$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft File: vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json) Hash identifier: kq+VyBcOA2PUhcjR5UAPz2DUbmfFtRO1csu7s+HzXwI= Subject key identifier: 35:74:E9:12:48:FF:D3:44:E3:14:77:B3:65:C7:DE:4D:DB:13:B1:14 Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft Manifest number: 06DA Signing time: Fri 04 Apr 2025 22:11:20 +0000 Manifest this update: Fri 04 Apr 2025 22:11:20 +0000 Manifest next update: Fri 11 Apr 2025 22:11:20 +0000 Files and hashes: 1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: kiegWH5Nn+bTjz1rrmojNiXNSsNdPsqxZP01obSl0zs=) 2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 9QXEZ3KUMVxM1IFtAM5AqpjiZSShCfJ9XhH0+sUzVjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3 Validity Not Before: Apr 4 22:11:20 2025 GMT Not After : Apr 11 22:11:20 2025 GMT Subject: CN=67f05908-df96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:00:72:66:51:ac:31:58:9d:30:70:a0:b3:de: 5f:f8:05:20:84:5c:a6:8e:05:0d:ca:3b:50:76:74: 2b:59:4e:2a:39:53:ce:5c:7c:bb:3d:41:1a:7a:44: d7:e9:d6:7d:4c:26:12:ed:17:e7:d5:3f:f4:9a:d1: 00:bb:f0:31:c1:06:c2:1a:ec:4d:5b:42:ca:23:6a: d8:ab:75:ea:f5:31:5a:2a:94:e2:be:6a:33:c1:a0: 56:e5:58:64:56:9b:4f:ea:f9:8a:7c:75:49:e2:d8: 17:fb:b4:11:57:a5:15:d4:25:02:d5:c3:11:61:18: 6c:50:e8:bf:5c:6d:3d:f5:a3:08:7c:39:84:a1:20: 26:88:17:27:20:e1:95:b9:42:68:39:0e:f6:a1:bb: a3:28:ff:31:50:5d:2e:8e:46:a4:85:d5:0f:20:92: 63:97:bd:e0:a0:9e:94:80:9b:c5:8b:d4:eb:29:21: 14:5a:27:68:39:78:a5:43:80:e2:c8:76:52:fb:0b: a2:27:1d:4c:5b:4a:e4:84:4f:aa:25:d7:65:e7:07: 02:c5:6a:cc:6c:e2:61:be:f5:25:16:c1:e6:29:ee: 27:c4:30:c6:81:37:ed:64:ed:44:b8:bf:f0:d3:e7: 26:d2:df:19:a9:76:e8:f0:8e:12:e3:20:40:a3:2c: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:E9:12:48:FF:D3:44:E3:14:77:B3:65:C7:DE:4D:DB:13:B1:14 X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:05:f9:6d:44:d2:22:4d:20:80:f4:61:5b:25:02:56:c9:ff: 5c:be:1d:9c:bf:87:ff:65:b4:9c:2c:8e:7d:91:e4:21:d4:0e: a4:74:ed:cd:13:65:78:3c:32:c1:9f:b2:e3:b4:f9:2f:49:46: b4:62:1f:8d:ac:cc:36:41:03:2d:35:52:99:2d:7a:ea:77:93: fc:15:be:2c:6d:b0:0a:80:c7:6e:2e:4d:b8:26:30:a2:d0:8b: 3f:03:80:0a:e1:4e:73:97:d1:64:95:6c:f2:c8:e3:cd:41:d9: c9:b0:7c:e9:76:8d:39:74:1d:e8:3c:71:b4:cd:00:83:15:76: cd:0c:3d:36:a9:6a:b0:36:ab:06:5e:b9:42:fe:f6:2c:39:2a: 7f:f8:bf:95:38:d2:ff:49:ba:ef:08:68:20:0d:3b:78:06:c2: 77:96:33:14:ce:dc:d5:89:60:d2:74:5f:79:b1:56:03:77:48: 6d:9b:51:87:ac:59:00:cc:7d:df:c3:52:c9:57:34:d8:af:af: 4b:88:ea:1c:0d:df:02:60:3e:0c:76:93:3c:0f:c3:cc:2f:77: ec:04:1f:01:4a:8d:cc:f2:bc:23:24:aa:11:32:e2:ab:a1:92: 43:47:a7:30:e1:55:68:02:38:13:fd:ca:57:45:35:48:76:1d: 52:3e:4c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjUwNDA0MjIxMTIwWhcNMjUwNDExMjIxMTIwWjAYMRYwFAYD VQQDEw02N2YwNTkwOC1kZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QByZlGsMVidMHCgs95f+AUghFymjgUNyjtQdnQrWU4qOVPOXHy7PUEaekTX 6dZ9TCYS7Rfn1T/0mtEAu/AxwQbCGuxNW0LKI2rYq3Xq9TFaKpTivmozwaBW5Vhk VptP6vmKfHVJ4tgX+7QRV6UV1CUC1cMRYRhsUOi/XG099aMIfDmEoSAmiBcnIOGV uUJoOQ72obujKP8xUF0ujkakhdUPIJJjl73goJ6UgJvFi9TrKSEUWidoOXilQ4Di yHZS+wuiJx1MW0rkhE+qJddl5wcCxWrMbOJhvvUlFsHmKe4nxDDGgTftZO1EuL/w 0+cm0t8ZqXbo8I4S4yBAoywNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV06RJI /9NE4xR3s2XH3k3bE7EUMB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ a3lMMUtqN0xYelA5OE9GWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxBfltRNIiTSCA9GFbJQJWyf9cvh2cv4f/ZbScLI59keQh1A6kdO3N E2V4PDLBn7LjtPkvSUa0Yh+NrMw2QQMtNVKZLXrqd5P8Fb4sbbAKgMduLk24JjCi 0Is/A4AK4U5zl9FklWzyyOPNQdnJsHzpdo05dB3oPHG0zQCDFXbNDD02qWqwNqsG XrlC/vYsOSp/+L+VONL/SbrvCGggDTt4BsJ3ljMUztzViWDSdF95sVYDd0htm1GH rFkAzH3fw1LJVzTYr69LiOocDd8CYD4MdpM8D8PML3fsBB8BSo3M8rwjJKoRMuKr oZJDR6cw4VVoAjgT/cpXRTVIdh1SPkyK -----END CERTIFICATE-----Generated at Sat Apr 5 13:44:55 2025 by rpki-client