$ rpki-client -vvf rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft File: VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft (raw, json) Hash identifier: MLsBHM1UDHOac3jBS3dlyHTsNBuPYzzp6TENfLthDKY= Subject key identifier: 7B:1A:5E:A3:41:18:D7:7E:4E:AD:E6:6D:CD:D5:E1:22:1F:54:4A:FE Authority key identifier: 54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 Certificate issuer: /CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft Manifest number: 78 Signing time: Mon 21 Apr 2025 05:35:14 +0000 Manifest this update: Mon 21 Apr 2025 05:35:14 +0000 Manifest next update: Mon 28 Apr 2025 05:35:14 +0000 Files and hashes: 1: VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl (hash: XyC7f1QgLJIvP0KOPi1dYuGpjvnmeDXD5ehd3xxvxmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F653, serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Validity Not Before: Apr 21 05:35:14 2025 GMT Not After : Apr 28 05:35:14 2025 GMT Subject: CN=6805d912-70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:b9:0b:4c:a2:ee:2c:f4:6b:e8:c3:5d:c4: 80:00:a4:f5:60:93:91:49:54:e6:03:3f:42:f3:67: e8:65:92:4e:59:74:2f:d8:8d:f0:44:5a:93:4b:39: 23:3e:56:6e:38:f4:95:00:6d:69:78:fb:13:33:86: 6d:b0:13:70:24:f1:c2:c8:9e:71:ac:4b:40:6c:4c: 64:c3:2b:be:22:76:81:7d:2f:76:3f:eb:ff:7b:ef: 65:9e:a6:1f:45:86:34:c0:76:7f:92:61:46:a6:7d: b0:f1:b2:b5:24:12:e4:87:77:71:d0:48:0a:cd:0b: df:a5:23:04:91:eb:c5:fb:a1:ae:4a:58:a5:9d:f1: ca:f2:48:e9:d9:c7:8e:ca:7f:88:1f:df:7c:dd:f0: 2b:df:12:0e:41:a1:71:15:8c:78:b6:b1:b4:e8:0a: ec:6e:dd:b2:f3:24:1b:e4:a2:b5:1f:93:e2:c1:ea: 18:0d:cc:fa:bd:90:54:d7:26:88:b8:8f:60:6a:2e: c6:9e:67:d2:00:fc:f7:d1:04:f2:c6:c6:2a:d3:b7: 0b:30:32:87:0c:11:21:3d:6c:58:b1:23:78:14:b4: 16:22:95:15:30:12:e2:24:52:f0:2c:39:4a:76:49: 80:a4:29:0c:df:fd:30:4e:a6:2c:1a:15:19:0a:8d: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:5E:A3:41:18:D7:7E:4E:AD:E6:6D:CD:D5:E1:22:1F:54:4A:FE X509v3 Authority Key Identifier: keyid:54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:03:aa:4f:5a:07:0c:3c:c1:10:db:87:6a:26:9b:d5:d1:d4: 15:f4:77:4b:28:c2:f2:7b:05:2a:0b:bc:99:0c:51:65:26:65: db:02:f5:34:40:f0:90:f7:42:56:b2:d3:73:c2:f0:81:c8:39: e5:d5:cd:15:44:3c:4c:21:4c:7c:a6:31:9d:c4:af:87:d5:cd: c6:24:4b:b9:b4:14:51:b9:fa:d8:c7:6b:ff:e1:c3:f9:dc:68: dc:c2:7a:94:c3:59:5a:6c:33:86:f2:3b:53:7d:78:d9:fa:f9: 8e:bf:9e:a2:3e:ea:d0:bf:2e:78:ed:bf:d2:3b:fb:1b:e4:d9: ce:6c:d6:7b:ff:ed:c1:2e:dd:c5:86:af:3c:93:29:b6:7e:36: 37:3b:e4:e6:12:a4:d1:28:1d:0b:b5:d6:39:3d:df:12:7d:28: 0c:fd:6e:f2:63:ff:28:b8:78:d6:88:6c:f9:fb:7e:92:84:a0: a8:db:83:cb:32:dd:1b:16:d6:cf:52:95:0c:51:8f:0d:30:6c: d2:df:1f:76:36:ab:11:aa:83:3f:3d:78:db:12:aa:9c:b6:be: 7d:eb:b9:ef:49:c2:6c:05:19:f6:d8:92:3b:22:81:2b:8b:48: dd:44:18:09:c3:b2:22:a2:62:27:1a:6a:10:cd:13:da:24:a9: f1:ca:1b:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjY1MzExMC8GA1UEBRMoNTQ5MDkzRDJDMTYxNzQ5RThDNkYwRTg4NTYyNzU0MTA4 OUE1NERDMzAeFw0yNTA0MjEwNTM1MTRaFw0yNTA0MjgwNTM1MTRaMBgxFjAUBgNV BAMTDTY4MDVkOTEyLTcwYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogLkLTKLuLPRr6MNdxIAApPVgk5FJVOYDP0LzZ+hlkk5ZdC/YjfBEWpNLOSM+ Vm449JUAbWl4+xMzhm2wE3Ak8cLInnGsS0BsTGTDK74idoF9L3Y/6/9772Weph9F hjTAdn+SYUamfbDxsrUkEuSHd3HQSArNC9+lIwSR68X7oa5KWKWd8crySOnZx47K f4gf33zd8CvfEg5BoXEVjHi2sbToCuxu3bLzJBvkorUfk+LB6hgNzPq9kFTXJoi4 j2BqLsaeZ9IA/PfRBPLGxirTtwswMocMESE9bFixI3gUtBYilRUwEuIkUvAsOUp2 SYCkKQzf/TBOpiwaFRkKjaSpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUexpeo0EY 135OreZtzdXhIh9USv4wHwYDVR0jBBgwFoAUVJCT0sFhdJ6Mbw6IVidUEImlTcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNjUzLzBEOTQ0Qjg0NkE2 MDExRUY4MzFEMTg3OEM0RjlBRTAyL1ZKQ1Qwc0ZoZEo2TWJ3NklWaWRVRUltbFRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpDVDBzRmhkSjZNYnc2SVZpZFVFSW1sVGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NjUzLzBEOTQ0Qjg0NkE2MDExRUY4MzFEMTg3OEM0RjlBRTAyL1ZKQ1Qwc0ZoZEo2 TWJ3NklWaWRVRUltbFRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGoDqk9aBww8wRDbh2omm9XR1BX0d0sowvJ7BSoLvJkMUWUmZdsC9TRA 8JD3Qlay03PC8IHIOeXVzRVEPEwhTHymMZ3Er4fVzcYkS7m0FFG5+tjHa//hw/nc aNzCepTDWVpsM4byO1N9eNn6+Y6/nqI+6tC/Lnjtv9I7+xvk2c5s1nv/7cEu3cWG rzyTKbZ+Njc75OYSpNEoHQu11jk93xJ9KAz9bvJj/yi4eNaIbPn7fpKEoKjbg8sy 3RsW1s9SlQxRjw0wbNLfH3Y2qxGqgz89eNsSqpy2vn3rue9JwmwFGfbYkjsigSuL SN1EGAnDsiKiYicaahDNE9okqfHKG3Y= -----END CERTIFICATE-----Generated at Mon Apr 21 17:04:52 2025 by rpki-client