$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: rDSCpT98sTizOrjH+t9398wMgABVtykJ9ySvGkn2xeM= Subject key identifier: 24:77:90:FA:29:50:07:0F:05:C9:98:3E:2C:63:5E:5F:9B:C9:CB:36 Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 01E0 Signing time: Wed 09 Apr 2025 01:50:25 +0000 Manifest this update: Wed 09 Apr 2025 01:50:24 +0000 Manifest next update: Wed 16 Apr 2025 01:50:24 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: ewUXV1qziqBjm4QLV9ynShaegfHQm3L92xrTqH+FRk0=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: jsd4RyOm/zJtlT9wpjOAZ4fMoLnz14skobHmP1uXHl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98 Validity Not Before: Apr 9 01:50:24 2025 GMT Not After : Apr 16 01:50:24 2025 GMT Subject: CN=67f5d260-452f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:76:93:23:e8:9c:46:dc:28:d3:f2:6f:74: cc:4f:80:88:57:e6:88:f0:a8:b4:13:76:6d:92:85: ab:d0:97:2a:a5:bf:7e:c7:d5:e6:63:d1:85:af:05: 4d:e6:f7:48:80:cf:01:5b:92:f1:6c:2b:1b:38:a0: 47:33:a0:fc:a5:46:06:54:75:19:bf:95:73:eb:e3: 3b:00:ff:1b:5e:d9:e2:bb:85:b9:b6:d0:f2:65:a7: 38:f4:0a:de:50:5e:3e:5e:64:ba:95:bb:8f:0d:cd: e8:37:0b:52:8c:e5:47:9f:ef:bf:a6:9e:cb:91:76: 13:dd:8c:24:d0:4e:35:1d:dc:09:5a:38:2c:2e:d1: 88:35:2d:a9:a7:b2:b4:dd:51:c7:10:ad:d7:fb:42: 95:b9:fa:2f:5a:dc:9a:e4:0d:b3:b1:ce:41:e4:d6: 3c:e2:f8:b6:1d:ce:76:48:de:66:cb:ba:54:16:4d: 98:55:66:74:01:dd:ec:16:88:b1:bd:23:1f:19:8c: 84:93:8e:d1:50:82:e8:e4:4b:a7:54:12:9c:c3:f4: 10:88:cc:fd:c1:2d:0b:b3:9f:7d:dc:08:97:9c:b7: 8c:a6:88:cb:00:93:93:66:2d:75:3b:d5:54:98:d1: bf:7d:42:02:ab:76:36:d9:f4:9d:bb:d1:12:c8:e0: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:90:FA:29:50:07:0F:05:C9:98:3E:2C:63:5E:5F:9B:C9:CB:36 X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:27:ef:9d:e4:c6:e1:51:9b:18:6a:ee:af:23:1c:24:63:0a: 2f:e3:dd:cb:17:97:68:47:9b:ae:08:3c:86:07:6f:17:b5:a8: e3:82:df:4a:76:ea:d0:8c:8d:51:66:75:33:50:ae:75:3e:b6: 76:86:73:c0:7b:8f:21:f5:01:6a:40:26:32:eb:48:4d:8a:24: 31:0a:88:38:e0:1c:25:eb:18:d4:6d:90:33:e2:58:d0:25:56: 75:0f:85:4a:6d:3a:1e:68:d9:e7:cf:3f:b5:07:26:6c:f2:08: df:a9:db:ec:12:d4:49:c6:94:dd:c9:1b:b5:55:1c:d4:bf:a2: c7:48:f6:96:89:76:dd:87:73:13:d1:de:ce:af:9b:dc:3c:fe: 42:dd:ea:25:30:11:ef:df:8b:33:af:14:5c:8f:77:2a:9e:73: 91:bb:54:d3:c3:d1:4d:fb:6c:ba:c9:46:ad:e9:1d:ad:4a:04: b8:f5:da:92:f2:62:ed:20:1c:6e:bb:49:e1:ec:7c:c1:e1:01: 15:3f:48:0e:1a:c4:1c:f3:45:d2:eb:57:57:7b:df:26:d2:dc: 0e:21:96:b3:3f:f2:5d:81:a5:ed:c1:f8:aa:d0:74:87:85:e0: 6e:b5:cc:0e:e6:f8:d5:ec:fc:b7:e1:6d:84:10:d0:98:06:8d: 30:a2:b2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwNDA5MDE1MDI0WhcNMjUwNDE2MDE1MDI0WjAYMRYwFAYD VQQDEw02N2Y1ZDI2MC00NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJB2kyPonEbcKNPyb3TMT4CIV+aI8Ki0E3ZtkoWr0Jcqpb9+x9XmY9GFrwVN 5vdIgM8BW5LxbCsbOKBHM6D8pUYGVHUZv5Vz6+M7AP8bXtniu4W5ttDyZac49Are UF4+XmS6lbuPDc3oNwtSjOVHn++/pp7LkXYT3Ywk0E41HdwJWjgsLtGINS2pp7K0 3VHHEK3X+0KVufovWtya5A2zsc5B5NY84vi2Hc52SN5my7pUFk2YVWZ0Ad3sFoix vSMfGYyEk47RUILo5EunVBKcw/QQiMz9wS0Ls5993AiXnLeMpojLAJOTZi11O9VU mNG/fUICq3Y22fSdu9ESyOBR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR3kPop UAcPBcmYPixjXl+bycs2MB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASJ++d5MbhUZsYau6vIxwkYwov493LF5doR5uuCDyGB28Xtajjgt9K durQjI1RZnUzUK51PrZ2hnPAe48h9QFqQCYy60hNiiQxCog44Bwl6xjUbZAz4ljQ JVZ1D4VKbToeaNnnzz+1ByZs8gjfqdvsEtRJxpTdyRu1VRzUv6LHSPaWiXbdh3MT 0d7Or5vcPP5C3eolMBHv34szrxRcj3cqnnORu1TTw9FN+2y6yUat6R2tSgS49dqS 8mLtIBxuu0nh7HzB4QEVP0gOGsQc80XS61dXe98m0twOIZazP/JdgaXtwfiq0HSH heButcwO5vjV7Py34W2EENCYBo0worJ2 -----END CERTIFICATE-----Generated at Thu Apr 10 20:25:03 2025 by rpki-client