$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: j7jvK/xUwxqRlWPZQFVH0IFJrPd22N2KTdaRpW5n60U= Subject key identifier: B9:B8:A2:F9:CB:4D:D3:2F:95:45:D4:82:0F:01:04:B1:65:43:39:E2 Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 0F Signing time: Wed 05 Feb 2025 06:29:16 +0000 Manifest this update: Wed 05 Feb 2025 06:29:16 +0000 Manifest next update: Wed 12 Feb 2025 06:29:16 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: bkOvEI1fg7onPhPTKx5dvAEuNtGRB4IOngOoDklH6lE=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832 Validity Not Before: Feb 5 06:29:16 2025 GMT Not After : Feb 12 06:29:16 2025 GMT Subject: CN=67a3053c-882b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:41:0d:2c:7d:98:56:79:04:00:89:cd:bc: b1:80:a7:bf:30:0e:70:f0:8b:8a:bb:0b:d7:e2:a0: 07:69:a8:f3:cb:66:cc:e8:93:48:d4:ec:00:50:55: ee:59:5d:48:8f:40:88:81:ea:30:d4:d7:3f:07:cf: 01:b8:47:fb:e5:a8:f9:b5:dc:89:fc:80:94:23:cb: 19:3c:a4:cc:77:aa:cc:7f:5d:b9:00:cc:1a:cd:9c: 8c:a4:c1:2a:a0:ae:8c:17:fc:85:97:24:19:d5:8c: 2e:26:32:41:46:dc:c2:a0:18:5e:d3:dd:69:6f:76: 47:30:9d:4e:16:20:f2:5b:0d:75:a8:f6:e5:80:ca: a7:d2:29:e4:d7:cf:cf:32:c0:42:ae:76:98:62:76: 73:39:e3:bd:05:54:c8:9f:15:e2:be:e5:62:77:61: 78:0a:43:b3:97:74:92:9f:17:54:2c:e4:07:2e:ea: ec:94:b5:f4:86:57:3b:db:09:7d:40:6f:cd:d4:17: c4:74:6e:15:30:f3:2a:a3:e9:a4:92:a8:cd:61:6c: 8b:e2:8e:45:1b:b0:b9:22:7c:90:41:ed:e2:e9:da: ff:72:84:1d:0b:4d:1f:c3:9d:82:33:2a:af:23:af: f3:e7:7b:02:97:e0:af:e4:59:70:a9:4d:b8:19:65: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B8:A2:F9:CB:4D:D3:2F:95:45:D4:82:0F:01:04:B1:65:43:39:E2 X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:86:9b:47:af:81:1b:35:05:7a:a9:90:2f:5a:c2:72:c5:ee: ab:20:fb:25:88:1c:06:d3:69:7d:d6:10:a2:78:0c:70:78:4d: 45:4f:ab:e3:41:36:a9:e6:8a:70:0f:15:ad:b8:c3:a6:a3:5c: 25:46:dc:c6:c2:5a:3a:64:5b:51:02:e3:8a:94:25:35:cf:82: c7:f3:64:16:4c:97:f8:9f:d5:57:1c:de:af:74:6e:bf:40:31: 28:5b:6b:5b:45:05:1c:c1:66:cd:6a:53:de:4d:3e:29:71:c3: 3e:21:77:79:2b:99:3a:a4:ca:cb:5a:8d:86:e1:02:ed:d4:2a: 55:1b:15:98:91:ee:32:7e:a4:17:21:62:e3:70:d9:7e:b5:b0: a9:a9:64:57:6a:7d:a5:b5:eb:35:96:34:ec:95:37:ce:9d:5e: f2:20:b2:95:00:9f:fb:85:0f:68:64:a4:6f:dc:b1:59:4d:a6: a3:5a:e3:46:63:5f:70:a6:8c:f5:38:39:a3:e7:32:f3:01:3e: 3d:1f:29:3d:58:be:4d:f5:4a:71:e3:9e:0e:15:39:73:f3:f6: 7a:d9:40:9e:06:03:6e:f6:35:f3:26:83:81:48:70:e3:e0:31: ac:4a:b0:e3:e5:e4:1f:33:29:92:d5:8c:dd:43:c9:d1:0a:d4: e7:8d:06:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTAyMDUwNjI5MTZaFw0yNTAyMTIwNjI5MTZaMBgxFjAUBgNV BAMTDTY3YTMwNTNjLTg4MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6dUENLH2YVnkEAInNvLGAp78wDnDwi4q7C9fioAdpqPPLZszok0jU7ABQVe5Z XUiPQIiB6jDU1z8HzwG4R/vlqPm13In8gJQjyxk8pMx3qsx/XbkAzBrNnIykwSqg rowX/IWXJBnVjC4mMkFG3MKgGF7T3WlvdkcwnU4WIPJbDXWo9uWAyqfSKeTXz88y wEKudphidnM5470FVMifFeK+5WJ3YXgKQ7OXdJKfF1Qs5Acu6uyUtfSGVzvbCX1A b83UF8R0bhUw8yqj6aSSqM1hbIvijkUbsLkifJBB7eLp2v9yhB0LTR/DnYIzKq8j r/PnewKX4K/kWXCpTbgZZfFFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUubii+ctN 0y+VRdSCDwEEsWVDOeIwHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqGm0evgRs1BXqpkC9awnLF7qsg+yWIHAbTaX3WEKJ4DHB4TUVPq+NB NqnminAPFa24w6ajXCVG3MbCWjpkW1EC44qUJTXPgsfzZBZMl/if1Vcc3q90br9A MShba1tFBRzBZs1qU95NPilxwz4hd3krmTqkystajYbhAu3UKlUbFZiR7jJ+pBch YuNw2X61sKmpZFdqfaW16zWWNOyVN86dXvIgspUAn/uFD2hkpG/csVlNpqNa40Zj X3CmjPU4OaPnMvMBPj0fKT1Yvk31SnHjng4VOXPz9nrZQJ4GA272NfMmg4FIcOPg MaxKsOPl5B8zKZLVjN1DydEK1OeNBks= -----END CERTIFICATE-----Generated at Thu Feb 6 07:53:12 2025 by rpki-client