$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: MaD5puP+TV/wYlOD5p1LAXXUGih3tAOQeqhNIcHE9Dg= Subject key identifier: C1:6C:01:56:3D:31:A5:D6:0F:34:16:19:E4:B6:5F:AF:4E:6C:52:1C Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0403 Signing time: Wed 09 Apr 2025 00:11:12 +0000 Manifest this update: Wed 09 Apr 2025 00:11:12 +0000 Manifest next update: Wed 16 Apr 2025 00:11:12 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: IYI2y+kNK3oyAS4XQB3eKa1RC5KlYzfZ3p7G/0uN7Mg=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD Validity Not Before: Apr 9 00:11:12 2025 GMT Not After : Apr 16 00:11:12 2025 GMT Subject: CN=67f5bb20-893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:19:7d:18:3c:3c:c3:96:24:99:87:61:16: 3d:49:f2:61:31:7d:71:ac:15:55:7f:95:e0:de:2f: e4:d3:2e:b7:23:c2:77:25:fe:ba:14:a1:f4:81:ff: fb:2f:2e:cf:14:50:2f:7f:d7:6f:c6:92:ff:90:27: 46:b2:f8:0d:b7:86:7c:f5:53:be:1b:b3:a3:2d:88: 5b:b6:02:15:3b:98:5f:bd:2d:b7:67:e7:76:05:8d: 95:88:03:2a:e3:ed:68:ae:6b:c3:fa:6b:ca:60:17: d0:41:82:bd:48:8c:fd:e5:22:25:e2:06:38:f2:2c: 2b:ad:06:60:43:0a:d6:87:94:24:fc:4e:b4:e9:67: 92:a0:18:b2:a2:49:04:4e:64:b9:94:a8:ca:3c:dc: 40:af:81:23:dc:97:c4:2d:90:ab:4c:99:d1:91:e9: 07:dd:c8:7c:3a:9b:7b:8e:e3:51:e8:fb:66:6c:1a: aa:c2:c8:c9:d9:fc:57:41:05:97:34:9d:8e:2b:99: ca:36:4c:a8:d4:3e:10:03:32:87:2b:55:a6:7c:ef: c9:de:a1:24:6d:57:d2:5c:7b:99:44:2c:3c:b7:f3: 1a:8f:ff:79:02:26:96:45:90:48:91:8a:37:9e:75: 16:ef:67:3e:a9:02:34:f5:2a:48:99:7a:2f:f0:15: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:01:56:3D:31:A5:D6:0F:34:16:19:E4:B6:5F:AF:4E:6C:52:1C X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5a:29:b1:e8:3e:c0:d8:41:65:0b:d8:0d:e9:ca:e6:28:4f: a2:38:e8:d5:ed:de:bc:b2:df:0b:99:12:ec:32:00:2c:3b:4a: 80:a5:5d:a1:4d:bc:72:5b:16:dd:41:f5:d8:14:65:8f:38:0d: 9e:fb:51:a2:46:54:f7:7f:c5:17:32:41:1b:fc:7e:8d:02:29: 19:40:9f:be:1f:20:66:68:e3:5a:c0:de:b6:70:43:22:5d:5b: 13:60:b1:d2:03:01:e6:8d:14:ba:b3:df:8e:0e:7c:d8:a4:a8: f3:2c:6c:da:63:31:fd:4b:0b:fb:c7:4e:7d:dc:ec:f3:c0:4f: d1:fc:e6:02:06:23:40:f7:8c:40:fa:15:89:81:10:de:d3:b3: e7:1e:ef:12:f3:09:8f:75:a7:fa:8f:45:f4:15:c5:95:93:6f: c6:49:e3:e7:41:fd:cf:e8:09:d0:10:9d:6a:50:bd:61:a9:bb: d7:4c:96:c4:69:51:47:2f:f3:7d:7d:65:ba:cd:a7:37:43:c3: 29:5a:5a:63:67:7f:59:8c:4f:e8:79:23:93:da:e6:fa:66:46: 39:41:d2:53:d6:42:7e:81:73:29:5e:2a:5b:d9:41:ae:9f:10: a3:6e:50:c0:9f:24:e4:e8:50:94:fb:dd:dc:1f:b9:fa:89:60: 5f:bd:e5:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwNDA5MDAxMTEyWhcNMjUwNDE2MDAxMTEyWjAYMRYwFAYD VQQDEw02N2Y1YmIyMC04OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHYZfRg8PMOWJJmHYRY9SfJhMX1xrBVVf5Xg3i/k0y63I8J3Jf66FKH0gf/7 Ly7PFFAvf9dvxpL/kCdGsvgNt4Z89VO+G7OjLYhbtgIVO5hfvS23Z+d2BY2ViAMq 4+1ormvD+mvKYBfQQYK9SIz95SIl4gY48iwrrQZgQwrWh5Qk/E606WeSoBiyokkE TmS5lKjKPNxAr4Ej3JfELZCrTJnRkekH3ch8Opt7juNR6PtmbBqqwsjJ2fxXQQWX NJ2OK5nKNkyo1D4QAzKHK1WmfO/J3qEkbVfSXHuZRCw8t/Maj/95AiaWRZBIkYo3 nnUW72c+qQI09SpImXov8BUSzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFsAVY9 MaXWDzQWGeS2X69ObFIcMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWimx6D7A2EFlC9gN6crmKE+iOOjV7d68st8LmRLsMgAsO0qApV2h TbxyWxbdQfXYFGWPOA2e+1GiRlT3f8UXMkEb/H6NAikZQJ++HyBmaONawN62cEMi XVsTYLHSAwHmjRS6s9+ODnzYpKjzLGzaYzH9Swv7x0593OzzwE/R/OYCBiNA94xA +hWJgRDe07PnHu8S8wmPdaf6j0X0FcWVk2/GSePnQf3P6AnQEJ1qUL1hqbvXTJbE aVFHL/N9fWW6zac3Q8MpWlpjZ39ZjE/oeSOT2ub6ZkY5QdJT1kJ+gXMpXipb2UGu nxCjblDAnyTk6FCU+93cH7n6iWBfveW5 -----END CERTIFICATE-----Generated at Thu Apr 10 17:33:23 2025 by rpki-client