$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: RGbNc92/7cpmLEytPenOx1784l3HVflaC+diclHea5g= Subject key identifier: 3D:3A:B2:63:A6:64:9C:33:56:6B:CB:C0:5E:96:49:FF:24:91:C5:EB Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 0673 Signing time: Wed 02 Apr 2025 22:18:43 +0000 Manifest this update: Wed 02 Apr 2025 22:18:43 +0000 Manifest next update: Wed 09 Apr 2025 22:18:43 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: TWtovqH7w375K3PcPxaitYp6piRDOhil25S91ZKCW3w=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7 Validity Not Before: Apr 2 22:18:43 2025 GMT Not After : Apr 9 22:18:43 2025 GMT Subject: CN=67edb7c3-4729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:5f:65:18:26:94:f2:f1:ad:ae:5d:5d:10: 33:38:18:9f:d8:29:43:f9:4f:a3:68:b3:31:18:37: fe:d3:cc:70:59:f7:bb:22:7f:83:60:a0:2e:4e:fb: c8:28:70:0c:24:88:6d:b6:00:4f:57:46:ea:6d:63: f3:76:6a:ac:91:89:a6:d0:60:1c:75:50:e2:86:f4: 96:01:c5:b2:06:22:b7:76:8b:2a:c3:f8:20:ac:16: 26:f1:24:4d:15:64:85:51:c8:8a:dc:af:34:42:09: 7b:04:1a:63:3b:1f:0c:3f:59:f7:b0:e1:69:2c:87: 6c:7c:20:e5:59:63:c4:b3:4b:f8:14:cd:0c:af:fe: 5c:34:a3:56:91:25:0c:2f:ec:94:2e:b0:8c:6a:5c: b4:40:13:cf:ca:18:b1:3b:59:b3:db:6e:24:0d:bd: 74:27:15:ee:60:b7:8a:e9:30:50:33:eb:aa:ab:6a: ec:8f:87:1c:bc:a7:96:2b:b4:0d:da:b2:6d:05:4e: 3e:4e:6f:ae:be:74:2c:4a:2a:fe:f1:7d:ae:44:60: 71:1c:1c:57:12:82:6b:91:ae:9c:23:b5:a7:21:cb: 22:9e:69:78:d8:e9:35:0c:76:55:bc:b2:ed:95:cd: b2:0e:85:3b:a6:60:55:e9:cc:39:56:76:57:1f:3f: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:B2:63:A6:64:9C:33:56:6B:CB:C0:5E:96:49:FF:24:91:C5:EB X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:72:37:10:4d:fe:e4:e7:b2:60:16:1a:2e:5d:2b:5a:c1:60: 23:f4:a2:60:0b:d3:23:33:c4:c7:b3:9b:17:c8:86:4e:c0:7a: fe:0b:82:08:3f:f1:e5:9c:2d:2e:d0:d4:9c:60:85:e6:2f:ed: 55:c7:27:7c:1e:b0:1d:b4:15:85:7c:aa:1d:5f:82:ad:9f:3e: 44:60:a2:e6:f2:b5:a8:f6:29:1e:0d:48:e4:b3:61:72:e5:02: 6d:fa:94:f5:8d:de:d6:5a:1e:0b:92:1f:bb:27:84:cf:25:b6: fd:a9:76:7c:35:d5:aa:8b:55:de:4c:40:fe:c1:1c:a8:2e:08: 6e:53:b0:c3:b0:40:48:71:2f:b0:84:57:ac:91:cd:47:0e:23: ac:1a:bc:29:4d:53:ed:f7:cc:3b:3e:7e:35:2e:78:68:01:68: 22:83:cf:eb:c8:0d:36:c5:61:15:82:18:2d:d6:a9:11:91:76: 5c:cf:2b:68:6d:92:fd:6b:be:f0:5d:73:13:1e:3d:c5:13:55: c2:10:12:f0:ca:fb:62:98:d1:f4:f5:bb:10:6f:b4:06:7e:97: 48:c5:31:0f:d2:17:ab:9c:e3:9e:60:aa:e6:ef:da:c3:42:9b: cc:53:e6:49:05:52:9e:ba:de:6d:90:eb:da:d6:4e:bf:c9:29: ed:f4:8c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwNDAyMjIxODQzWhcNMjUwNDA5MjIxODQzWjAYMRYwFAYD VQQDEw02N2VkYjdjMy00NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5VfZRgmlPLxra5dXRAzOBif2ClD+U+jaLMxGDf+08xwWfe7In+DYKAuTvvI KHAMJIhttgBPV0bqbWPzdmqskYmm0GAcdVDihvSWAcWyBiK3dosqw/ggrBYm8SRN FWSFUciK3K80Qgl7BBpjOx8MP1n3sOFpLIdsfCDlWWPEs0v4FM0Mr/5cNKNWkSUM L+yULrCMaly0QBPPyhixO1mz224kDb10JxXuYLeK6TBQM+uqq2rsj4ccvKeWK7QN 2rJtBU4+Tm+uvnQsSir+8X2uRGBxHBxXEoJrka6cI7WnIcsinml42Ok1DHZVvLLt lc2yDoU7pmBV6cw5VnZXHz/ZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD06smOm ZJwzVmvLwF6WSf8kkcXrMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzcjcQTf7k57JgFhouXStawWAj9KJgC9MjM8THs5sXyIZOwHr+C4II P/HlnC0u0NScYIXmL+1Vxyd8HrAdtBWFfKodX4Ktnz5EYKLm8rWo9ikeDUjks2Fy 5QJt+pT1jd7WWh4Lkh+7J4TPJbb9qXZ8NdWqi1XeTED+wRyoLghuU7DDsEBIcS+w hFeskc1HDiOsGrwpTVPt98w7Pn41LnhoAWgig8/ryA02xWEVghgt1qkRkXZczyto bZL9a77wXXMTHj3FE1XCEBLwyvtimNH09bsQb7QGfpdIxTEP0hernOOeYKrm79rD QpvMU+ZJBVKeut5tkOva1k6/ySnt9Ixa -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:57 2025 by rpki-client