$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: NobiTWsXBWaMFBRCaHSXNX1zcHMGgV/zr8LfNF08bnY= Subject key identifier: 4D:97:55:6D:DA:C7:41:C5:EA:24:4D:FC:5B:16:85:25:34:68:4D:67 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 0223 Signing time: Thu 03 Apr 2025 01:58:07 +0000 Manifest this update: Thu 03 Apr 2025 01:58:07 +0000 Manifest next update: Thu 10 Apr 2025 01:58:07 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: R8udwTs7pfF8XY12U1Xk7VpVcRFVflNw1lDtsrR/w5k=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89 Validity Not Before: Apr 3 01:58:07 2025 GMT Not After : Apr 10 01:58:07 2025 GMT Subject: CN=67edeb2f-59e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2e:90:21:52:ff:97:c1:cd:e1:a6:61:1b:21: 32:2d:7b:4a:b7:a7:9d:e4:a4:bf:32:94:c7:92:35: 43:15:01:1e:17:77:c6:42:5e:26:0e:0e:a7:a8:38: 14:7e:85:ac:92:22:2b:5e:b7:95:ef:c5:a6:c7:96: 35:3d:dc:34:3c:16:7a:4c:fe:3e:d9:a3:a1:1f:cb: 2d:79:d9:93:b7:ae:50:14:5f:09:ad:90:5f:f8:42: 95:10:67:e9:d9:72:60:1d:4c:d1:1c:a4:fc:38:4b: e0:e8:1d:47:0a:e8:36:ef:37:d5:8e:08:9e:28:f7: ad:be:e2:98:d6:46:ca:a5:e3:2f:4d:06:dc:9a:83: f6:86:10:07:16:af:f1:38:fd:69:b8:81:4e:af:c0: 82:40:4d:a0:d7:2c:46:51:2f:1c:a0:9a:72:d7:3a: 9a:a7:52:3f:8d:56:ad:39:7e:f4:12:6b:44:b5:ab: 25:6b:8a:dc:e8:79:ca:05:5e:c4:b5:61:9f:f1:94: 76:3c:d8:f8:b7:4d:c6:dd:cc:d2:51:b3:3f:76:b9: 88:45:e4:06:2d:e1:14:8c:11:fe:0b:0e:08:e7:d8: 86:35:6b:21:f1:6f:cc:01:de:16:9a:e9:c4:f2:53: 18:d6:2e:f1:35:06:cb:40:43:41:d0:db:8f:24:55: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:55:6D:DA:C7:41:C5:EA:24:4D:FC:5B:16:85:25:34:68:4D:67 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:8d:d5:64:15:12:4a:ac:ce:06:71:cc:3c:82:b9:8f:f2: 3e:89:9e:ef:54:84:8a:e3:4c:e7:52:48:a0:b4:ae:83:4e:a9: a5:96:81:39:df:96:4a:f9:64:4c:9c:c7:ce:d4:07:4a:60:97: 0a:9e:79:f9:f6:28:3e:3c:2c:26:cb:2c:07:4e:32:36:65:86: 52:9b:a9:c0:d1:86:df:fc:2b:24:42:20:f1:29:ab:d3:ba:07: ca:3f:a8:01:6d:af:53:71:85:2f:5c:fe:41:75:8b:b5:c7:5a: c8:36:6c:2e:4b:40:42:14:d3:d0:d0:9f:4b:30:27:09:53:f4: 8d:fa:7e:bf:be:3c:23:1d:36:58:39:d5:0d:7f:cc:70:fc:41: ee:15:1b:0d:a4:43:8a:04:14:55:3f:9e:29:7a:3f:8b:bd:e4: b1:42:3d:6e:f7:8d:2a:cc:82:78:6c:3e:60:88:1a:50:5f:df: f2:22:58:8b:99:21:c8:e4:6b:c6:77:28:ba:0f:c5:49:85:91: 1e:9f:51:69:a4:16:43:db:93:08:5e:26:85:a2:03:8c:01:9f: 3c:0a:72:4d:f5:6d:8b:b3:99:b5:c9:b0:0c:99:7b:86:4b:e5: 55:0d:f2:35:c8:c9:ff:c1:1f:85:b5:2f:bb:6f:af:a2:dc:13: 9c:d7:fc:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUwNDAzMDE1ODA3WhcNMjUwNDEwMDE1ODA3WjAYMRYwFAYD VQQDEw02N2VkZWIyZi01OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i6QIVL/l8HN4aZhGyEyLXtKt6ed5KS/MpTHkjVDFQEeF3fGQl4mDg6nqDgU foWskiIrXreV78Wmx5Y1Pdw0PBZ6TP4+2aOhH8stedmTt65QFF8JrZBf+EKVEGfp 2XJgHUzRHKT8OEvg6B1HCug27zfVjgieKPetvuKY1kbKpeMvTQbcmoP2hhAHFq/x OP1puIFOr8CCQE2g1yxGUS8coJpy1zqap1I/jVatOX70EmtEtasla4rc6HnKBV7E tWGf8ZR2PNj4t03G3czSUbM/drmIReQGLeEUjBH+Cw4I59iGNWsh8W/MAd4WmunE 8lMY1i7xNQbLQENB0NuPJFVbuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2XVW3a x0HF6iRN/FsWhSU0aE1nMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA63I3VZBUSSqzOBnHMPIK5j/I+iZ7vVISK40znUkigtK6DTqmlloE5 35ZK+WRMnMfO1AdKYJcKnnn59ig+PCwmyywHTjI2ZYZSm6nA0Ybf/CskQiDxKavT ugfKP6gBba9TcYUvXP5BdYu1x1rINmwuS0BCFNPQ0J9LMCcJU/SN+n6/vjwjHTZY OdUNf8xw/EHuFRsNpEOKBBRVP54pej+LveSxQj1u940qzIJ4bD5giBpQX9/yIliL mSHI5GvGdyi6D8VJhZEen1FppBZD25MIXiaFogOMAZ88CnJN9W2Ls5m1ybAMmXuG S+VVDfI1yMn/wR+FtS+7b6+i3BOc1/zE -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:51 2025 by rpki-client