$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json) Hash identifier: cjx+2/cggQtQlbscypFN+zgrVd8/Z2WoxE4GiRFOiZ4= Subject key identifier: 6C:C4:16:7C:D8:4E:2C:49:4C:80:2B:8D:B5:2E:D1:7B:95:09:C0:21 Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082 Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft Manifest number: 042E Signing time: Thu 03 Apr 2025 00:24:37 +0000 Manifest this update: Thu 03 Apr 2025 00:24:36 +0000 Manifest next update: Thu 10 Apr 2025 00:24:36 +0000 Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: gX/cjLqoAF5Fu2DIdhvZbv1TRCn3PR2GzRaGSOn8dLo=) 2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=) 3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=) 4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF428 Validity Not Before: Apr 3 00:24:36 2025 GMT Not After : Apr 10 00:24:36 2025 GMT Subject: CN=67edd544-6288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:be:5f:d1:ba:ee:bc:79:a8:ac:ce:46:28: ed:f6:1b:40:5b:41:8b:ef:c8:fa:7f:0d:d8:5f:24: 84:11:7a:0e:56:c1:97:1b:b8:c1:98:66:90:bc:52: 41:e6:7c:10:49:ee:79:6c:37:b7:65:28:e5:fb:ab: e5:d2:64:37:81:f5:02:76:6c:b4:81:7d:60:09:c1: 7f:53:64:ab:ec:43:85:98:36:eb:74:47:fc:d5:f5: 8a:9d:5d:41:4d:55:95:9b:42:19:ed:2c:2b:51:3a: c9:68:77:28:77:f1:11:a0:4e:ea:67:21:9a:0f:56: cc:1a:cd:6b:a5:42:09:d6:42:64:cb:3b:cf:2c:83: 69:bc:37:4c:c4:87:b2:21:1f:17:1c:26:26:b6:b4: 01:da:a8:d0:76:d5:6d:7c:10:78:cf:59:4b:c5:3f: d8:b2:b1:f2:97:8f:e9:02:8f:eb:3d:e9:c4:13:7e: 56:17:29:47:09:42:68:c3:ff:19:1d:79:09:85:05: 78:c1:93:11:7d:f3:e2:32:36:18:72:65:7b:56:c3: f9:22:f9:77:8b:98:85:25:28:4f:96:f8:1c:1b:8a: 86:64:b9:b0:42:18:88:7b:7b:24:a1:f1:3e:4f:67: 37:7b:05:46:56:1b:20:d8:4e:4a:0e:0b:0e:f1:a1: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:16:7C:D8:4E:2C:49:4C:80:2B:8D:B5:2E:D1:7B:95:09:C0:21 X509v3 Authority Key Identifier: keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:04:5e:2f:75:c5:3f:8d:ef:6e:f8:9e:0e:8f:76:6b:8d:17: 47:dd:78:ce:cc:16:00:70:59:b1:b8:a6:5a:53:3c:a4:fa:56: 47:f9:db:08:ff:02:09:34:b1:ad:23:4f:62:77:10:cc:c0:01: 0d:72:6f:79:92:65:31:0d:8f:cd:46:77:9b:a0:af:5f:40:73: 67:d1:a3:5e:01:c8:97:29:d2:7a:15:bf:40:3b:37:f9:6d:15: f6:42:0e:91:c5:29:8b:b8:d6:c4:2d:5a:da:24:f4:04:ea:10: 1c:45:2b:05:ab:41:3e:e6:11:29:ec:20:c2:b5:51:4f:54:4d: 56:de:d3:d0:08:a0:b1:26:03:4a:a8:ad:3a:20:15:84:42:53: 3b:48:a6:88:ef:7a:e9:04:67:ff:a0:02:2c:d6:fa:59:ed:f3: 05:0d:75:76:7b:d7:7d:48:85:f6:82:25:06:46:d3:58:76:ff: c2:6c:31:0e:2b:1d:19:00:a0:14:91:a2:52:39:51:c6:b7:63: ac:d8:a8:cf:61:3d:12:59:23:fe:89:64:d3:64:a7:86:1b:f7: 63:af:87:46:5f:52:d9:d6:c1:07:df:c8:1f:a6:73:48:4a:f7: 37:e9:4b:c4:ad:d0:7c:b8:97:6b:a3:6e:01:58:2d:2d:79:1f: 71:ba:d6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx QTRDREQwODIwHhcNMjUwNDAzMDAyNDM2WhcNMjUwNDEwMDAyNDM2WjAYMRYwFAYD VQQDEw02N2VkZDU0NC02Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbK+X9G67rx5qKzORijt9htAW0GL78j6fw3YXySEEXoOVsGXG7jBmGaQvFJB 5nwQSe55bDe3ZSjl+6vl0mQ3gfUCdmy0gX1gCcF/U2Sr7EOFmDbrdEf81fWKnV1B TVWVm0IZ7SwrUTrJaHcod/ERoE7qZyGaD1bMGs1rpUIJ1kJkyzvPLINpvDdMxIey IR8XHCYmtrQB2qjQdtVtfBB4z1lLxT/YsrHyl4/pAo/rPenEE35WFylHCUJow/8Z HXkJhQV4wZMRffPiMjYYcmV7VsP5Ivl3i5iFJShPlvgcG4qGZLmwQhiIe3skofE+ T2c3ewVGVhsg2E5KDgsO8aGFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzEFnzY TixJTIArjbUu0XuVCcAhMB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjQyOC8zNUVCMTM0ODVERDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBj V3NXbEtxeTRVcUFhVE4wSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8BF4vdcU/je9u+J4Oj3ZrjRdH3XjOzBYAcFmxuKZaUzyk+lZH+dsI /wIJNLGtI09idxDMwAENcm95kmUxDY/NRneboK9fQHNn0aNeAciXKdJ6Fb9AOzf5 bRX2Qg6RxSmLuNbELVraJPQE6hAcRSsFq0E+5hEp7CDCtVFPVE1W3tPQCKCxJgNK qK06IBWEQlM7SKaI73rpBGf/oAIs1vpZ7fMFDXV2e9d9SIX2giUGRtNYdv/CbDEO Kx0ZAKAUkaJSOVHGt2Os2KjPYT0SWSP+iWTTZKeGG/djr4dGX1LZ1sEH38gfpnNI Svc36UvErdB8uJdro24BWC0teR9xutal -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:56 2025 by rpki-client