$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: 0lONB7ac5oniW1/ZWQLXHdAZ7GZbQdIoELKUF7p00ik= Subject key identifier: 9E:61:81:0A:7E:BF:1C:42:41:5A:57:3F:22:88:48:30:8B:82:D2:20 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 03FD Signing time: Thu 03 Apr 2025 00:34:09 +0000 Manifest this update: Thu 03 Apr 2025 00:34:09 +0000 Manifest next update: Thu 10 Apr 2025 00:34:09 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: Ac5wUhOJEUSB4fG0qedLDyrwW5Rq6wxa+WWM0sfY87g=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: ftvhnzXdw5KRVDKn9LZuR/Je36inLhxCbKOybLuc7M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4 Validity Not Before: Apr 3 00:34:09 2025 GMT Not After : Apr 10 00:34:09 2025 GMT Subject: CN=67edd781-875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:f7:8f:ab:20:f4:ee:d6:b1:37:e4:7d:67: 28:d8:d1:98:d9:07:ed:54:c0:b4:6a:7b:7d:5f:8e: fd:14:28:73:da:26:6e:90:72:51:46:92:a0:3c:75: 3c:87:59:ef:8e:a7:46:6f:f1:c9:21:78:c3:fa:57: f7:09:19:d1:4b:ad:d2:1d:97:0e:63:f1:b6:23:da: 93:31:d6:29:7a:25:49:57:c6:56:9d:d3:aa:a4:76: f3:22:a2:ed:7b:64:d3:61:a9:3e:20:c0:fc:ee:11: fd:24:3f:3d:56:cd:78:85:3d:29:c8:85:70:a6:5d: 62:f8:7c:6a:3e:f9:1a:47:32:b3:48:c5:99:5d:80: 7f:25:ec:cd:bd:04:13:28:56:a4:de:3a:2c:3f:b7: 64:74:45:01:90:bb:17:4a:1c:ef:3e:51:f3:9a:fc: bb:77:a8:42:e8:99:cb:e7:4b:b5:76:b5:17:6b:95: a9:79:7a:9b:13:0f:23:31:3e:93:ed:b4:67:c3:63: 60:76:25:44:f8:88:4a:aa:38:94:ac:aa:2a:ab:c3: f0:24:89:5d:e1:53:b1:d6:19:70:5c:75:97:dc:f7: a1:7a:09:6f:35:84:e5:86:61:e6:ce:6f:a0:76:40: 21:f1:b0:c3:f8:d9:9f:a5:bc:fa:10:12:41:55:43: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:81:0A:7E:BF:1C:42:41:5A:57:3F:22:88:48:30:8B:82:D2:20 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:70:94:38:43:af:01:a5:26:6d:79:ba:49:59:51:8b:0e: 3d:d5:a8:c5:eb:f6:8d:75:25:46:9b:1c:b8:c6:13:07:89:20: 91:dc:91:60:e7:10:75:5a:8a:23:9d:c7:da:c5:13:c4:d2:6b: 5e:12:d6:6e:c7:09:19:6f:9e:db:95:55:ed:46:95:73:dd:eb: 0a:c3:1d:96:74:69:8b:f1:bf:ae:d2:1c:27:c3:a2:95:22:a7: e5:cb:db:f6:a4:a0:fe:ab:6b:8a:22:fe:bd:e7:5f:8e:97:f5: b4:a8:0c:9a:22:4c:22:00:93:5f:08:54:46:ef:ae:c0:3a:77: ab:90:48:54:be:b5:f9:77:e1:f1:49:ac:75:13:0c:93:04:d0: ba:8d:c3:9a:50:f9:26:3c:cd:b1:84:1e:1b:19:59:8c:88:d3: bd:30:4a:11:ef:b1:9a:1e:22:6a:54:13:2d:6e:7a:61:49:f7: 5a:59:26:3e:e8:18:bb:86:1f:57:4b:c9:a4:95:05:7a:6e:ef: 9e:a1:fc:2a:d7:4f:1f:63:74:5a:8b:b4:f3:e0:d2:64:1a:a6: 5d:e4:05:20:0c:16:f6:32:67:f7:f1:30:88:7e:dd:ce:1a:51: 29:cf:5e:ab:82:ec:43:be:b3:c6:eb:bb:70:21:3c:ac:37:9e: a6:58:1b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjUwNDAzMDAzNDA5WhcNMjUwNDEwMDAzNDA5WjAYMRYwFAYD VQQDEw02N2VkZDc4MS04NzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z73j6sg9O7WsTfkfWco2NGY2QftVMC0ant9X479FChz2iZukHJRRpKgPHU8 h1nvjqdGb/HJIXjD+lf3CRnRS63SHZcOY/G2I9qTMdYpeiVJV8ZWndOqpHbzIqLt e2TTYak+IMD87hH9JD89Vs14hT0pyIVwpl1i+HxqPvkaRzKzSMWZXYB/JezNvQQT KFak3josP7dkdEUBkLsXShzvPlHzmvy7d6hC6JnL50u1drUXa5WpeXqbEw8jMT6T 7bRnw2NgdiVE+IhKqjiUrKoqq8PwJIld4VOx1hlwXHWX3PeheglvNYTlhmHmzm+g dkAh8bDD+Nmfpbz6EBJBVUMwBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5hgQp+ vxxCQVpXPyKISDCLgtIgMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk03CUOEOvAaUmbXm6SVlRiw491ajF6/aNdSVGmxy4xhMHiSCR3JFg 5xB1WoojncfaxRPE0mteEtZuxwkZb57blVXtRpVz3esKwx2WdGmL8b+u0hwnw6KV Iqfly9v2pKD+q2uKIv6951+Ol/W0qAyaIkwiAJNfCFRG767AOnerkEhUvrX5d+Hx Sax1EwyTBNC6jcOaUPkmPM2xhB4bGVmMiNO9MEoR77GaHiJqVBMtbnphSfdaWSY+ 6Bi7hh9XS8mklQV6bu+eofwq108fY3Rai7Tz4NJkGqZd5AUgDBb2Mmf38TCIft3O GlEpz16rguxDvrPG67twITysN56mWBtE -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:23 2025 by rpki-client