$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: 73WZPSMFjjDkeFaKsd92dPH0ft2r6thqRJ0MAHfmKNw= Subject key identifier: 1D:E3:E8:1F:D1:76:BC:E9:C3:1A:A2:D6:21:B3:FD:E7:12:ED:59:1C Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 010B Signing time: Sat 05 Apr 2025 04:19:27 +0000 Manifest this update: Sat 05 Apr 2025 04:19:26 +0000 Manifest next update: Sat 12 Apr 2025 04:19:26 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: GxVcjHroR9iBrAmv15TzRw/g7SZcNSauH3UznKotnBM=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D Validity Not Before: Apr 5 04:19:26 2025 GMT Not After : Apr 12 04:19:26 2025 GMT Subject: CN=67f0af4e-6036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:1e:14:46:6e:13:f3:d8:62:03:83:b5:ff: 36:91:79:f2:94:0c:d9:3a:17:f8:0a:90:ad:0e:08: 2c:5b:5e:4e:87:61:9d:1f:24:aa:08:f5:db:a7:7b: 11:ce:b7:5c:e8:0a:52:56:49:7c:13:b5:60:28:a9: b6:da:65:b5:ae:d4:4e:ff:51:34:a7:72:bc:f9:f7: c4:47:03:4a:47:06:95:6d:a6:7e:3b:13:e5:ee:80: 8f:06:f9:6c:10:d1:3c:3f:3b:19:33:33:3a:f8:10: 00:50:75:4d:74:4e:8f:e7:be:6e:4a:d0:0e:ad:a9: ea:20:eb:1e:a4:97:59:a8:fa:fc:68:af:d2:ee:f0: fb:aa:9b:70:ce:4a:3c:cc:3e:2c:f1:cf:7f:99:b3: 51:75:76:48:b9:67:b7:f2:50:1a:8d:d2:15:df:5e: c6:9c:24:dd:f0:2c:c1:2c:2c:33:13:48:62:e2:5b: f5:28:40:bf:4c:39:63:30:b1:96:c9:5d:c5:f0:96: 9d:17:da:25:e6:2e:6c:aa:33:7e:8b:e7:09:4f:08: e1:73:38:ae:39:eb:de:30:9b:4e:95:44:63:7a:7d: cb:33:10:b8:c8:da:9a:3c:04:89:5d:39:0b:06:d8: ac:94:60:8e:d5:5d:e6:11:02:f6:f9:ee:c0:2f:ca: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:E8:1F:D1:76:BC:E9:C3:1A:A2:D6:21:B3:FD:E7:12:ED:59:1C X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:72:0f:5d:58:f0:54:de:41:ab:56:3b:99:7e:82:08:bb:c2: 9d:a3:62:c9:d5:37:51:29:da:17:85:a8:96:5c:a8:fd:da:d9: 89:b3:be:a5:ea:2a:dc:0a:ca:02:1c:a3:58:65:dc:e5:9c:07: 49:00:a7:e3:2b:af:5c:ac:14:66:e9:48:c0:51:ac:bd:ae:fe: 82:10:c7:6e:54:d8:b8:e5:b3:8e:99:3c:27:36:f5:eb:a5:1a: 26:1d:d8:67:ee:01:43:96:6b:b4:9c:61:25:cf:b6:39:b8:88: 57:f7:67:89:27:5a:61:f3:c2:39:0d:d2:37:bb:8c:21:81:50: ce:b8:9b:e3:de:56:32:e2:6e:ee:72:bb:2d:fc:f3:ae:3d:57: 0d:bb:8d:56:52:00:3c:82:4a:bd:7d:a7:91:b7:ba:46:e6:63: e4:38:23:90:57:f8:41:95:0b:ec:ed:67:94:d1:b3:64:a6:3e: d0:bb:42:00:1d:43:97:86:c9:33:2c:88:ee:00:04:31:a9:7d: 45:d6:26:98:95:cb:44:19:a6:96:84:eb:cd:4f:43:10:e3:48: cc:89:b6:f6:dc:af:9a:33:71:fd:c4:08:52:36:c6:0a:33:e7: c3:7d:d1:05:66:79:e2:2a:87:b6:b3:90:f7:b7:bf:78:d7:1d: cc:cf:a7:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNDA1MDQxOTI2WhcNMjUwNDEyMDQxOTI2WjAYMRYwFAYD VQQDEw02N2YwYWY0ZS02MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcYeFEZuE/PYYgODtf82kXnylAzZOhf4CpCtDggsW15Oh2GdHySqCPXbp3sR zrdc6ApSVkl8E7VgKKm22mW1rtRO/1E0p3K8+ffERwNKRwaVbaZ+OxPl7oCPBvls ENE8PzsZMzM6+BAAUHVNdE6P575uStAOranqIOsepJdZqPr8aK/S7vD7qptwzko8 zD4s8c9/mbNRdXZIuWe38lAajdIV317GnCTd8CzBLCwzE0hi4lv1KEC/TDljMLGW yV3F8JadF9ol5i5sqjN+i+cJTwjhcziuOeveMJtOlURjen3LMxC4yNqaPASJXTkL BtislGCO1V3mEQL2+e7AL8pKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3j6B/R drzpwxqi1iGz/ecS7VkcMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBecg9dWPBU3kGrVjuZfoIIu8Kdo2LJ1TdRKdoXhaiWXKj92tmJs76l 6ircCsoCHKNYZdzlnAdJAKfjK69crBRm6UjAUay9rv6CEMduVNi45bOOmTwnNvXr pRomHdhn7gFDlmu0nGElz7Y5uIhX92eJJ1ph88I5DdI3u4whgVDOuJvj3lYy4m7u crst/POuPVcNu41WUgA8gkq9faeRt7pG5mPkOCOQV/hBlQvs7WeU0bNkpj7Qu0IA HUOXhskzLIjuAAQxqX1F1iaYlctEGaaWhOvNT0MQ40jMibb23K+aM3H9xAhSNsYK M+fDfdEFZnniKoe2s5D3t7941x3Mz6fu -----END CERTIFICATE-----Generated at Sat Apr 5 14:46:04 2025 by rpki-client