$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: rEhhw01nVDGRw6jX22/2BsV42+m4mavvODKRmr3LMS0= Subject key identifier: 89:40:9F:32:1A:14:86:6F:70:5F:E3:E3:84:91:57:58:7D:28:65:39 Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: E0 Signing time: Thu 03 Apr 2025 04:45:20 +0000 Manifest this update: Thu 03 Apr 2025 04:45:19 +0000 Manifest next update: Thu 10 Apr 2025 04:45:19 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: c9b+zZZMxlo6+zrnrcsxxvRvNTKwy4RoaaqgdTvo6GQ=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB Validity Not Before: Apr 3 04:45:19 2025 GMT Not After : Apr 10 04:45:19 2025 GMT Subject: CN=67ee125f-09b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:20:fb:09:bb:94:b9:f7:2a:e3:ee:69:df: 9f:43:01:36:79:d1:a1:e9:cf:a1:e5:d3:39:94:e0: 0d:08:cc:dd:2d:b0:9e:67:9c:55:a2:96:78:f0:ba: 3c:61:3b:75:4b:eb:5c:6d:3c:9f:47:a2:cc:66:24: 3c:85:d8:36:18:59:e8:37:ff:9b:cb:39:af:7c:5d: 52:9e:a6:78:6d:07:ae:d0:3c:cc:b6:2b:9b:2c:ca: 8d:1a:48:17:c5:29:df:7e:5b:9c:e1:d1:87:f1:bb: 36:8f:e4:83:95:ed:86:ec:db:a1:a2:4e:f2:86:6e: 32:a3:e2:d0:94:ce:55:3d:f8:8d:8f:56:8e:10:76: 5d:c9:ff:f6:13:c1:44:11:5e:51:11:51:3c:4e:3f: 0f:c1:23:3e:20:2a:95:5e:7b:45:72:a7:5b:5a:79: 80:74:7b:be:81:32:38:61:1c:8d:e6:0d:02:f8:73: 2a:62:b0:a5:85:38:3e:22:ba:16:01:4a:74:b1:e8: a1:ef:22:70:31:53:95:27:d5:17:31:3c:a2:31:65: be:6c:64:9c:02:db:82:21:76:d5:24:4f:b9:0f:e5: 38:c1:ee:0b:35:9b:4f:8b:17:ad:64:70:ed:b5:3e: e8:16:dd:09:ee:87:8e:39:30:64:28:d8:06:79:57: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:9F:32:1A:14:86:6F:70:5F:E3:E3:84:91:57:58:7D:28:65:39 X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:73:ce:73:b5:b6:94:2c:54:3a:00:3c:60:69:af:7d:d1:82: 7a:3a:ff:7c:ee:d0:17:9c:cf:66:0a:6d:a3:82:a3:b0:88:41: 21:6d:93:5b:10:ca:1c:af:50:3d:ec:50:59:08:d7:7f:a6:31: 85:17:26:9b:38:32:d8:6b:1a:fa:97:70:e0:14:a5:ef:df:02: 12:d6:20:27:7e:d2:46:d0:3f:70:ec:a6:52:0b:4e:c8:b0:f4: a9:72:ee:83:fc:dd:26:32:54:b5:99:35:74:b7:df:0a:1d:39: 46:41:40:67:9b:34:f9:b0:92:88:6a:31:e4:d8:4b:64:92:c1: d3:ca:82:e7:5e:3d:01:c1:49:6d:f0:97:9d:18:3b:2a:83:b2: ff:f5:19:96:74:b2:b9:bd:92:a0:92:c2:fe:57:2d:01:ad:47: f3:0e:03:f8:99:d0:62:bd:44:69:b8:da:dc:33:60:58:4a:0b: ce:15:af:1a:f2:5c:4a:ce:12:57:09:bb:ac:c2:ad:94:76:39: eb:b0:7f:e3:59:8e:83:92:bd:d8:ce:6c:1e:e4:54:d5:b7:55: bd:bf:79:18:af:36:76:45:b0:4c:eb:65:5f:39:47:7d:9e:4c: 6d:50:5b:75:4b:c0:17:95:0d:5e:af:91:90:9b:11:65:64:6e: 92:55:04:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2 MkUzN0E4Q0QwHhcNMjUwNDAzMDQ0NTE5WhcNMjUwNDEwMDQ0NTE5WjAYMRYwFAYD VQQDEw02N2VlMTI1Zi0wOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VMg+wm7lLn3KuPuad+fQwE2edGh6c+h5dM5lOANCMzdLbCeZ5xVopZ48Lo8 YTt1S+tcbTyfR6LMZiQ8hdg2GFnoN/+byzmvfF1SnqZ4bQeu0DzMtiubLMqNGkgX xSnffluc4dGH8bs2j+SDle2G7Nuhok7yhm4yo+LQlM5VPfiNj1aOEHZdyf/2E8FE EV5REVE8Tj8PwSM+ICqVXntFcqdbWnmAdHu+gTI4YRyN5g0C+HMqYrClhTg+IroW AUp0seih7yJwMVOVJ9UXMTyiMWW+bGScAtuCIXbVJE+5D+U4we4LNZtPixetZHDt tT7oFt0J7oeOOTBkKNgGeVfwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlAnzIa FIZvcF/j44SRV1h9KGU5MB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL WDZrdnhPdGRMdDVpNDNxTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGc85ztbaULFQ6ADxgaa990YJ6Ov987tAXnM9mCm2jgqOwiEEhbZNb EMocr1A97FBZCNd/pjGFFyabODLYaxr6l3DgFKXv3wIS1iAnftJG0D9w7KZSC07I sPSpcu6D/N0mMlS1mTV0t98KHTlGQUBnmzT5sJKIajHk2EtkksHTyoLnXj0BwUlt 8JedGDsqg7L/9RmWdLK5vZKgksL+Vy0BrUfzDgP4mdBivURpuNrcM2BYSgvOFa8a 8lxKzhJXCbuswq2UdjnrsH/jWY6Dkr3Yzmwe5FTVt1W9v3kYrzZ2RbBM62VfOUd9 nkxtUFt1S8AXlQ1er5GQmxFlZG6SVQS6 -----END CERTIFICATE-----Generated at Fri Apr 4 21:29:57 2025 by rpki-client