$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: Sx55AkkIne55YmJwqNsOYaWxbP0Veud5w/ONm9B49Uw= Subject key identifier: D4:2C:CD:E8:29:67:E1:47:BB:EE:55:33:D8:FC:6C:1F:D9:0A:CD:15 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0753 Signing time: Sun 06 Apr 2025 21:28:18 +0000 Manifest this update: Sun 06 Apr 2025 21:28:17 +0000 Manifest next update: Sun 13 Apr 2025 21:28:17 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: YAbhlbS0/+ac0AalDlp4MB6+BCFHarIpaIBl0OG4ZfI=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: j3Mdp3VdpFJP8qi33NyGvoVivwkHNNacPK2sV9tj6Kg=) 3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: AQgiwzW9jceFccX6zBisJvL/Ao6lPHGS3Rx++rG7HtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 21:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A Validity Not Before: Apr 6 21:28:17 2025 GMT Not After : Apr 13 21:28:17 2025 GMT Subject: CN=67f2f1f1-5b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:5f:af:d0:60:1a:91:2a:22:e8:05:45:6e: 17:b7:f2:92:ce:98:cf:84:1f:14:48:a9:18:3e:09: d5:3f:67:bd:6d:88:a8:bb:85:37:b7:38:2f:a9:ae: 45:02:a5:c6:42:7e:d6:6a:90:ec:65:a9:d3:96:33: 4c:af:5e:ac:e6:55:07:ea:dd:86:a9:f3:f0:d9:79: a7:1e:23:5a:3b:fc:f6:e1:09:fa:79:9e:2f:b2:7c: d5:5b:8a:a1:d3:6e:a1:49:0e:53:77:e1:32:c1:c2: 40:2c:9c:6f:c2:6f:8b:27:d8:82:9b:c7:d4:b8:63: 82:12:36:a5:9f:1a:46:53:0a:2c:f2:27:c0:83:72: de:7c:d9:b4:ee:da:27:06:14:d3:a1:e3:a3:00:fe: 6b:04:cf:93:b4:8a:c9:27:4d:87:41:f9:c1:9f:66: f8:b5:db:07:e7:3b:64:8f:ac:17:73:57:1d:4f:ab: 67:ca:b7:12:ef:7b:e9:bf:78:12:7f:1a:0d:3b:26: 8d:a5:d7:76:97:7b:c8:c4:1b:ed:93:2a:67:f4:f6: e2:47:32:0d:21:fd:2c:61:a5:1d:41:35:c4:64:24: 3c:72:2e:29:65:93:a6:e8:b1:24:fc:0c:ff:85:1d: 9f:a2:ae:5b:7a:cf:72:e4:a5:6a:14:c4:6d:4c:78: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2C:CD:E8:29:67:E1:47:BB:EE:55:33:D8:FC:6C:1F:D9:0A:CD:15 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4a:c9:57:10:ea:93:af:45:7f:a9:fb:7a:b0:87:c8:f6:da: 4a:9b:f1:d3:46:28:0c:0b:b7:24:51:3e:e6:ce:03:2a:9e:b2: a3:47:32:3f:0a:f2:be:3c:82:8e:88:1b:1b:9b:a5:30:e3:d1: 87:8c:38:35:9b:75:8d:15:2b:51:fa:66:af:6a:ec:c0:10:79: 1f:73:f5:6c:f8:ac:d9:5d:e7:90:7e:c0:9c:f5:07:c7:8b:a1: d8:2c:13:43:73:21:79:1d:56:80:f9:46:8c:75:72:7f:bf:18: bb:fa:bc:33:0a:3f:e6:e0:77:bc:68:e8:ca:94:5c:0c:0a:67: 94:0e:0b:1d:03:71:b3:38:62:86:df:12:ac:3b:96:5c:c2:a5: 17:96:a3:d3:ee:88:b9:5f:62:f3:1d:ad:17:ac:9e:c9:f0:1e: 5e:8a:5f:b3:da:46:3d:ff:a6:f2:a7:28:80:33:4e:e0:8f:7c: a6:83:f6:75:68:ba:85:7d:43:d3:15:69:64:58:b2:7a:33:d2: ad:07:47:39:26:7e:8f:5f:6f:6a:b1:50:a3:31:f0:b1:89:9d: 6e:8b:42:91:4e:96:65:b3:0d:91:ab:53:dd:56:17:2c:1e:1d: 6d:0c:58:86:a3:02:ff:d6:06:11:0a:38:a7:dd:35:37:7d:d0: 2e:16:cf:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwNDA2MjEyODE3WhcNMjUwNDEzMjEyODE3WjAYMRYwFAYD VQQDEw02N2YyZjFmMS01YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WJfr9BgGpEqIugFRW4Xt/KSzpjPhB8USKkYPgnVP2e9bYiou4U3tzgvqa5F AqXGQn7WapDsZanTljNMr16s5lUH6t2GqfPw2XmnHiNaO/z24Qn6eZ4vsnzVW4qh 026hSQ5Td+EywcJALJxvwm+LJ9iCm8fUuGOCEjalnxpGUwos8ifAg3LefNm07ton BhTToeOjAP5rBM+TtIrJJ02HQfnBn2b4tdsH5ztkj6wXc1cdT6tnyrcS73vpv3gS fxoNOyaNpdd2l3vIxBvtkypn9PbiRzINIf0sYaUdQTXEZCQ8ci4pZZOm6LEk/Az/ hR2foq5bes9y5KVqFMRtTHifFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQszegp Z+FHu+5VM9j8bB/ZCs0VMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANSslXEOqTr0V/qft6sIfI9tpKm/HTRigMC7ckUT7mzgMqnrKjRzI/ CvK+PIKOiBsbm6Uw49GHjDg1m3WNFStR+mavauzAEHkfc/Vs+KzZXeeQfsCc9QfH i6HYLBNDcyF5HVaA+UaMdXJ/vxi7+rwzCj/m4He8aOjKlFwMCmeUDgsdA3GzOGKG 3xKsO5ZcwqUXlqPT7oi5X2LzHa0XrJ7J8B5eil+z2kY9/6bypyiAM07gj3ymg/Z1 aLqFfUPTFWlkWLJ6M9KtB0c5Jn6PX29qsVCjMfCxiZ1ui0KRTpZlsw2Rq1PdVhcs Hh1tDFiGowL/1gYRCjin3TU3fdAuFs+s -----END CERTIFICATE-----Generated at Tue Apr 8 04:09:21 2025 by rpki-client