$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: bDCZeT7FFVArwxFM82Vt3TbicXvhxVjMRYs24PsB1XU= Subject key identifier: 71:62:9F:3C:C9:64:AE:7C:CA:82:ED:18:87:DA:49:36:C2:CC:5D:8E Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 0801 Signing time: Sat 12 Apr 2025 20:37:48 +0000 Manifest this update: Sat 12 Apr 2025 20:37:47 +0000 Manifest next update: Sat 19 Apr 2025 20:37:47 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: rmupYvxOX8o6lf4419V3ZxOH6JltS0NZbzYB7f/jXv4=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: 526NqZNO2IONfhqjyZNRFm9JBl0LNY6d+qw7jpg0a3U=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: hFavaYgDI5fd8yhRFzFQOHqkohum1YjPxt3lBbRwspQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 20:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Apr 12 20:37:47 2025 GMT Not After : Apr 19 20:37:47 2025 GMT Subject: CN=67facf1b-86be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:62:aa:5e:33:98:22:e1:a9:96:3f:67:10:ba: c2:8e:dc:94:b6:e7:7f:ec:46:ee:da:97:19:f1:57: 7c:5f:1f:81:2f:ca:8c:71:a1:29:11:e3:cb:45:57: d0:3d:1b:f3:2f:8d:59:6b:69:ce:7b:16:d2:b4:fb: 11:dd:7e:7f:e1:97:e5:6e:1e:5b:d7:e8:b9:9c:84: fd:ea:49:3a:b7:71:4f:36:cb:d7:ca:a9:ae:69:20: 7e:10:fd:04:fe:b2:f9:88:0a:f5:fe:f8:0c:0b:58: 66:0f:d9:b3:83:71:f4:1a:67:16:38:67:f5:f4:17: 2f:05:b6:ed:09:c8:d9:00:a1:f8:b2:4c:5a:c2:04: 14:c9:ad:9a:a7:ca:95:0b:da:c9:eb:c1:2e:03:74: a4:99:9e:7b:e5:fc:b9:9f:ef:21:66:4b:a1:b4:93: 67:3b:7e:c6:08:cf:c6:84:a2:9d:29:0d:d1:6e:36: 41:7f:c2:47:63:11:91:bb:2d:6f:62:3a:ac:03:06: 68:97:a6:4f:ab:f2:86:75:52:f9:ce:b3:de:66:ac: d5:d6:60:5b:7f:c0:40:94:f4:b0:1d:63:02:da:b3: 78:86:dc:f4:a7:05:c8:2f:98:b7:fa:47:96:35:cc: 39:2a:7c:16:dd:dc:ac:7a:c7:e7:bc:dd:f3:d4:48: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:62:9F:3C:C9:64:AE:7C:CA:82:ED:18:87:DA:49:36:C2:CC:5D:8E X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:73:08:cd:d0:9a:48:07:f4:4d:a1:ed:7d:dc:81:e6:3c:06: aa:43:45:0b:df:cb:2f:f5:02:c2:52:dd:ff:9b:90:c3:a8:0d: 47:48:5b:1c:e8:8a:20:57:18:e9:9a:85:0c:d9:e7:53:6f:f2: 88:27:41:45:db:c8:e6:b3:1d:05:5d:76:36:6b:f3:cb:b0:a8: 29:db:d3:77:c9:45:80:2d:3a:db:96:19:f2:78:8c:72:9b:93: b8:a8:09:90:85:7d:c3:79:3a:91:ca:fa:97:f3:47:57:e1:9d: 66:68:37:92:b9:d4:52:0c:49:3f:d6:b0:47:0d:99:f1:05:a3: ef:a7:40:0f:6d:ee:44:2f:d7:7a:b1:68:55:49:80:59:4e:61: 42:d9:47:ee:71:5a:39:fb:d8:dd:27:80:4a:0c:5d:76:b1:ef: 7d:bc:d0:4c:b2:13:e6:e3:db:cf:9a:5c:b3:f5:30:e7:f3:9c: 4d:28:86:87:04:90:3c:9a:b5:75:a1:d2:d1:ca:c8:43:a9:59: fa:6b:9c:ea:b7:6a:86:6a:4b:8a:e7:19:84:ce:fc:b6:73:af: 30:98:81:a2:92:29:a3:a3:4f:8b:fd:83:e8:45:77:74:b6:37: 65:58:1a:2b:3b:95:42:67:00:8e:7f:11:1e:4a:fb:45:8b:69: 47:8b:f7:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwNDEyMjAzNzQ3WhcNMjUwNDE5MjAzNzQ3WjAYMRYwFAYD VQQDEw02N2ZhY2YxYi04NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+WKqXjOYIuGplj9nELrCjtyUtud/7Ebu2pcZ8Vd8Xx+BL8qMcaEpEePLRVfQ PRvzL41Za2nOexbStPsR3X5/4Zflbh5b1+i5nIT96kk6t3FPNsvXyqmuaSB+EP0E /rL5iAr1/vgMC1hmD9mzg3H0GmcWOGf19BcvBbbtCcjZAKH4skxawgQUya2ap8qV C9rJ68EuA3SkmZ575fy5n+8hZkuhtJNnO37GCM/GhKKdKQ3RbjZBf8JHYxGRuy1v YjqsAwZol6ZPq/KGdVL5zrPeZqzV1mBbf8BAlPSwHWMC2rN4htz0pwXIL5i3+keW Ncw5KnwW3dysesfnvN3z1EhpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFinzzJ ZK58yoLtGIfaSTbCzF2OMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8cwjN0JpIB/RNoe193IHmPAaqQ0UL38sv9QLCUt3/m5DDqA1HSFsc 6IogVxjpmoUM2edTb/KIJ0FF28jmsx0FXXY2a/PLsKgp29N3yUWALTrblhnyeIxy m5O4qAmQhX3DeTqRyvqX80dX4Z1maDeSudRSDEk/1rBHDZnxBaPvp0APbe5EL9d6 sWhVSYBZTmFC2UfucVo5+9jdJ4BKDF12se99vNBMshPm49vPmlyz9TDn85xNKIaH BJA8mrV1odLRyshDqVn6a5zqt2qGakuK5xmEzvy2c68wmIGikimjo0+L/YPoRXd0 tjdlWBorO5VCZwCOfxEeSvtFi2lHi/f4 -----END CERTIFICATE-----Generated at Sun Apr 13 02:35:03 2025 by rpki-client