$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: 1JuraUP+YrAJSj7322U22IYwQnbtTWrDKEiOMFWaAwg= Subject key identifier: 25:73:6E:41:5C:D4:1D:C7:1B:87:0F:8F:C0:B5:9F:00:EB:CF:D2:8E Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 0A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 0A43 Signing time: Fri 04 Apr 2025 19:51:11 +0000 Manifest this update: Fri 04 Apr 2025 19:51:10 +0000 Manifest next update: Fri 11 Apr 2025 19:51:10 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: oFRYHP0BQkW4b2swPe+lOt/ssoB2It/m4xCvQh2WYr8=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: yH51MrOnrCMRnU8jdZMxQRRlfTnvexHS8d47tx5HLls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2633 (0xa49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3 Validity Not Before: Apr 4 19:51:10 2025 GMT Not After : Apr 11 19:51:10 2025 GMT Subject: CN=67f0382f-352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:a7:a8:a2:c9:de:51:fc:b4:ff:5d:e5:95: 7b:89:fa:71:9e:c6:bf:59:10:ee:e7:a3:06:27:07: 14:25:36:35:5c:86:b1:ba:7c:05:0c:36:21:6e:61: 72:b7:34:77:28:e2:5f:85:69:57:19:0d:a9:a2:fc: 0c:de:05:b7:c1:94:37:50:74:95:8c:6a:9e:85:44: 9c:dd:6e:23:b3:03:45:59:fa:21:82:a8:bb:22:0e: f8:57:b1:38:79:4b:3f:25:9d:f6:75:0d:ae:2c:29: c6:ad:22:05:40:a5:97:52:c1:8c:69:72:33:ff:70: 84:23:1f:f7:3f:3e:48:52:3b:f7:25:0e:38:06:d9: b9:ad:76:0a:53:fc:4e:df:90:88:58:d2:2c:f5:d6: 92:9c:83:28:ce:15:11:b5:88:13:53:0e:86:51:bf: 2d:54:50:e6:00:9d:71:a7:4b:db:93:9d:ee:9c:ba: 39:f6:78:fd:3d:48:4e:df:2a:80:1b:f4:01:e7:ee: 66:17:22:ac:b8:11:59:73:5a:eb:ba:dd:86:95:39: be:e2:32:7b:a4:2a:a1:3b:58:81:88:a0:17:1e:0e: 8e:bf:00:d4:c5:56:a4:2a:b0:65:dc:7e:f4:fa:e1: c8:53:f9:41:e9:ea:a5:87:c5:c8:2a:da:3e:a9:ea: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:6E:41:5C:D4:1D:C7:1B:87:0F:8F:C0:B5:9F:00:EB:CF:D2:8E X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f1:7b:5d:9a:2d:2b:cb:7f:fc:f8:5a:af:f5:08:58:6c:b1: b5:16:70:78:6f:a3:a3:3d:77:57:c1:1e:29:37:72:37:07:86: 4f:73:3b:98:20:b6:74:e2:c4:52:69:ed:62:7d:7f:e3:ec:1c: bd:b5:c5:f5:3d:dd:62:55:a0:10:d2:f6:75:5f:82:ef:44:d9: 2e:c9:9f:38:99:76:b4:17:ad:77:66:2d:47:03:67:6d:c6:72: 2b:26:fd:3f:0a:99:91:1a:bc:48:45:67:78:17:d4:fb:90:8e: 31:f9:88:65:77:81:b8:ab:10:38:16:6d:6b:92:ed:7c:5d:f3: 71:27:f5:6a:fc:8c:8b:a9:1a:6e:08:71:6e:f3:4c:50:ee:70: 49:43:eb:bd:64:6a:bd:1e:f0:27:51:0d:3c:fb:8d:87:ec:d1: 1e:b9:91:b1:1b:22:9e:bb:32:d5:e2:6a:31:c1:3d:2b:df:9d: fe:17:27:36:3b:31:0c:6f:eb:65:3e:68:f7:77:8f:d1:ed:21: e6:80:77:f0:b1:2d:1e:2e:68:fe:1f:b6:61:a6:f9:3d:33:27: e0:8d:d6:32:f6:8d:8b:85:c7:73:75:98:d1:19:2e:c7:36:e9: 8e:59:4f:7c:4f:f1:82:e1:ee:f5:af:20:40:e8:70:75:f8:60: 10:95:01:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjUwNDA0MTk1MTEwWhcNMjUwNDExMTk1MTEwWjAYMRYwFAYD VQQDEw02N2YwMzgyZi0zNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE2nqKLJ3lH8tP9d5ZV7ifpxnsa/WRDu56MGJwcUJTY1XIaxunwFDDYhbmFy tzR3KOJfhWlXGQ2povwM3gW3wZQ3UHSVjGqehUSc3W4jswNFWfohgqi7Ig74V7E4 eUs/JZ32dQ2uLCnGrSIFQKWXUsGMaXIz/3CEIx/3Pz5IUjv3JQ44Btm5rXYKU/xO 35CIWNIs9daSnIMozhURtYgTUw6GUb8tVFDmAJ1xp0vbk53unLo59nj9PUhO3yqA G/QB5+5mFyKsuBFZc1rrut2GlTm+4jJ7pCqhO1iBiKAXHg6OvwDUxVakKrBl3H70 +uHIU/lB6eqlh8XIKto+qeoBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVzbkFc 1B3HG4cPj8C1nwDrz9KOMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8Xtdmi0ry3/8+Fqv9QhYbLG1FnB4b6OjPXdXwR4pN3I3B4ZPczuY ILZ04sRSae1ifX/j7By9tcX1Pd1iVaAQ0vZ1X4LvRNkuyZ84mXa0F613Zi1HA2dt xnIrJv0/CpmRGrxIRWd4F9T7kI4x+Yhld4G4qxA4Fm1rku18XfNxJ/Vq/IyLqRpu CHFu80xQ7nBJQ+u9ZGq9HvAnUQ08+42H7NEeuZGxGyKeuzLV4moxwT0r353+Fyc2 OzEMb+tlPmj3d4/R7SHmgHfwsS0eLmj+H7Zhpvk9MyfgjdYy9o2LhcdzdZjRGS7H NumOWU98T/GC4e71ryBA6HB1+GAQlQGl -----END CERTIFICATE-----Generated at Sun Apr 6 12:06:15 2025 by rpki-client