f:f1:c1:42:93:8f:cd:ae:ce:1a:25:1d:d6:ac: b8:31:93:06:d0:56:27:02:df:a8:89:c4:11:a4:fc: 4b:76:36:ca:cf:f6:ff:53:4a:ad:81:70:1f:87:7d: e0:8b:30:d6:4f:93:a4:b7:d2:87:fb:9f:5e:d0:8b: 2d:d2:4a:76:69:14:55:3c:b0:85:12:96:ff:b7:d1: c3:89:db:1d:84:25:9d:5a:fc:d2:5c:91:dd:19:14: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:14:BA:28:92:61:7A:DB:02:97:F2:42:A6:77:C4:96:2E:D0:7B X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:93:dc:0e:d2:47:8a:2a:96:21:58:c8:d8:ca:a3:05:62: 9f:d8:7d:97:0d:c4:0d:0b:0b:f2:83:0b:71:2e:a9:d4:71:7b: e2:2f:9a:7f:4d:7a:d5:99:e8:5e:75:06:66:51:02:55:64:c2: 31:9f:17:37:72:6e:e9:30:89:47:6c:9a:d1:37:93:d1:9b:ab: 3c:cd:93:41:dc:51:82:64:94:38:63:aa:43:c0:1f:82:6a:bb: a0:c1:1c:92:1d:d5:9e:c5:fe:17:51:c4:79:fb:82:ed:f3:83: a3:2f:95:71:a9:57:7c:c5:b1:e7:23:7b:77:f7:1b:d8:55:0c: 0c:32:c0:5c:85:5d:d0:fc:ce:a1:c6:3f:15:c2:27:d8:61:1c: 7d:a9:3a:39:f9:8e:5a:99:bb:be:da:f0:c3:1d:81:76:2a:e9: 81:13:a6:91:31:af:03:02:06:ee:ed:72:e9:95:70:50:ae:98: fe:77:9a:ad:c4:7a:28:95:e2:a9:f6:91:57:cb:a9:6a:5b:35: 17:d2:42:ea:1a:f1:12:ef:9c:2d:de:e8:63:de:6b:7a:b0:4c: 1b:42:93:8a:64:42:98:75:41:69:86:de:17:ae:64:2f:ab:e9: a0:f9:02:1d:3c:4a:3e:89:ba:27:2a:63:b9:d3:19:b6:ca:68: 1e:05:ce:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjUwNDE4MjM0NTU2WhcNMjUwNDI1MjM0NTU2WjAYMRYwFAYD VQQDEw02ODAyZTQzNC0xNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof4E+tQSfv1xvFWXn9NFnW2+zVuDbaOWSPW7tIckgpEVb/82PpJblNJkWecB 24QsESV4/oOetaRtnW2JOWuIIm1Zb1YgWh+WQreEaX3K0PNi2SpfBrMyuIEan4E7 FED/Svw7jObU40v+ed18wCQTlZe0FQPhdkKRvgXXWrU8rSBl63jLIkldjxQX8CBM g0sFSd+rX6u4XJQgwbVtAMST4sMh55Ukn/HBQpOPza7OGiUd1qy4MZMG0FYnAt+o icQRpPxLdjbKz/b/U0qtgXAfh33gizDWT5Okt9KH+59e0Ist0kp2aRRVPLCFEpb/ t9HDidsdhCWdWvzSXJHdGRR1UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaTFLoo kmF62wKX8kKmd8SWLtB7MB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAakZPcDtJHiiqWIVjI2MqjBWKf2H2XDcQNCwvygwtxLqnUcXviL5p/ TXrVmehedQZmUQJVZMIxnxc3cm7pMIlHbJrRN5PRm6s8zZNB3FGCZJQ4Y6pDwB+C arugwRySHdWexf4XUcR5+4Lt84OjL5VxqVd8xbHnI3t39xvYVQwMMsBchV3Q/M6h xj8VwifYYRx9qTo5+Y5ambu+2vDDHYF2KumBE6aRMa8DAgbu7XLplXBQrpj+d5qt xHooleKp9pFXy6lqWzUX0kLqGvES75wt3uhj3mt6sEwbQpOKZEKYdUFpht4XrmQv q+mg+QIdPEo+ibonKmO50xm2ymgeBc4F -----END CERTIFICATE-----Generated at Sat Apr 19 02:07:20 2025 by rpki-client