$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: n9PsCL3hDPLFMp/qKi0Luh0QKMKvyxxyJPARH7GpWyw= Subject key identifier: 11:E2:26:37:72:9B:87:75:34:2D:44:CE:95:A6:F2:AA:F8:D8:93:AD Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 0126 Signing time: Sat 31 May 2025 04:18:14 +0000 Manifest this update: Sat 31 May 2025 04:18:13 +0000 Manifest next update: Sat 07 Jun 2025 04:18:13 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: B03HOFVBS7+6Stu7k0dzultsdVVlI0OX7Uqk2LMMt1o=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: May 31 04:18:13 2025 GMT Not After : Jun 7 04:18:13 2025 GMT Subject: CN=683a8305-b8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:5e:22:2a:d9:73:f2:b6:3b:0c:27:9e:0f: 3f:7b:27:5a:e3:10:ff:86:a9:b2:50:b5:fb:63:8b: 86:49:36:b1:43:0a:c7:98:fe:4f:32:c1:3b:e3:4e: cf:72:e4:58:4a:4b:7c:4f:00:1d:8d:c1:7d:d2:c9: f8:0f:53:fe:95:aa:4e:5e:88:cc:57:4a:5e:90:5a: b5:fd:2e:16:89:9a:b0:b8:86:4e:cc:c6:1a:e3:bb: 25:ff:87:bd:32:58:53:6d:4a:c4:a0:dc:ab:f8:a0: f0:81:4a:85:82:92:41:a3:51:52:04:1c:81:76:cd: 2a:5b:05:f8:cb:20:a8:5f:60:bd:36:a2:a9:0e:d7: 09:15:80:90:77:71:7b:51:7f:b6:5f:b3:fb:91:fb: ba:b0:09:3e:be:35:7c:a7:be:6a:a2:67:11:6a:c8: dd:b7:85:03:eb:2f:5e:61:aa:bc:67:4e:f4:fd:0e: 88:31:76:23:a4:82:1b:8f:6f:2c:84:cb:e3:27:1e: bd:9d:c8:0c:07:f9:07:dc:de:6b:04:ea:6e:be:35: d9:f1:e3:47:9b:23:3e:92:66:92:0d:e8:44:ee:0f: 3f:36:29:56:98:e1:d1:11:dd:3e:72:2a:23:e8:23: 59:47:46:5a:e6:ae:ff:58:40:d3:a6:ac:06:7c:ba: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:26:37:72:9B:87:75:34:2D:44:CE:95:A6:F2:AA:F8:D8:93:AD X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:d0:a9:76:5f:76:ab:34:27:56:19:01:92:58:2f:02:1f: c9:bb:ae:7c:63:fd:77:70:6e:42:e4:c0:4a:3b:38:42:4c:53: 75:af:51:b2:0a:36:2f:cd:07:17:d5:26:8a:d9:49:fa:1a:09: 03:e8:05:1b:10:e4:bd:14:90:51:09:e4:a2:49:c8:ea:97:49: e0:73:45:ab:e2:5f:be:70:ee:9a:35:37:b8:ee:8c:ad:29:f4: e2:d0:ed:0c:1f:e5:74:bc:54:4d:64:db:77:e4:be:bb:3d:fa: 12:12:7b:68:ac:1b:cc:21:96:02:56:40:71:f3:1b:b6:71:60: 09:bf:92:f9:e9:98:bb:60:43:ad:a7:59:89:f8:f7:bd:20:47: ef:17:a3:d6:67:3f:15:5d:01:b6:30:a1:44:18:da:62:dc:d1: ad:e3:f0:7a:44:3c:af:1d:9c:75:9b:b8:df:49:9e:fa:d3:66: e9:b6:40:9b:b0:a9:0c:74:d1:45:20:0c:fb:4e:55:4c:87:db: 54:6f:38:e6:69:a9:46:9e:33:13:81:2a:30:51:23:f1:a0:13: 97:85:12:b0:4c:09:cb:19:d0:78:46:1a:b8:e8:8b:3f:96:c5: b2:64:a4:f2:99:15:43:85:8d:c9:27:b3:11:cf:3e:a5:e8:af: 54:62:b8:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNTMxMDQxODEzWhcNMjUwNjA3MDQxODEzWjAYMRYwFAYD VQQDEw02ODNhODMwNS1iOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucVeIirZc/K2Owwnng8/eyda4xD/hqmyULX7Y4uGSTaxQwrHmP5PMsE7407P cuRYSkt8TwAdjcF90sn4D1P+lapOXojMV0pekFq1/S4WiZqwuIZOzMYa47sl/4e9 MlhTbUrEoNyr+KDwgUqFgpJBo1FSBByBds0qWwX4yyCoX2C9NqKpDtcJFYCQd3F7 UX+2X7P7kfu6sAk+vjV8p75qomcRasjdt4UD6y9eYaq8Z070/Q6IMXYjpIIbj28s hMvjJx69ncgMB/kH3N5rBOpuvjXZ8eNHmyM+kmaSDehE7g8/NilWmOHREd0+cioj 6CNZR0Za5q7/WEDTpqwGfLq0BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHiJjdy m4d1NC1EzpWm8qr42JOtMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTRNCpdl92qzQnVhkBklgvAh/Ju658Y/13cG5C5MBKOzhCTFN1r1Gy CjYvzQcX1SaK2Un6GgkD6AUbEOS9FJBRCeSiScjql0ngc0Wr4l++cO6aNTe47oyt KfTi0O0MH+V0vFRNZNt35L67PfoSEntorBvMIZYCVkBx8xu2cWAJv5L56Zi7YEOt p1mJ+Pe9IEfvF6PWZz8VXQG2MKFEGNpi3NGt4/B6RDyvHZx1m7jfSZ7602bptkCb sKkMdNFFIAz7TlVMh9tUbzjmaalGnjMTgSowUSPxoBOXhRKwTAnLGdB4Rhq46Is/ lsWyZKTymRVDhY3JJ7MRzz6l6K9UYrj7 -----END CERTIFICATE-----Generated at Sat May 31 17:02:22 2025 by rpki-client