$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: U1XW5MorsOTf47G9hw3f0wXUbUcBIAAUr14xfH2LNgA= Subject key identifier: A0:50:F9:15:48:BE:7D:39:4F:0C:A7:28:35:B9:21:56:A7:0F:18:9D Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 033C Signing time: Tue 15 Apr 2025 00:45:25 +0000 Manifest this update: Tue 15 Apr 2025 00:45:24 +0000 Manifest next update: Tue 22 Apr 2025 00:45:24 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: tKbsiPZQCyhu2Z8E8GCUZCf560D4SnFcaHOZcdGb03c=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Apr 15 00:45:24 2025 GMT Not After : Apr 22 00:45:24 2025 GMT Subject: CN=67fdac25-9214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:f4:70:1d:58:6d:5e:a2:c1:ff:29:4c:7a: fe:b6:41:12:86:e0:19:0e:46:02:03:36:e1:40:fd: 49:0f:30:bb:0c:ad:0f:07:3c:22:7d:c3:2f:cd:be: fa:d0:84:ff:6e:b9:c1:4d:ed:be:7f:3c:ab:d3:0d: 83:d0:67:02:9f:5d:3a:4b:41:27:de:70:7f:44:ec: 0f:39:8f:60:9b:56:3d:9e:a9:b7:4d:f0:90:08:61: 32:f6:31:e9:7a:c2:b0:df:0a:a0:07:bf:94:16:39: 3e:97:4e:84:9d:b4:81:fe:44:29:39:7f:8b:85:36: 3f:13:40:e7:55:e5:84:8d:35:8c:dc:bc:8c:bf:3c: ba:f0:02:8c:5b:1e:a6:05:16:66:5a:b8:24:54:eb: 3e:a0:b5:26:a3:89:a0:74:4e:f0:73:59:78:7c:a5: ee:23:3d:c7:74:da:1b:22:c4:f6:21:f2:6e:61:c7: 0d:58:68:3b:d5:7e:5b:dc:c3:8e:d7:b5:c3:d9:3b: 56:29:1b:eb:68:f5:9e:51:e3:5c:47:b5:13:d5:22: 46:fd:56:b3:fb:1f:c5:d3:1b:1e:79:ed:34:41:00: 78:a0:9e:b8:ca:53:2d:0e:4d:29:ad:97:fa:8c:a3: 84:d7:d0:91:51:e6:c3:55:8c:e5:87:23:7b:ba:e7: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:50:F9:15:48:BE:7D:39:4F:0C:A7:28:35:B9:21:56:A7:0F:18:9D X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8a:14:02:7d:70:08:0c:cf:cd:0a:c5:c1:d9:29:c5:06:dc: c9:2c:f7:36:d5:ac:e5:e7:96:10:8e:47:40:3c:ec:de:3f:75: 84:b6:bf:23:8b:4e:15:58:0f:78:49:82:ce:c1:ac:15:90:e2: b0:36:73:28:b4:53:53:d9:16:a2:f8:ef:ad:2a:65:24:de:12: 44:de:37:4f:22:70:cb:b4:f8:81:64:6e:71:c8:da:d6:d2:b0: 68:84:1a:41:45:31:e3:fa:0f:e7:ed:59:b7:86:c2:e5:52:c0: fc:58:b4:f6:40:9d:9a:08:e7:e2:d8:7b:e1:93:08:03:3a:2a: ac:9a:3a:e4:54:c6:d2:d0:f2:c9:e5:c8:02:db:c6:4d:18:fe: 03:59:d1:0f:d5:6d:4d:f3:03:8c:24:13:b0:a7:72:59:c6:56: 01:67:e6:78:69:4f:66:12:e2:e4:f2:54:7f:ba:c7:d0:22:7c: 4f:0d:00:ef:af:90:8f:03:c3:79:57:ac:0d:d7:ad:4d:87:ad: 2d:96:6e:83:2b:d8:a6:ac:6a:90:24:99:9a:bc:dd:2d:81:c6: 9d:34:fc:06:61:f4:f0:09:57:01:93:1e:63:4f:8a:63:87:c7: 47:bb:41:fb:fd:c9:56:29:a9:4c:e4:c0:c2:08:9a:da:88:8d: 1b:8d:f3:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwNDE1MDA0NTI0WhcNMjUwNDIyMDA0NTI0WjAYMRYwFAYD VQQDEw02N2ZkYWMyNS05MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryj0cB1YbV6iwf8pTHr+tkEShuAZDkYCAzbhQP1JDzC7DK0PBzwifcMvzb76 0IT/brnBTe2+fzyr0w2D0GcCn106S0En3nB/ROwPOY9gm1Y9nqm3TfCQCGEy9jHp esKw3wqgB7+UFjk+l06EnbSB/kQpOX+LhTY/E0DnVeWEjTWM3LyMvzy68AKMWx6m BRZmWrgkVOs+oLUmo4mgdE7wc1l4fKXuIz3HdNobIsT2IfJuYccNWGg71X5b3MOO 17XD2TtWKRvraPWeUeNcR7UT1SJG/Vaz+x/F0xseee00QQB4oJ64ylMtDk0prZf6 jKOE19CRUebDVYzlhyN7uuf+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBQ+RVI vn05TwynKDW5IVanDxidMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAihQCfXAIDM/NCsXB2SnFBtzJLPc21azl55YQjkdAPOzeP3WEtr8j i04VWA94SYLOwawVkOKwNnMotFNT2Rai+O+tKmUk3hJE3jdPInDLtPiBZG5xyNrW 0rBohBpBRTHj+g/n7Vm3hsLlUsD8WLT2QJ2aCOfi2HvhkwgDOiqsmjrkVMbS0PLJ 5cgC28ZNGP4DWdEP1W1N8wOMJBOwp3JZxlYBZ+Z4aU9mEuLk8lR/usfQInxPDQDv r5CPA8N5V6wN161Nh60tlm6DK9imrGqQJJmavN0tgcadNPwGYfTwCVcBkx5jT4pj h8dHu0H7/clWKalM5MDCCJraiI0bjfOU -----END CERTIFICATE-----Generated at Wed Apr 16 17:14:18 2025 by rpki-client