$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: E9o+5EevVxCWhNkdwtPN3FOkuiTA+jbWrvvjwxrHKP4= Subject key identifier: 08:AB:C8:ED:7B:5A:4A:BB:79:42:52:89:DC:F7:0A:26:67:93:B7:44 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C0A Signing time: Wed 02 Apr 2025 18:38:56 +0000 Manifest this update: Wed 02 Apr 2025 18:38:55 +0000 Manifest next update: Wed 09 Apr 2025 18:38:55 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: KBInCHB+T7KaMyFvoin581IQ/ha0zEtUfJLmvchoZ2g=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41 Validity Not Before: Apr 2 18:38:55 2025 GMT Not After : Apr 9 18:38:55 2025 GMT Subject: CN=67ed8440-2e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:0e:59:a2:14:46:ba:cb:6f:63:1c:9c:30: fb:05:6b:7c:ab:5b:e3:aa:58:47:d4:fb:90:b1:c5: 0a:3a:50:a4:c3:3b:52:07:fe:74:1e:b3:e5:ab:c6: 91:a1:cf:c3:a7:5e:7b:39:22:a9:3f:1d:9f:f1:4c: d2:71:f2:f4:62:ab:2f:46:79:b1:37:1f:c1:89:f8: e6:8e:68:50:d8:e2:2d:bd:d2:d5:fa:a4:eb:0a:0b: 00:7c:4b:02:d4:a8:52:b8:46:f8:86:41:8e:1e:13: 00:e4:46:ce:18:81:36:0d:90:5b:c1:b0:55:db:28: b0:8f:7c:73:67:26:65:db:2f:2d:c5:2d:98:27:a8: f9:3a:b2:a6:ea:42:f7:24:f8:ce:81:22:39:17:d2: 68:a1:fa:30:13:11:2f:a7:ae:94:eb:fd:3a:46:b9: e2:8f:c4:19:04:02:0f:83:49:31:e8:e2:a5:a6:21: fa:2e:30:37:86:c0:21:1e:15:ab:70:b8:9f:8c:54: fb:4c:b1:f5:f5:f8:55:e3:66:62:dd:29:0e:0d:bb: 5d:0e:43:cb:29:85:c2:50:b0:6d:35:b8:9c:b6:38: 4f:16:cf:78:24:7a:2e:4d:4f:d7:80:cb:7f:73:df: b1:cd:e8:5a:bd:87:7f:60:18:94:28:73:d7:1c:d5: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:C8:ED:7B:5A:4A:BB:79:42:52:89:DC:F7:0A:26:67:93:B7:44 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2d:4a:55:a7:3e:8a:31:ec:80:9e:8f:11:a6:32:d1:5e:d9: 24:b2:c3:d0:29:f1:7b:4b:b8:c0:41:31:29:54:d2:43:5d:9e: ac:3c:42:fb:31:fd:1d:11:6c:d0:0b:64:64:a5:83:4b:72:0d: 23:df:d8:b7:9e:27:bd:19:6b:16:6a:17:57:f5:69:b8:13:b8: 35:a2:a5:1a:c6:bb:4c:b9:2f:74:d6:d7:66:e5:d9:3a:9d:9d: 58:32:bb:5b:f3:15:09:76:90:df:fc:9d:75:84:2e:38:b2:33: 23:95:d3:73:72:68:8e:cd:01:af:cb:68:62:ec:a7:ad:66:68: 9e:d1:c2:3d:74:9d:00:6d:9d:b0:02:c9:63:9f:09:66:3b:65: a1:e2:15:29:2d:97:c7:37:a1:01:87:04:fb:ec:76:99:de:82: 02:00:c9:0f:3c:1a:fa:09:f1:60:a5:28:e8:72:ba:65:12:05: e3:98:2d:41:72:0d:22:6c:33:a1:d5:5e:52:ce:23:d1:92:8a: 28:0b:92:7b:b3:cb:42:2a:78:bf:c1:8c:84:b3:a6:0e:a3:c4: 61:ab:69:db:69:df:a0:0f:d0:fc:c5:d5:43:8a:14:9b:d0:0d: 52:90:78:5d:c6:ca:36:f3:1c:61:28:13:5d:ad:e6:f3:6e:aa: 27:63:fc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUwNDAyMTgzODU1WhcNMjUwNDA5MTgzODU1WjAYMRYwFAYD VQQDEw02N2VkODQ0MC0yZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqAOWaIURrrLb2McnDD7BWt8q1vjqlhH1PuQscUKOlCkwztSB/50HrPlq8aR oc/Dp157OSKpPx2f8UzScfL0YqsvRnmxNx/BifjmjmhQ2OItvdLV+qTrCgsAfEsC 1KhSuEb4hkGOHhMA5EbOGIE2DZBbwbBV2yiwj3xzZyZl2y8txS2YJ6j5OrKm6kL3 JPjOgSI5F9JoofowExEvp66U6/06Rrnij8QZBAIPg0kx6OKlpiH6LjA3hsAhHhWr cLifjFT7TLH19fhV42Zi3SkODbtdDkPLKYXCULBtNbictjhPFs94JHouTU/XgMt/ c9+xzehavYd/YBiUKHPXHNXaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiryO17 Wkq7eUJSidz3CiZnk7dEMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBLUpVpz6KMeyAno8RpjLRXtkkssPQKfF7S7jAQTEpVNJDXZ6sPEL7 Mf0dEWzQC2RkpYNLcg0j39i3nie9GWsWahdX9Wm4E7g1oqUaxrtMuS901tdm5dk6 nZ1YMrtb8xUJdpDf/J11hC44sjMjldNzcmiOzQGvy2hi7KetZmie0cI9dJ0AbZ2w AsljnwlmO2Wh4hUpLZfHN6EBhwT77HaZ3oICAMkPPBr6CfFgpSjocrplEgXjmC1B cg0ibDOh1V5SziPRkoooC5J7s8tCKni/wYyEs6YOo8Rhq2nbad+gD9D8xdVDihSb 0A1SkHhdxso28xxhKBNdrebzbqonY/xj -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:56 2025 by rpki-client