$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: G6yWEpYuas7lMJDqchX97WlFH+Uwc1wziDHJAzvVq7Q= Subject key identifier: AE:EF:C7:B0:96:34:79:82:27:36:D4:62:2D:BE:44:75:67:2D:CD:5D Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3483 Signing time: Wed 12 Mar 2025 14:36:57 +0000 Manifest this update: Wed 12 Mar 2025 14:36:56 +0000 Manifest next update: Wed 19 Mar 2025 14:36:56 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: LscAIzjR2ZzawD+yuwj3P9Qirw30chLsEaAVNY3ENaU=) 2: E0AFFE78218611EF8555476BC4F9AE02.roa (hash: cjt/jzLyIkh6PDpshMiImoc4eT6q581b7EMbqraXEP4=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F Validity Not Before: Mar 12 14:36:56 2025 GMT Not After : Mar 19 14:36:56 2025 GMT Subject: CN=67d19c09-cc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:39:3c:c5:44:c6:51:46:bc:d6:4e:9c:dc: 5c:08:3e:38:7c:64:97:d3:4a:3f:0f:26:df:26:0f: 8a:7a:3e:ae:bb:fc:e4:48:3f:c9:a3:9a:d7:15:0f: 33:23:e8:82:f0:55:ec:ae:0f:90:63:9c:50:8a:44: 9d:11:95:c2:27:6a:b3:bb:bd:73:59:70:de:f7:80: 0b:45:88:f3:ac:0c:52:ae:e7:2a:a0:3d:f3:72:6e: 74:bf:f2:22:fa:69:b0:f8:1e:84:92:37:09:ce:58: 51:8a:91:8f:0d:94:59:0b:ac:7c:e9:3e:5e:fa:5e: 8b:42:39:e9:ed:5b:33:2e:cb:cd:34:c5:3a:91:08: 51:2d:7a:8c:7e:7c:0f:d3:92:d9:e3:1e:c0:3b:31: d9:a9:6d:c3:3c:4d:44:a9:12:ab:9b:5e:d0:75:6f: 17:de:2f:08:87:62:42:11:bc:96:53:1c:d3:a6:5d: af:56:0b:8b:a0:c8:7e:43:dd:18:c4:b1:97:0d:26: 2e:97:b9:96:a3:02:1e:31:af:f7:f5:70:9a:72:55: 1b:02:45:f5:8d:c2:cb:4b:2c:b8:62:87:96:d7:20: 1a:be:7a:25:fa:39:b2:c6:f8:13:44:da:f4:39:33: 7d:25:94:8a:46:6d:e0:96:b2:50:b3:d9:18:76:55: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:C7:B0:96:34:79:82:27:36:D4:62:2D:BE:44:75:67:2D:CD:5D X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1d:2f:c1:74:ed:0f:b9:cb:77:e1:74:82:de:75:a9:9f:ea: 6b:bc:55:e4:ec:58:b7:d9:0c:b8:82:dd:8e:d3:ea:87:f2:7e: bd:e2:41:a0:14:c1:84:4f:ef:bd:68:1c:a5:d8:8c:5d:14:6a: de:f1:90:f4:b6:8e:65:2f:cb:ef:33:fd:4b:09:9c:b8:e1:76: e6:37:ea:ac:5b:b6:77:52:84:ef:b3:f2:c9:4f:7f:8a:66:fd: 7b:6e:7d:e3:6f:9a:4e:c5:77:56:2e:e9:0f:31:7e:58:c7:78: 35:78:d4:dc:47:17:61:82:13:e5:67:3f:38:1b:98:1d:0c:60: 24:98:07:3e:38:db:54:61:ac:79:95:00:b3:e4:2b:ae:4a:ff: 71:8b:90:f3:7c:e4:68:76:f4:89:de:fd:0d:a0:0c:8e:9e:9f: 12:78:bc:47:9d:07:b8:97:d8:ab:36:dc:34:45:98:f2:8a:7c: 7d:f4:7b:80:66:d8:7b:65:03:ad:87:21:0a:e6:8d:44:5a:e3: 7c:c4:17:e7:3d:3f:ad:5e:71:03:4d:b1:9d:2c:4b:15:99:60: 41:9f:66:59:a6:b0:07:1e:9e:51:ed:0b:b7:dc:92:bb:01:6e: fb:24:a4:1f:f1:85:6f:91:f7:64:15:d1:3d:8b:46:00:00:f9: 14:42:9e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwMzEyMTQzNjU2WhcNMjUwMzE5MTQzNjU2WjAYMRYwFAYD VQQDEw02N2QxOWMwOS1jYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbE5PMVExlFGvNZOnNxcCD44fGSX00o/DybfJg+Kej6uu/zkSD/Jo5rXFQ8z I+iC8FXsrg+QY5xQikSdEZXCJ2qzu71zWXDe94ALRYjzrAxSrucqoD3zcm50v/Ii +mmw+B6EkjcJzlhRipGPDZRZC6x86T5e+l6LQjnp7VszLsvNNMU6kQhRLXqMfnwP 05LZ4x7AOzHZqW3DPE1EqRKrm17QdW8X3i8Ih2JCEbyWUxzTpl2vVguLoMh+Q90Y xLGXDSYul7mWowIeMa/39XCaclUbAkX1jcLLSyy4YoeW1yAavnol+jmyxvgTRNr0 OTN9JZSKRm3glrJQs9kYdlXs/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7vx7CW NHmCJzbUYi2+RHVnLc1dMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaHS/BdO0Puct34XSC3nWpn+prvFXk7Fi32Qy4gt2O0+qH8n694kGg FMGET++9aByl2IxdFGre8ZD0to5lL8vvM/1LCZy44XbmN+qsW7Z3UoTvs/LJT3+K Zv17bn3jb5pOxXdWLukPMX5Yx3g1eNTcRxdhghPlZz84G5gdDGAkmAc+ONtUYax5 lQCz5CuuSv9xi5DzfORodvSJ3v0NoAyOnp8SeLxHnQe4l9irNtw0RZjyinx99HuA Zth7ZQOthyEK5o1EWuN8xBfnPT+tXnEDTbGdLEsVmWBBn2ZZprAHHp5R7Qu33JK7 AW77JKQf8YVvkfdkFdE9i0YAAPkUQp66 -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:27 2025 by rpki-client