$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: lrEtlyr3oOsfS63jP5dQklEV/JaOSO/3afCqUwMZX5w= Subject key identifier: 35:62:55:67:76:AD:07:78:B2:5C:F1:4B:00:09:32:B8:12:EA:7A:E7 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 66 Signing time: Sat 29 Mar 2025 06:18:51 +0000 Manifest this update: Sat 29 Mar 2025 06:18:51 +0000 Manifest next update: Sat 05 Apr 2025 06:18:50 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: k8UMOrJQr7xDqUcLkotFmgYaSeWryJ4F2Ps/uk4BvrU=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14 Validity Not Before: Mar 29 06:18:51 2025 GMT Not After : Apr 5 06:18:50 2025 GMT Subject: CN=67e790cb-c012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:62:52:aa:5b:4b:d2:b1:17:29:cb:03:b3: c5:a7:c5:b4:1f:10:bd:a7:10:8c:39:38:21:bb:34: d1:27:64:1a:fa:cc:69:77:fb:73:30:a2:1f:8f:a3: d7:02:af:4b:66:ce:d6:46:de:82:12:da:08:59:c5: de:e1:58:b2:03:ea:bb:a4:c2:55:95:68:95:f4:7a: 77:8f:fd:01:27:98:85:0b:7d:0a:22:74:22:88:71: ad:35:6a:d5:31:db:ea:38:97:9a:8b:b9:b8:52:3d: 09:70:3c:d4:2d:f3:ab:d7:b0:0b:a9:83:6d:9e:89: dd:80:5d:23:1f:dc:9a:9c:a8:1a:05:f6:24:3c:55: b9:d3:68:59:18:29:4d:52:9a:15:77:c8:27:be:55: 39:ff:6b:25:28:f5:c1:d4:ca:60:f9:c0:86:68:75: ad:50:5c:2b:25:ff:58:f6:c9:ec:38:29:12:d2:50: bf:7a:96:e7:2e:fb:a9:b5:d0:40:62:26:9a:5c:ed: 46:0c:54:b2:1b:bb:05:e0:18:8e:d5:78:a1:d1:6b: 8a:df:f0:7d:a5:ce:78:76:d1:26:8c:8f:d1:6f:7a: cc:e6:68:c4:c9:70:32:a4:62:f3:4c:06:ba:fc:53: 4c:d3:15:30:f7:99:d6:e5:51:45:46:d9:95:cd:7a: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:55:67:76:AD:07:78:B2:5C:F1:4B:00:09:32:B8:12:EA:7A:E7 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0d:8d:f9:d3:9a:ce:a6:26:c3:39:9e:f5:cf:1f:83:82:4b: cc:4e:c7:2a:b3:e2:97:1c:e6:9c:5b:60:91:1d:e5:b4:a1:d3: 71:29:37:e2:66:74:17:09:01:fe:e1:2c:4f:ae:9f:05:90:f9: 54:7d:23:d7:3e:df:e7:66:a0:a5:35:61:6c:75:d0:81:60:10: 93:7f:e0:f4:26:23:7f:8e:48:ad:d1:96:66:a7:4e:d0:85:cd: 06:24:12:5d:d4:c5:68:ca:8b:7f:f1:f8:6a:93:64:97:80:0d: de:d9:5f:0f:04:1c:d4:c8:1c:85:72:7b:d5:c2:5f:ce:9c:9f: d0:23:49:d0:c9:0d:0c:fb:a1:32:03:dd:d9:80:50:d2:70:59: 5d:1e:cb:c5:16:6b:3d:f2:e8:61:98:b6:61:4e:13:33:86:3c: c0:bb:cc:b6:a4:bb:3e:09:e2:8b:c9:0f:f0:44:1f:1b:8a:a4: e0:24:0a:99:b0:4c:cb:c4:87:e6:5f:39:97:b3:e3:3b:ac:34: e7:db:a1:b6:ed:f1:15:54:bc:47:f4:62:31:5b:e9:81:ac:33: 9c:ce:95:dd:97:ef:f3:b2:83:db:3c:67:25:e1:9c:a1:cd:ca: 85:a7:a3:9d:80:18:42:89:27:b4:7d:94:40:d9:f0:c7:92:1b: 11:df:0e:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0QxNDExMC8GA1UEBRMoQkM0MkMzQkM4NzVDMDY3NkIyOUZEN0FCQzlGODFCNEE5 MUZEOEE4OTAeFw0yNTAzMjkwNjE4NTFaFw0yNTA0MDUwNjE4NTBaMBgxFjAUBgNV BAMTDTY3ZTc5MGNiLWMwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAa2JSqltL0rEXKcsDs8WnxbQfEL2nEIw5OCG7NNEnZBr6zGl3+3Mwoh+Po9cC r0tmztZG3oIS2ghZxd7hWLID6rukwlWVaJX0eneP/QEnmIULfQoidCKIca01atUx 2+o4l5qLubhSPQlwPNQt86vXsAupg22eid2AXSMf3JqcqBoF9iQ8VbnTaFkYKU1S mhV3yCe+VTn/ayUo9cHUymD5wIZoda1QXCsl/1j2yew4KRLSUL96lucu+6m10EBi Jppc7UYMVLIbuwXgGI7VeKHRa4rf8H2lznh20SaMj9FveszmaMTJcDKkYvNMBrr8 U0zTFTD3mdblUUVG2ZXNerdxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNWJVZ3at B3iyXPFLAAkyuBLqeucwHwYDVR0jBBgwFoAUvELDvIdcBnayn9eryfgbSpH9iokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RDE0L0NEQjNCOUFBNzRB RjExRUY5MUE2NjE0NkM0RjlBRTAyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkVMRHZJZGNCbmF5bjllcnlmZ2JTcEg5aW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RDE0L0NEQjNCOUFBNzRBRjExRUY5MUE2NjE0NkM0RjlBRTAyL3ZFTER2SWRjQm5h eW45ZXJ5ZmdiU3BIOWlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkNjfnTms6mJsM5nvXPH4OCS8xOxyqz4pcc5pxbYJEd5bSh03EpN+Jm dBcJAf7hLE+unwWQ+VR9I9c+3+dmoKU1YWx10IFgEJN/4PQmI3+OSK3RlmanTtCF zQYkEl3UxWjKi3/x+GqTZJeADd7ZXw8EHNTIHIVye9XCX86cn9AjSdDJDQz7oTID 3dmAUNJwWV0ey8UWaz3y6GGYtmFOEzOGPMC7zLakuz4J4ovJD/BEHxuKpOAkCpmw TMvEh+ZfOZez4zusNOfbobbt8RVUvEf0YjFb6YGsM5zOld2X7/Oyg9s8ZyXhnKHN yoWno52AGEKJJ7R9lEDZ8MeSGxHfDq4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:29 2025 by rpki-client