$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: 5EwaUz3wFwlgc/Q7RttS67M1TPgwVgOsHwDd2udyKGM= Subject key identifier: 34:85:7C:96:31:0F:74:52:40:E6:18:B1:7A:A7:27:6D:34:66:ED:55 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: 73 Signing time: Sat 05 Apr 2025 06:05:36 +0000 Manifest this update: Sat 05 Apr 2025 06:05:35 +0000 Manifest next update: Sat 12 Apr 2025 06:05:35 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: BmMlB1T0szZ6J/bRlPN9rZvx5NHDfxsnOMS5DVV2bX0=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD Validity Not Before: Apr 5 06:05:35 2025 GMT Not After : Apr 12 06:05:35 2025 GMT Subject: CN=67f0c82f-fe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:a5:03:b1:a9:5f:93:35:d0:6a:f9:d1:08: 8f:c0:50:5a:fd:23:f8:bb:c4:ab:94:7d:6c:a6:d8: 7f:ef:3f:3f:1b:db:31:2d:d1:06:ad:ab:09:4a:1b: f7:f5:8a:b4:9d:f1:07:cb:9c:be:72:f9:05:5a:c5: 81:4b:c1:72:49:75:ea:01:46:fa:47:94:54:d3:e9: cf:67:77:6b:c0:e7:0b:b9:c6:79:dd:27:f2:19:f4: d7:fd:67:66:f0:1a:c3:ec:1d:6d:df:9d:af:0b:8e: 21:f3:03:0f:7c:02:8d:64:19:d1:f3:80:4e:0b:19: 67:46:9e:db:cb:5a:06:46:04:9f:9f:ab:42:0b:21: a2:67:b4:4c:68:e5:43:1b:87:ae:5f:87:a5:71:18: 51:30:63:b6:09:53:b6:26:8e:ec:13:0e:db:dc:8b: df:5a:2f:79:71:e6:68:75:03:da:e5:25:6f:3c:8f: 47:9a:3e:e2:00:05:e9:1d:0c:7f:59:5d:ac:e4:a3: 12:37:4c:a4:a6:1e:fd:37:16:42:19:ca:e1:c6:54: cb:24:30:f6:b1:17:51:74:eb:ac:98:c5:3c:90:76: 51:68:2b:7f:f0:7b:83:6a:fb:6e:77:e6:00:1b:86: 98:80:c9:8e:b2:44:f7:a6:f8:35:29:14:29:38:32: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:7C:96:31:0F:74:52:40:E6:18:B1:7A:A7:27:6D:34:66:ED:55 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:04:b5:d7:36:03:75:e3:d9:b2:93:69:c0:07:61:35:7f: f5:7c:8b:64:3e:02:87:3a:89:b3:c2:6f:3e:93:ee:d0:a6:a0: 85:58:d9:2c:bd:a5:b7:a8:03:bc:b3:44:7c:3a:0a:ed:af:03: 3a:c5:28:cd:2c:7b:45:79:87:98:95:58:b6:72:de:61:d5:bf: c3:46:40:6c:3d:d2:05:04:52:10:b1:f5:dc:e4:63:cd:a0:10: 60:95:69:13:f4:35:8d:de:a3:0d:f8:d7:18:8a:cb:dc:1f:63: 25:59:c4:6d:13:ef:07:68:75:62:f3:a4:22:e5:4a:71:9b:bf: 00:5f:37:39:a3:74:1f:75:13:8e:e5:e5:18:1d:27:83:0d:36: 42:dc:cb:69:06:4b:c1:19:7e:d0:b5:6d:d4:e6:dc:59:24:6a: 75:e7:54:57:22:84:81:34:f1:e0:5a:db:14:7f:85:9a:9b:f8: ec:19:59:25:86:42:7a:2d:9f:26:c3:1b:48:f7:14:6a:fd:4b: 7e:a3:68:80:30:93:ee:0a:fc:2e:c5:86:e2:1a:32:15:c2:ad: 91:bb:3c:ae:c5:06:55:82:34:6b:01:79:5b:6d:d5:26:e0:d6: 1d:aa:56:a5:67:83:f7:09:dd:1e:e9:39:cc:db:14:8d:55:1f: b5:34:2d:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTBBRDExMC8GA1UEBRMoNTUwNUExQTI4NzY2REIzMTgyMkM0NjE1ODZFNjhFRERG MkE3OTNGQTAeFw0yNTA0MDUwNjA1MzVaFw0yNTA0MTIwNjA1MzVaMBgxFjAUBgNV BAMTDTY3ZjBjODJmLWZlNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdP6UDsalfkzXQavnRCI/AUFr9I/i7xKuUfWym2H/vPz8b2zEt0QatqwlKG/f1 irSd8QfLnL5y+QVaxYFLwXJJdeoBRvpHlFTT6c9nd2vA5wu5xnndJ/IZ9Nf9Z2bw GsPsHW3fna8LjiHzAw98Ao1kGdHzgE4LGWdGntvLWgZGBJ+fq0ILIaJntExo5UMb h65fh6VxGFEwY7YJU7YmjuwTDtvci99aL3lx5mh1A9rlJW88j0eaPuIABekdDH9Z XazkoxI3TKSmHv03FkIZyuHGVMskMPaxF1F066yYxTyQdlFoK3/we4Nq+2535gAb hpiAyY6yRPem+DUpFCk4Mlw/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNIV8ljEP dFJA5hixeqcnbTRm7VUwHwYDVR0jBBgwFoAUVQWhoodm2zGCLEYVhuaO3fKnk/ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MEFELzZBMEFDODAyNjQz NDExRUY4NDJGQzYyMEM0RjlBRTAyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtf by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlFXaG9vZG0yekdDTEVZVmh1YU8zZktua19vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MEFELzZBMEFDODAyNjQzNDExRUY4NDJGQzYyMEM0RjlBRTAyL1ZRV2hvb2RtMnpH Q0xFWVZodWFPM2ZLbmtfby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQABLXXNgN149myk2nAB2E1f/V8i2Q+Aoc6ibPCbz6T7tCmoIVY2Sy9 pbeoA7yzRHw6Cu2vAzrFKM0se0V5h5iVWLZy3mHVv8NGQGw90gUEUhCx9dzkY82g EGCVaRP0NY3eow341xiKy9wfYyVZxG0T7wdodWLzpCLlSnGbvwBfNzmjdB91E47l 5RgdJ4MNNkLcy2kGS8EZftC1bdTm3FkkanXnVFcihIE08eBa2xR/hZqb+OwZWSWG QnotnybDG0j3FGr9S36jaIAwk+4K/C7FhuIaMhXCrZG7PK7FBlWCNGsBeVtt1Sbg 1h2qVqVng/cJ3R7pOczbFI1VH7U0LRo= -----END CERTIFICATE-----Generated at Sun Apr 6 21:59:41 2025 by rpki-client