$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: oE8pU/b5mYez7Q1sBPHvrBv5i6+OgWhl0YpKJz1Zq0A= Subject key identifier: E2:50:65:BC:E6:CB:09:10:B9:1F:BB:F0:75:3E:BA:1F:9F:78:2E:EA Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: 13 Signing time: Thu 03 Apr 2025 07:19:44 +0000 Manifest this update: Thu 03 Apr 2025 07:19:43 +0000 Manifest next update: Thu 10 Apr 2025 07:19:43 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: Zq7ypkr9+VGDNo2eB66l7FdQxyDkpofqD4NqXtEHu6A=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: CFjfwtbnARFkiBTSkHxcw566lVz+R0FjE0lSqqgVvOk=) 3: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: Ar+onOWOPH7xuawAkKNR4USGgISAZHmjzcJHYy39Fms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026 Validity Not Before: Apr 3 07:19:43 2025 GMT Not After : Apr 10 07:19:43 2025 GMT Subject: CN=67ee368f-bf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:bf:c1:d0:41:41:0e:83:e8:bc:fa:a0:6d: 7c:5a:7d:67:db:e0:1b:c0:54:f8:66:b0:fb:2c:2d: a7:8e:d3:01:7b:1b:09:5b:d6:26:d1:58:21:f4:01: 29:fc:67:4a:d4:40:3e:38:5a:64:57:cb:2f:ee:76: 1d:3b:ed:74:bc:51:c2:75:b1:be:4f:da:89:ae:9f: 93:66:01:24:88:69:4e:a8:6d:fe:84:97:8d:eb:08: 32:89:69:40:b1:3e:4d:ac:c5:72:52:25:ee:20:cf: d9:c6:be:f1:d1:c2:6b:4a:94:ba:00:d8:db:af:bd: 48:69:9d:a1:30:f6:69:f5:e9:27:83:15:f8:9b:d9: bc:0d:3b:d6:8b:b6:60:b2:09:88:4d:ea:22:5c:c4: 53:4f:ff:f9:6e:0a:b7:10:9b:20:52:9d:b7:d2:c5: d9:f0:37:fd:6a:20:a3:db:24:38:51:cb:d1:e3:09: 27:d8:3b:7c:ec:59:4e:1b:5f:3a:f6:9d:e1:c1:00: 5f:29:bb:e1:ce:30:79:3c:18:17:fb:5e:92:f5:a2: 33:c6:2c:82:51:4d:86:b3:dd:ec:74:7f:8c:d3:f6: af:37:7e:4f:ae:21:ac:32:de:ec:18:a4:84:d6:71: b9:bf:d7:09:c1:99:a8:15:a7:15:ac:66:77:6f:e9: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:50:65:BC:E6:CB:09:10:B9:1F:BB:F0:75:3E:BA:1F:9F:78:2E:EA X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:37:f6:a1:cf:c6:ac:03:72:d6:98:f3:57:bd:f8:b9:b3: 89:43:ea:d4:de:d5:87:4e:a5:a1:b6:75:60:c4:1e:e4:cb:60: 1f:5f:b6:4c:eb:8c:0f:16:d8:49:d7:44:52:0b:0e:15:d4:fd: 4d:7e:bd:1c:d3:b7:28:10:a8:26:30:62:56:3b:c8:79:97:8b: 0c:10:fd:d5:e1:61:12:40:0d:c7:02:8f:c0:4a:16:c3:0e:8f: 8b:c2:2f:62:6e:e3:11:8c:ab:e9:eb:56:96:82:91:27:8f:33: 23:2d:a3:3c:c5:99:c2:6b:08:26:cc:73:db:61:11:29:99:27: e8:48:cd:0e:3f:94:7c:e3:8c:b0:83:a9:8a:d7:b8:b4:da:9f: b5:bf:a7:e1:aa:85:28:d1:69:a2:12:3c:60:e5:59:7b:54:d6: 76:f9:28:ea:57:1f:50:0b:38:aa:cc:d3:34:f0:6f:49:65:23: 11:df:76:83:0e:ec:88:0d:c8:76:a5:d6:d7:99:05:35:53:7a: 7c:da:4e:e0:f2:3c:b3:ef:93:3f:ee:9d:e1:6f:23:7e:e6:a0: 6a:4c:ba:9a:51:de:c7:8c:04:12:dd:45:07:1e:84:b7:c9:de: 12:ba:df:f0:72:bd:9b:3a:fe:12:fb:0e:3a:f7:14:af:c5:38: dd:84:b5:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjAyNjExMC8GA1UEBRMoQkQ3OUFDNzY0MEM5NTVDNDM1QzhDRjU1QzI5MUYxMjJC NzBFMkY5OTAeFw0yNTA0MDMwNzE5NDNaFw0yNTA0MTAwNzE5NDNaMBgxFjAUBgNV BAMTDTY3ZWUzNjhmLWJmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh/r/B0EFBDoPovPqgbXxafWfb4BvAVPhmsPssLaeO0wF7Gwlb1ibRWCH0ASn8 Z0rUQD44WmRXyy/udh077XS8UcJ1sb5P2omun5NmASSIaU6obf6El43rCDKJaUCx Pk2sxXJSJe4gz9nGvvHRwmtKlLoA2NuvvUhpnaEw9mn16SeDFfib2bwNO9aLtmCy CYhN6iJcxFNP//luCrcQmyBSnbfSxdnwN/1qIKPbJDhRy9HjCSfYO3zsWU4bXzr2 neHBAF8pu+HOMHk8GBf7XpL1ojPGLIJRTYaz3ex0f4zT9q83fk+uIawy3uwYpITW cbm/1wnBmagVpxWsZndv6TVrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4lBlvObL CRC5H7vwdT66H594LuowHwYDVR0jBBgwFoAUvXmsdkDJVcQ1yM9VwpHxIrcOL5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGMDI2LzNCQUFBQzQ0RkIy ODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhtc2RrREpWY1ExeU05VndwSHhJcmNPTDVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG MDI2LzNCQUFBQzQ0RkIyODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNR MXlNOVZ3cEh4SXJjT0w1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAAN/ahz8asA3LWmPNXvfi5s4lD6tTe1YdOpaG2dWDEHuTLYB9ftkzr jA8W2EnXRFILDhXU/U1+vRzTtygQqCYwYlY7yHmXiwwQ/dXhYRJADccCj8BKFsMO j4vCL2Ju4xGMq+nrVpaCkSePMyMtozzFmcJrCCbMc9thESmZJ+hIzQ4/lHzjjLCD qYrXuLTan7W/p+GqhSjRaaISPGDlWXtU1nb5KOpXH1ALOKrM0zTwb0llIxHfdoMO 7IgNyHal1teZBTVTenzaTuDyPLPvkz/uneFvI37moGpMuppR3seMBBLdRQcehLfJ 3hK63/ByvZs6/hL7Djr3FK/FON2EtYA= -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:50 2025 by rpki-client