$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: 00g0mXZTrIh0JHdZGIesK0C4bCDM5GAntAeVHFx75P8= Subject key identifier: B6:20:4E:2E:1F:CB:3C:AC:51:93:BE:96:FE:8A:EE:86:8A:BC:59:D6 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 07F6 Signing time: Sat 26 Apr 2025 20:40:54 +0000 Manifest this update: Sat 26 Apr 2025 20:40:53 +0000 Manifest next update: Sat 03 May 2025 20:40:53 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: 5rRFzGnH3doJc/Pr0tNsuDyXUmjTm0NCT/k+Qnguut0=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Apr 26 20:40:53 2025 GMT Not After : May 3 20:40:53 2025 GMT Subject: CN=680d44d5-7eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:e9:9d:2e:bb:3b:38:bf:15:ca:40:be:75: 2a:3f:3a:9c:b9:98:5d:78:21:42:0a:43:7a:70:16: 0d:ff:ff:bd:8b:1a:6f:ac:f9:37:ba:a5:b5:d9:4f: 86:a2:96:dc:31:ba:f8:79:ba:a9:db:e7:c9:8a:59: 4e:43:db:7a:f7:21:9b:c1:94:5e:fb:64:13:53:70: 03:ab:b3:e7:83:aa:43:68:48:73:ae:2a:5d:d2:af: 58:01:15:23:5f:39:c0:f3:96:a4:31:d7:b6:ad:36: 09:9b:b2:eb:c0:73:f1:1c:30:ea:3f:ea:95:bd:3f: f1:04:be:62:4a:4b:c9:6f:f9:8b:1d:d6:af:59:1e: c7:76:e7:2f:a0:6b:69:17:28:9d:dc:f0:c7:db:81: fc:10:54:08:a0:61:c1:b8:77:47:00:f9:ad:33:38: f3:d5:a1:0a:6f:31:bc:0a:1b:cf:01:5a:d4:2f:d9: e9:b0:f9:bb:07:b2:74:40:b0:aa:26:3d:76:30:f3: 7a:38:aa:c2:e8:a7:4f:99:f2:14:76:1a:1d:7a:ae: dc:ef:19:25:bc:02:8c:5f:d7:67:e5:2f:e3:02:bd: d7:de:3a:e6:a0:49:1c:22:3d:5d:0e:ed:6e:96:6f: ca:3f:de:54:3f:8f:d5:00:a9:ec:14:54:41:85:2f: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:4E:2E:1F:CB:3C:AC:51:93:BE:96:FE:8A:EE:86:8A:BC:59:D6 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f1:30:c2:47:c2:4c:d6:43:1b:6a:0d:98:77:1e:18:19:5c: c7:ff:5c:88:07:ed:23:1f:2a:06:c5:09:3d:e3:4c:c3:80:b5: 40:22:0b:39:43:95:4b:cb:bc:12:88:04:03:bc:30:da:4b:ab: 78:1b:dc:f3:de:2f:d8:16:4d:ca:3c:a3:f5:20:d0:d5:da:a2: 9c:f4:9f:c0:c3:0f:f4:e9:1a:37:5c:ec:90:89:6f:c0:67:c3: ee:de:4a:94:8e:d2:e9:df:1f:07:23:6b:ba:5a:f1:9b:a3:95: 89:e8:fb:8e:af:f5:b4:45:ed:39:34:f1:34:de:db:ea:09:3a: 15:1e:08:d6:1b:68:80:1b:25:98:6a:dd:d5:1a:a2:72:0c:d4: 1d:d9:2c:a2:dc:e3:15:59:a4:9c:aa:cf:95:81:d7:3b:07:6f: 69:79:d2:9e:67:83:c6:cf:e2:5c:f1:09:e3:c7:55:77:01:5f: 31:aa:65:5a:ea:ae:26:0d:3d:c8:94:b6:93:0f:2b:c6:e1:32: df:a8:fb:20:87:d4:9f:fc:41:ba:d2:fe:76:0d:4c:d3:ce:d5: 31:93:2c:c2:0b:b9:b4:1b:99:2e:11:e6:d1:de:95:84:4f:07: a5:4d:66:c6:0f:87:cf:dc:2a:6d:85:25:5c:2c:16:f0:d9:d2: 58:d5:c4:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUwNDI2MjA0MDUzWhcNMjUwNTAzMjA0MDUzWjAYMRYwFAYD VQQDEw02ODBkNDRkNS03ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApO/pnS67Ozi/FcpAvnUqPzqcuZhdeCFCCkN6cBYN//+9ixpvrPk3uqW12U+G opbcMbr4ebqp2+fJillOQ9t69yGbwZRe+2QTU3ADq7Png6pDaEhzripd0q9YARUj XznA85akMde2rTYJm7LrwHPxHDDqP+qVvT/xBL5iSkvJb/mLHdavWR7HducvoGtp Fyid3PDH24H8EFQIoGHBuHdHAPmtMzjz1aEKbzG8ChvPAVrUL9npsPm7B7J0QLCq Jj12MPN6OKrC6KdPmfIUdhodeq7c7xklvAKMX9dn5S/jAr3X3jrmoEkcIj1dDu1u lm/KP95UP4/VAKnsFFRBhS8/3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYgTi4f yzysUZO+lv6K7oaKvFnWMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU8TDCR8JM1kMbag2Ydx4YGVzH/1yIB+0jHyoGxQk940zDgLVAIgs5 Q5VLy7wSiAQDvDDaS6t4G9zz3i/YFk3KPKP1INDV2qKc9J/Aww/06Ro3XOyQiW/A Z8Pu3kqUjtLp3x8HI2u6WvGbo5WJ6PuOr/W0Re05NPE03tvqCToVHgjWG2iAGyWY at3VGqJyDNQd2Syi3OMVWaScqs+Vgdc7B29pedKeZ4PGz+Jc8Qnjx1V3AV8xqmVa 6q4mDT3IlLaTDyvG4TLfqPsgh9Sf/EG60v52DUzTztUxkyzCC7m0G5kuEebR3pWE TwelTWbGD4fP3CpthSVcLBbw2dJY1cTo -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:47 2025 by rpki-client