$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: icZ5WVE5oCZ7+36L/8GYNy/k33cxf3LN/bgBONvGyJg= Subject key identifier: E5:AE:2F:C7:2C:D2:13:80:73:85:09:0F:26:C3:C1:3A:2C:7C:A1:9F Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 0280 Signing time: Fri 11 Apr 2025 01:32:50 +0000 Manifest this update: Fri 11 Apr 2025 01:32:49 +0000 Manifest next update: Fri 18 Apr 2025 01:32:49 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: sP0kpz45J+YfR0bcQcn8Nj+f41gW7L50tuWx+o2k0Cw=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Apr 11 01:32:49 2025 GMT Not After : Apr 18 01:32:49 2025 GMT Subject: CN=67f87141-3f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:8e:2f:f2:f8:75:dd:25:2c:12:5e:03:e1: 37:80:21:5b:4d:94:4b:9c:8b:55:2a:bb:48:67:5d: 48:38:11:28:48:75:78:97:d3:25:28:bd:1f:68:6a: 54:6c:a3:e4:41:84:a9:75:23:c4:f0:33:e6:1b:2a: 64:60:bf:d5:92:8e:86:f9:6c:c2:7c:95:bd:8c:12: 24:dc:ae:a5:3b:c5:e1:0b:2c:84:88:f7:37:19:53: b0:9f:1a:b9:29:97:f3:98:be:c0:06:ae:5e:d2:f7: 36:5f:b8:e2:a0:df:6d:44:db:ac:d5:8e:4d:a3:a0: c2:3b:92:66:61:c1:05:8e:77:7d:c2:6d:cd:30:e4: 89:80:6c:23:1b:a0:d3:24:ed:be:93:22:64:61:c8: ae:77:15:5c:3a:18:4e:0f:c4:0e:26:9e:75:cd:5b: 34:fc:0e:ba:62:27:46:3f:99:b5:da:22:1d:17:e7: 49:2a:48:4a:41:e5:60:65:a4:e2:ac:0d:26:26:57: 60:2f:65:56:8b:7a:6f:af:ba:e7:06:f8:0e:bc:26: 85:4f:33:91:bd:13:25:35:60:38:72:1e:4e:cc:9d: 3d:53:be:d6:30:3d:55:7b:48:2b:55:05:b6:00:87: ed:e0:4e:fe:43:49:a0:29:b1:ea:b3:14:8a:09:75: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:2F:C7:2C:D2:13:80:73:85:09:0F:26:C3:C1:3A:2C:7C:A1:9F X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9d:d5:bf:32:82:b9:84:97:4c:1e:d7:60:fc:18:1e:df:b3: 29:8d:7e:58:aa:21:33:73:3b:03:eb:8b:e3:e0:78:d5:ec:69: 69:f4:20:df:e5:5c:2f:9c:0d:13:58:50:03:aa:df:3d:76:bf: 81:7e:ce:e3:51:70:b6:45:d8:39:a1:57:b0:4a:82:7c:e0:0e: 44:12:90:8f:0f:9c:3a:f8:df:03:ca:31:15:69:8d:13:16:72: cb:7e:fa:60:4a:8e:1d:e1:1a:63:25:5f:7a:e5:81:57:59:7d: 04:03:bf:fd:5e:1c:f2:9d:2a:2f:1b:19:fa:42:5d:73:24:51: 7c:08:58:d5:85:fe:15:fb:55:85:a2:9b:65:b3:ef:a2:53:d7: 5d:3f:ae:51:50:4c:39:9a:f6:32:92:93:e2:67:16:ef:55:70: b2:7d:81:c7:c6:b8:38:b4:08:41:c7:b1:16:8d:f1:1a:9f:15: a4:a2:83:a0:56:60:0b:e8:df:4c:75:8f:df:c2:40:94:78:af: 54:15:7c:fe:a8:a6:46:01:b5:e3:9c:1b:e3:4d:0d:95:be:88: c9:1a:d6:45:68:88:a5:86:ec:8b:a8:44:28:1e:e1:c8:3b:cf: 3d:40:a8:1e:ae:87:ea:0c:90:00:ca:55:b4:28:b0:cf:82:10: 37:39:0d:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUwNDExMDEzMjQ5WhcNMjUwNDE4MDEzMjQ5WjAYMRYwFAYD VQQDEw02N2Y4NzE0MS0zZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbyOL/L4dd0lLBJeA+E3gCFbTZRLnItVKrtIZ11IOBEoSHV4l9MlKL0faGpU bKPkQYSpdSPE8DPmGypkYL/Vko6G+WzCfJW9jBIk3K6lO8XhCyyEiPc3GVOwnxq5 KZfzmL7ABq5e0vc2X7jioN9tRNus1Y5No6DCO5JmYcEFjnd9wm3NMOSJgGwjG6DT JO2+kyJkYciudxVcOhhOD8QOJp51zVs0/A66YidGP5m12iIdF+dJKkhKQeVgZaTi rA0mJldgL2VWi3pvr7rnBvgOvCaFTzORvRMlNWA4ch5OzJ09U77WMD1Ve0grVQW2 AIft4E7+Q0mgKbHqsxSKCXWkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWuL8cs 0hOAc4UJDybDwTosfKGfMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtndW/MoK5hJdMHtdg/Bge37MpjX5YqiEzczsD64vj4HjV7Glp9CDf 5VwvnA0TWFADqt89dr+Bfs7jUXC2Rdg5oVewSoJ84A5EEpCPD5w6+N8DyjEVaY0T FnLLfvpgSo4d4RpjJV965YFXWX0EA7/9XhzynSovGxn6Ql1zJFF8CFjVhf4V+1WF optls++iU9ddP65RUEw5mvYykpPiZxbvVXCyfYHHxrg4tAhBx7EWjfEanxWkooOg VmAL6N9MdY/fwkCUeK9UFXz+qKZGAbXjnBvjTQ2VvojJGtZFaIilhuyLqEQoHuHI O889QKgerofqDJAAylW0KLDPghA3OQ3+ -----END CERTIFICATE-----Generated at Sat Apr 12 23:42:41 2025 by rpki-client