$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: navlHEA1TtNWvJUybejAw33i+oGqb4mq92mYemVNaZY= Subject key identifier: 2B:E3:BB:EB:00:B0:0C:FA:78:D7:76:48:90:86:23:1E:87:5B:33:6F Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 0136 Signing time: Sat 29 Mar 2025 03:57:07 +0000 Manifest this update: Sat 29 Mar 2025 03:57:06 +0000 Manifest next update: Sat 05 Apr 2025 03:57:06 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: Nz+Y/tbxPmJ7N+Fj51SNnjh8zzgkbnJsp5txOtNdMFk=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9 Validity Not Before: Mar 29 03:57:06 2025 GMT Not After : Apr 5 03:57:06 2025 GMT Subject: CN=67e76f93-cf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:38:d2:d8:0f:aa:52:e5:2c:f7:1c:88:d2: 94:46:be:a0:b8:10:86:02:da:36:7a:e9:10:94:08: bb:71:1f:85:74:22:5b:00:59:fe:92:32:20:c0:55: 7e:88:82:ce:52:8e:5a:72:1f:6d:bc:2c:69:e2:f9: 19:44:76:dc:b0:c9:6f:d7:8b:74:f1:60:62:32:5f: b5:15:90:5d:67:2e:34:91:2e:9f:8e:53:ab:20:36: 3e:36:2f:ab:de:e7:88:da:9e:5b:39:b6:1d:2a:cc: fb:86:5b:cf:c5:89:3f:f4:79:70:06:4d:27:56:30: 8b:4e:63:43:46:9a:d8:c1:22:6e:b1:5b:a2:a3:82: 71:aa:05:8e:1e:15:6c:39:e9:0d:e8:2d:09:87:a1: 4d:f6:4e:a4:94:2b:cb:c3:ad:03:3d:b7:b5:7a:47: 36:48:b3:fc:b8:88:b7:a9:3c:c3:f5:3f:f3:bf:f5: 2d:15:27:4a:fd:1a:41:8f:de:d9:70:70:81:2a:f7: b9:08:13:6f:9e:c0:e2:76:da:36:2f:24:55:c6:a3: 04:b1:47:dd:3e:f8:9c:df:17:3e:48:0d:46:ed:2f: b5:05:97:6c:3a:dc:2b:80:e2:a6:b4:cf:57:38:b8: 0e:e0:b9:3c:be:15:f3:5a:4e:d4:cc:5b:1b:62:49: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:BB:EB:00:B0:0C:FA:78:D7:76:48:90:86:23:1E:87:5B:33:6F X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3e:d5:20:50:f7:4b:15:0d:18:61:96:61:03:32:d5:b1:51: 73:8e:91:e3:1e:5b:9e:fe:51:a1:81:37:60:e7:bf:ee:30:89: 65:8d:8c:48:a9:76:b0:64:f8:10:e1:11:2b:f3:f0:08:49:00: a2:6b:cf:f3:67:77:16:5c:01:84:1b:41:1e:89:5d:58:58:30: 60:23:64:25:71:dd:bf:b9:6a:85:8b:8b:12:33:f0:75:c6:27: a8:dd:ac:e6:9a:ea:4b:3c:4a:6a:5b:18:3c:40:d9:da:e8:e6: 2b:d4:5f:c2:72:10:46:bd:65:ea:39:22:a3:7d:b1:58:3a:07: d9:65:e4:87:bb:da:79:64:bb:02:c8:f1:9f:77:70:28:c2:22: 44:32:02:95:70:b5:a0:a9:f7:1b:a9:b3:ab:42:6f:aa:35:14: 53:14:49:43:51:37:34:8f:3b:6d:24:78:90:85:e9:75:be:ab: e4:a3:c6:56:46:40:b4:7e:b0:c0:70:7a:ed:b5:70:24:0b:3a: 04:ab:b1:9e:ac:76:cb:f3:81:c5:91:42:6b:58:0d:87:a9:9b: 49:1e:cf:4c:58:f5:7b:c3:6c:5e:28:65:40:38:c2:36:f6:2d: 70:ba:19:94:f6:4a:7c:ca:84:d0:40:68:89:79:e3:bb:07:d5: cf:97:71:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwMzI5MDM1NzA2WhcNMjUwNDA1MDM1NzA2WjAYMRYwFAYD VQQDEw02N2U3NmY5My1jZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+Q40tgPqlLlLPcciNKURr6guBCGAto2eukQlAi7cR+FdCJbAFn+kjIgwFV+ iILOUo5ach9tvCxp4vkZRHbcsMlv14t08WBiMl+1FZBdZy40kS6fjlOrIDY+Ni+r 3ueI2p5bObYdKsz7hlvPxYk/9HlwBk0nVjCLTmNDRprYwSJusVuio4JxqgWOHhVs OekN6C0Jh6FN9k6klCvLw60DPbe1ekc2SLP8uIi3qTzD9T/zv/UtFSdK/RpBj97Z cHCBKve5CBNvnsDidto2LyRVxqMEsUfdPvic3xc+SA1G7S+1BZdsOtwrgOKmtM9X OLgO4Lk8vhXzWk7UzFsbYklgPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvju+sA sAz6eNd2SJCGIx6HWzNvMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnPtUgUPdLFQ0YYZZhAzLVsVFzjpHjHlue/lGhgTdg57/uMIlljYxI qXawZPgQ4REr8/AISQCia8/zZ3cWXAGEG0EeiV1YWDBgI2Qlcd2/uWqFi4sSM/B1 xieo3azmmupLPEpqWxg8QNna6OYr1F/CchBGvWXqOSKjfbFYOgfZZeSHu9p5ZLsC yPGfd3AowiJEMgKVcLWgqfcbqbOrQm+qNRRTFElDUTc0jzttJHiQhel1vqvko8ZW RkC0frDAcHrttXAkCzoEq7GerHbL84HFkUJrWA2HqZtJHs9MWPV7w2xeKGVAOMI2 9i1wuhmU9kp8yoTQQGiJeeO7B9XPl3Fz -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:17 2025 by rpki-client