$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: AyBOhvSWAwFm1St+drWZONmU0YDfCstTnfPK3Cux4zs= Subject key identifier: 1C:53:1E:53:35:3B:C0:80:98:40:F6:1A:D4:3B:E3:BE:EE:E2:87:34 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 348F Signing time: Fri 04 Apr 2025 14:37:41 +0000 Manifest this update: Fri 04 Apr 2025 14:37:40 +0000 Manifest next update: Fri 11 Apr 2025 14:37:40 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: FltwVwSly5FrALERXdGZGHA4d/vbKKremKnXIl4MdPI=) 2: E0AFFE78218611EF8555476BC4F9AE02.roa (hash: cjt/jzLyIkh6PDpshMiImoc4eT6q581b7EMbqraXEP4=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F Validity Not Before: Apr 4 14:37:40 2025 GMT Not After : Apr 11 14:37:40 2025 GMT Subject: CN=67efeeb4-1f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:3d:e6:56:2a:d8:7f:fa:0c:af:ea:32:f7: c7:c1:19:db:4f:19:17:4f:0e:f3:bc:d0:bc:f7:2a: c0:d7:1e:55:57:24:9e:92:d0:29:92:ab:1c:e7:0b: a3:43:3e:34:23:bf:3b:ee:5d:27:27:76:96:1b:df: 3e:33:b5:cf:a0:99:cd:e5:9f:26:b6:ad:2e:93:55: db:f0:f6:84:da:f3:3c:85:15:fc:56:a6:bf:47:05: ce:08:8b:c8:76:40:89:9d:22:75:d5:d2:94:8e:f8: 6f:d7:92:5d:4c:fe:7b:87:e1:b9:f3:e0:83:3e:0f: d5:b5:a8:30:37:1b:e0:f9:12:d7:7b:a9:70:18:4d: 04:e6:82:dc:ac:55:43:f0:b5:b6:cb:53:46:c4:10: ee:40:58:02:45:69:e2:d0:88:59:1a:d5:e8:df:9f: a8:29:53:b5:c3:75:bf:ad:09:c4:0b:7a:3f:a6:7a: 3b:3d:3c:16:01:30:09:bc:aa:2e:6c:6e:41:0a:01: 9c:1f:a3:ba:17:41:ea:67:53:30:7c:5f:fb:9f:f1: 1e:a3:12:7b:ae:2f:75:43:7f:36:b8:22:2d:6d:ee: b9:af:89:68:f6:88:ad:19:98:1a:6a:17:c2:94:af: c4:97:b5:fa:f3:54:83:44:4d:4d:65:58:de:ee:d5: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:53:1E:53:35:3B:C0:80:98:40:F6:1A:D4:3B:E3:BE:EE:E2:87:34 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:54:fc:28:03:2e:b3:f4:c7:05:ac:ef:fa:dd:75:67:7f:2b: 76:74:55:63:98:6c:44:a3:fe:7f:0f:7e:c4:fb:67:77:6a:0f: e9:5d:ef:82:59:9a:f6:85:16:bb:a4:86:3e:a5:1d:ed:ee:8d: ec:0a:2c:a0:63:93:40:67:88:5e:9e:8e:59:f3:ac:61:8b:ca: bd:dd:bd:bb:1a:81:ca:6d:14:16:72:bb:08:c2:9c:ee:bb:f5: da:f7:8a:1c:3f:b9:a8:28:02:95:c5:aa:77:e2:df:5d:8e:f9: 8e:31:b1:d5:ab:f4:59:c3:71:c5:f3:a2:c6:81:2e:fe:e6:50: 5a:04:02:b2:25:f2:f3:a5:d1:63:59:7c:fd:c3:72:df:78:c5: 5b:c6:b1:23:e7:d0:4d:d1:e8:4d:f4:65:9d:5d:ea:37:c1:eb: 64:cf:d6:1b:70:ba:66:16:d2:0c:f5:07:09:c8:5e:95:47:c2: 96:20:5e:aa:ae:93:64:8a:df:91:13:e3:55:f5:5a:c8:0f:6b: eb:23:02:13:26:cb:48:49:52:f3:37:cf:4c:c4:f4:53:51:48: f9:ab:18:c0:a0:cb:2c:d7:d5:73:1c:0f:d9:fe:bc:73:a7:50: 29:e8:33:fe:c2:b9:02:d1:d4:e3:1e:17:9c:c1:74:a6:fe:2b: 35:0e:3d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNDA0MTQzNzQwWhcNMjUwNDExMTQzNzQwWjAYMRYwFAYD VQQDEw02N2VmZWViNC0xZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOk95lYq2H/6DK/qMvfHwRnbTxkXTw7zvNC89yrA1x5VVySektApkqsc5wuj Qz40I7877l0nJ3aWG98+M7XPoJnN5Z8mtq0uk1Xb8PaE2vM8hRX8Vqa/RwXOCIvI dkCJnSJ11dKUjvhv15JdTP57h+G58+CDPg/VtagwNxvg+RLXe6lwGE0E5oLcrFVD 8LW2y1NGxBDuQFgCRWni0IhZGtXo35+oKVO1w3W/rQnEC3o/pno7PTwWATAJvKou bG5BCgGcH6O6F0HqZ1MwfF/7n/EeoxJ7ri91Q382uCItbe65r4lo9oitGZgaahfC lK/El7X681SDRE1NZVje7tXSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxTHlM1 O8CAmED2GtQ7477u4oc0MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtVPwoAy6z9McFrO/63XVnfyt2dFVjmGxEo/5/D37E+2d3ag/pXe+C WZr2hRa7pIY+pR3t7o3sCiygY5NAZ4heno5Z86xhi8q93b27GoHKbRQWcrsIwpzu u/Xa94ocP7moKAKVxap34t9djvmOMbHVq/RZw3HF86LGgS7+5lBaBAKyJfLzpdFj WXz9w3LfeMVbxrEj59BN0ehN9GWdXeo3wetkz9YbcLpmFtIM9QcJyF6VR8KWIF6q rpNkit+RE+NV9VrID2vrIwITJstISVLzN89MxPRTUUj5qxjAoMss19VzHA/Z/rxz p1Ap6DP+wrkC0dTjHhecwXSm/is1Dj2H -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:07 2025 by rpki-client