$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft File: VtexXMGugneFjWSSwB3VMwhEzAY.mft (raw, json) Hash identifier: skp0yIkd0HTIg1UF4pk+V9mtyqsQWQea/fRi7UHBwu0= Subject key identifier: 09:0E:F0:DA:0C:A6:01:28:5E:5B:0B:DB:6A:0D:3E:D5:FC:21:BD:A7 Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft Manifest number: 083E Signing time: Tue 08 Apr 2025 20:37:15 +0000 Manifest this update: Tue 08 Apr 2025 20:37:14 +0000 Manifest next update: Tue 15 Apr 2025 20:37:14 +0000 Files and hashes: 1: VtexXMGugneFjWSSwB3VMwhEzAY.crl (hash: 7YHHj9mdJsfKUY8vgKRfg6q7y/za43iQcDUDhOMCUxA=) 2: 206929C4CA4F11EABA13087FC4F9AE02.roa (hash: HN2wxXwa+kSK089yxD0HDWrYydcNndyobtFpGLOTHwg=) 3: C584C646CA5111EAB9696B0AC4F9AE02.roa (hash: jKi3PKCqjoeXzKEIhqY8kjF2HaVhBCmBhcTW865Wvd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CC8 Validity Not Before: Apr 8 20:37:14 2025 GMT Not After : Apr 15 20:37:14 2025 GMT Subject: CN=67f588fb-4043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:9e:b6:a0:06:4a:f9:74:e8:43:dc:55:14: 2a:0e:86:bd:cb:62:16:30:a7:6a:93:5c:a5:4c:98: 9a:3b:6b:78:cb:71:a7:23:37:d5:2e:b5:99:b0:63: a2:92:9c:07:2c:80:9b:14:30:b2:6c:57:a0:3e:72: 6e:db:2c:a6:90:d2:1e:00:02:97:34:2b:2b:e6:86: 73:b2:f5:93:06:cf:d3:3a:94:c9:8a:e9:31:ff:f3: 02:38:1d:41:6d:1e:e3:14:d2:0c:1f:43:91:73:3e: f0:16:3f:5d:5f:41:a0:89:65:15:ef:0a:d7:20:4a: cc:4f:29:04:94:de:b1:45:35:01:b2:85:c4:46:0c: 86:02:e0:c6:67:a3:29:bc:f4:a9:f0:94:04:1b:d8: 51:cd:57:ce:50:08:bb:a6:73:4b:8f:4f:10:54:f0: e6:9b:c5:13:bd:ca:55:2a:5e:99:3b:c5:39:cd:e7: 7e:9b:f0:1e:a8:e5:84:56:07:0f:aa:29:48:b7:45: 6d:21:ce:7d:cf:4d:bd:a1:ab:f0:f0:09:a4:17:c1: 41:9e:61:d4:3d:0b:ae:b9:f9:80:6f:ae:87:72:b5: 04:aa:85:49:b8:d3:b5:c2:fa:6f:61:a3:ed:6b:57: cc:de:5d:c4:ce:d8:7a:47:3b:83:f4:00:67:ec:d1: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:F0:DA:0C:A6:01:28:5E:5B:0B:DB:6A:0D:3E:D5:FC:21:BD:A7 X509v3 Authority Key Identifier: keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:46:00:10:f0:e4:fd:d2:30:5c:6b:f4:f6:a5:5b:be:c2:96: 48:0b:5c:fe:58:f7:8b:f6:2d:6f:11:6f:e7:c0:55:3e:19:a8: 8c:47:49:f2:90:4a:98:cd:58:07:00:a2:7a:ca:24:11:00:6e: 2d:31:ec:eb:54:65:92:ee:1d:9b:00:03:cc:e9:b0:47:d7:62: 08:d3:d8:7b:bd:77:fb:b9:ac:26:5b:ed:54:ab:c6:0f:95:67: 86:60:0f:b0:7b:08:70:6d:62:7f:48:7b:9a:fd:1f:79:5e:2f: dd:39:a3:8f:37:4a:f3:ed:19:27:08:34:e8:7a:9d:2b:89:1e: bf:8f:f5:d1:38:75:ec:53:e6:37:24:e9:d4:27:dc:3d:52:3f: f9:4f:87:e7:c9:f2:a4:61:18:ab:5c:d3:27:34:6f:fc:a4:0e: 26:d2:65:c0:92:46:ff:3b:4b:cc:4b:60:1f:5b:e8:1c:86:25: 5f:cc:8e:44:01:b4:4e:29:84:a5:d0:f8:7e:cb:86:22:76:7b: df:58:80:71:b3:25:05:2a:57:f3:c8:4b:d6:d8:a4:29:88:60: 04:7f:7c:27:cd:dd:0e:ed:ce:23:3c:67:2a:04:45:1f:4b:37: 34:76:fb:72:34:58:78:42:4f:19:f1:68:e8:6c:3d:be:b4:f0: d0:34:24:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5MkMwMURENTMz MDg0NENDMDYwHhcNMjUwNDA4MjAzNzE0WhcNMjUwNDE1MjAzNzE0WjAYMRYwFAYD VQQDEw02N2Y1ODhmYi00MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YaetqAGSvl06EPcVRQqDoa9y2IWMKdqk1ylTJiaO2t4y3GnIzfVLrWZsGOi kpwHLICbFDCybFegPnJu2yymkNIeAAKXNCsr5oZzsvWTBs/TOpTJiukx//MCOB1B bR7jFNIMH0ORcz7wFj9dX0GgiWUV7wrXIErMTykElN6xRTUBsoXERgyGAuDGZ6Mp vPSp8JQEG9hRzVfOUAi7pnNLj08QVPDmm8UTvcpVKl6ZO8U5zed+m/AeqOWEVgcP qilIt0VtIc59z029oavw8AmkF8FBnmHUPQuuufmAb66HcrUEqoVJuNO1wvpvYaPt a1fM3l3Ezth6RzuD9ABn7NEMNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkO8NoM pgEoXlsL22oNPtX8Ib2nMB8GA1UdIwQYMBaAFFbXsVzBroJ3hY1kksAd1TMIRMwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENDOC8wMTJFRDFCRUNB NEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1HdWduZUZqV1NTd0IzVk13aEV6 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0ZXhYTUd1Z25lRmpXU1N3QjNWTXdoRXpBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENDOC8wMTJFRDFCRUNBNEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1HdWdu ZUZqV1NTd0IzVk13aEV6QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8RgAQ8OT90jBca/T2pVu+wpZIC1z+WPeL9i1vEW/nwFU+GaiMR0ny kEqYzVgHAKJ6yiQRAG4tMezrVGWS7h2bAAPM6bBH12II09h7vXf7uawmW+1Uq8YP lWeGYA+wewhwbWJ/SHua/R95Xi/dOaOPN0rz7RknCDToep0riR6/j/XROHXsU+Y3 JOnUJ9w9Uj/5T4fnyfKkYRirXNMnNG/8pA4m0mXAkkb/O0vMS2AfW+gchiVfzI5E AbROKYSl0Ph+y4YidnvfWIBxsyUFKlfzyEvW2KQpiGAEf3wnzd0O7c4jPGcqBEUf Szc0dvtyNFh4Qk8Z8WjobD2+tPDQNCQ2 -----END CERTIFICATE-----Generated at Fri Apr 11 08:28:10 2025 by rpki-client