$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json) Hash identifier: 5tcl22HXKAcABG2EVa96JM8SE9de8lC+9lyT4A0lccg= Subject key identifier: 48:DE:93:F2:1C:28:1E:56:B3:D9:12:40:61:62:96:3B:EB:12:96:DF Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft Manifest number: 128F Signing time: Sun 20 Apr 2025 18:28:38 +0000 Manifest this update: Sun 20 Apr 2025 18:28:37 +0000 Manifest next update: Sun 27 Apr 2025 18:28:37 +0000 Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: 4QE8c5fiN4hVF+9gnJvAJADjFlMIZtg8BL+ipWzjXCc=) 2: 763E080A142911F087C1AF7CC4F9AE02.roa (hash: OqYmuSN5Gj4HYv1k95fE+DkrkF2QoPlx9+v7d3wB2mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Validity Not Before: Apr 20 18:28:37 2025 GMT Not After : Apr 27 18:28:37 2025 GMT Subject: CN=68053cd6-db92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:49:10:01:bd:c9:93:22:07:6a:0d:2b:a7: 3a:23:52:d2:dc:df:cc:52:ed:7f:d0:b8:c4:3f:d2: 9c:ae:47:f9:ed:d7:0c:dd:03:db:f9:2a:ce:c2:9d: bb:5c:e9:b4:8b:1c:db:71:7e:13:b3:2c:be:9d:cd: 10:bc:a5:14:22:0b:02:e2:41:3a:81:8d:a2:8a:98: 88:2f:ad:1c:01:f1:f2:9a:e6:60:45:eb:5b:20:35: 72:d7:c7:07:9c:ea:b4:fb:48:d0:91:47:fb:04:a2: b6:ea:0a:c8:63:c6:b1:fb:76:d0:2e:4f:1a:07:f8: b8:f9:d0:be:8f:36:1e:fa:19:60:54:25:85:d1:80: 8e:95:a0:32:b4:31:50:c7:23:b8:c2:2c:0e:96:c2: b8:a3:7b:a3:ca:10:2d:da:cd:7d:47:f9:3d:27:58: a9:5d:7c:e9:4e:b9:ae:29:a2:3a:53:3c:35:3a:bf: 22:5f:6d:19:c6:89:e6:c0:45:74:c0:50:f1:4b:2f: db:40:de:8b:52:80:9c:52:e2:c2:f1:59:79:48:ce: df:f0:f9:64:45:20:7d:e1:bd:c2:a5:93:a1:d2:f7: 2b:e9:82:d2:90:60:59:67:24:84:d5:10:41:48:ba: 94:f9:bc:72:0a:60:57:67:a6:5d:d9:f0:7c:36:f3: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:93:F2:1C:28:1E:56:B3:D9:12:40:61:62:96:3B:EB:12:96:DF X509v3 Authority Key Identifier: keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:50:e8:21:dd:a7:3f:f0:e1:75:31:95:4a:b4:04:32:f7:1d: bb:ce:eb:76:40:0e:43:91:a7:6c:96:a3:50:5d:1b:94:44:bf: 85:23:72:fd:e1:23:43:1f:3e:cd:57:a3:a5:c0:a7:1b:fe:52: 29:8b:f0:13:2c:06:ce:bd:5f:9c:0e:a6:03:f5:03:da:f5:20: cb:a0:be:b8:5f:9d:82:ba:9c:1a:08:5d:e5:2b:ad:4d:83:31: 8e:58:e9:8f:92:70:03:8b:ab:03:66:ac:02:38:45:18:ee:74: b2:be:53:f4:89:20:92:b0:01:7d:e6:c0:10:e4:45:cf:d4:c6: 9a:d3:f5:04:90:13:ce:73:02:ce:18:d5:93:b5:21:4d:86:40: 63:c9:60:de:34:f7:ed:a6:89:79:41:05:41:be:a1:19:6d:f3: fd:86:9a:30:d7:40:fd:6b:2f:c1:bc:4e:ec:87:6d:cf:92:02: 29:e8:98:c6:8a:b0:22:8b:36:9c:34:80:cb:1e:c8:db:07:f1: a0:95:15:b1:66:31:c5:5a:41:dc:66:0a:a4:86:9a:67:c0:2f: 4d:1d:d1:c3:0d:82:23:24:20:7e:01:7a:23:0e:eb:5e:8a:a3: d5:8e:5b:52:06:a6:49:7b:2b:6b:78:0e:74:db:4d:94:6e:6b: 1a:24:4f:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjEyRTExMC8GA1UEBRMoQkVBN0U5OEM1QTNGQjVGQkQ4MzBBNDM1OTQ0MUI0MjI0 NzI3QzcyRDAeFw0yNTA0MjAxODI4MzdaFw0yNTA0MjcxODI4MzdaMBgxFjAUBgNV BAMTDTY4MDUzY2Q2LWRiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvO0kQAb3JkyIHag0rpzojUtLc38xS7X/QuMQ/0pyuR/nt1wzdA9v5Ks7Cnbtc 6bSLHNtxfhOzLL6dzRC8pRQiCwLiQTqBjaKKmIgvrRwB8fKa5mBF61sgNXLXxwec 6rT7SNCRR/sEorbqCshjxrH7dtAuTxoH+Lj50L6PNh76GWBUJYXRgI6VoDK0MVDH I7jCLA6Wwrije6PKEC3azX1H+T0nWKldfOlOua4pojpTPDU6vyJfbRnGiebARXTA UPFLL9tA3otSgJxS4sLxWXlIzt/w+WRFIH3hvcKlk6HS9yvpgtKQYFlnJITVEEFI upT5vHIKYFdnpl3Z8Hw282TVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSN6T8hwo Hlaz2RJAYWKWO+sSlt8wHwYDVR0jBBgwFoAUvqfpjFo/tfvYMKQ1lEG0Ikcnxy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MTJFLzY1QkMxN0QyMEI2 MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnFmcGpGb190ZnZZTUtRMWxFRzBJa2NueHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MTJFLzY1QkMxN0QyMEI2MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2 WU1LUTFsRUcwSWtjbnh5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAZQ6CHdpz/w4XUxlUq0BDL3HbvO63ZADkORp2yWo1BdG5REv4Ujcv3h I0MfPs1Xo6XApxv+UimL8BMsBs69X5wOpgP1A9r1IMugvrhfnYK6nBoIXeUrrU2D MY5Y6Y+ScAOLqwNmrAI4RRjudLK+U/SJIJKwAX3mwBDkRc/UxprT9QSQE85zAs4Y 1ZO1IU2GQGPJYN409+2miXlBBUG+oRlt8/2GmjDXQP1rL8G8TuyHbc+SAinomMaK sCKLNpw0gMseyNsH8aCVFbFmMcVaQdxmCqSGmmfAL00d0cMNgiMkIH4BeiMO616K o9WOW1IGpkl7K2t4DnTbTZRuaxokT1M= -----END CERTIFICATE-----Generated at Tue Apr 22 13:43:24 2025 by rpki-client