$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft File: VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json) Hash identifier: GjPN82uhgIyhEh2eZ51siZH2tq/m80wCuPGVz7k1V1c= Subject key identifier: FA:6F:2B:B7:E6:B1:FB:1F:09:98:FB:08:5D:1E:FA:F3:FE:6B:BA:23 Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft Manifest number: 0673 Signing time: Thu 24 Apr 2025 22:11:22 +0000 Manifest this update: Thu 24 Apr 2025 22:11:22 +0000 Manifest next update: Thu 01 May 2025 22:11:22 +0000 Files and hashes: 1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: MMQbxtUK7E9CPO8c3Cusg+FvSg+/9/bjVNsmcpX+FpQ=) 2: 766689D21EB111F0ADA9B872C4F9AE02.roa (hash: jo+62bvnD8mjSHhUGwNwlfo2qu5IakOWUAY3Ax2OYvQ=) 3: E2C265C67BE311EB9D056E55C4F9AE02.roa (hash: LKmFIY/VL9TC2X1Z1fj1EzR3us51npHXwJLid536ToM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Validity Not Before: Apr 24 22:11:22 2025 GMT Not After : May 1 22:11:22 2025 GMT Subject: CN=680ab70a-b914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:5f:0d:f2:5e:f8:15:36:92:23:7f:cc:22: b2:82:83:0f:63:0e:a2:26:27:92:75:bd:c6:04:da: e5:17:95:32:95:d0:cb:e0:9e:f2:08:3b:66:d3:3d: f5:54:f5:53:97:ba:68:f9:f4:7a:67:55:4a:f8:13: 18:2c:fe:d7:41:80:53:4f:62:23:5d:4c:d5:c5:20: fd:83:97:99:c7:c9:2d:07:0d:91:5e:b7:24:05:6b: b1:ff:d1:94:27:8d:90:4e:4b:e2:cd:97:6d:79:ce: 36:68:93:e2:d8:0f:13:f0:14:6c:86:0f:a7:76:10: 5e:48:79:1c:dc:de:f4:65:4a:84:8c:df:d0:1c:f8: a9:ef:75:e2:b4:57:a6:a3:2c:a9:f4:78:dd:f4:40: 82:a8:9b:4f:d1:af:90:17:08:5b:12:c3:33:28:40: dd:62:e4:06:e5:f3:79:2a:35:35:47:03:0d:3c:71: af:3e:b3:50:66:c3:85:1a:43:07:59:66:fe:7e:e0: f0:7b:d2:67:5e:1b:8a:42:4b:ba:b0:26:04:2f:5c: 88:21:e5:8b:3a:fc:a4:e7:1d:ec:e1:d2:fa:d0:7d: b9:db:80:03:25:85:a9:a2:c0:5e:57:7e:f3:c0:0b: 14:40:45:15:b2:c9:fe:66:d1:5b:e1:7a:65:d6:e8: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6F:2B:B7:E6:B1:FB:1F:09:98:FB:08:5D:1E:FA:F3:FE:6B:BA:23 X509v3 Authority Key Identifier: keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8c:76:1d:92:bc:f4:0f:db:d7:6c:7b:23:04:eb:51:ad:b3: 69:da:83:c2:73:1a:18:89:97:44:3b:7c:71:bc:9a:ee:ef:29: 0e:c5:dd:91:05:96:82:3d:7b:a2:9f:e9:25:8c:88:2c:96:44: 14:00:11:0e:c5:88:f1:5f:25:84:89:d0:6a:86:f0:85:a0:51: 47:c2:23:26:6b:fa:28:80:fb:c0:d9:7b:8d:c8:2f:14:38:40: 2a:01:3f:47:a2:ea:e7:42:dc:9b:d9:92:bc:d5:a6:bc:e6:7e: 27:c6:f6:af:53:71:79:87:e0:eb:6d:8c:2f:35:39:4a:d7:53: 80:b5:37:91:c4:67:68:0a:a5:4d:f8:d8:96:2a:5b:d7:3e:57: f9:3b:12:a1:92:b7:e6:fd:e1:53:3f:47:1c:d6:bf:c4:ea:35: 55:fa:68:3f:e7:9e:94:e4:f4:2f:d9:3c:03:2a:03:71:47:78: ec:ba:74:65:9f:92:f2:36:01:42:5b:73:41:bb:b1:f5:c2:6c: 4f:c6:fe:fd:ce:ba:83:6a:67:db:67:46:f4:bc:20:67:0b:42: 3d:31:88:05:1b:34:9c:1f:13:71:6a:ca:60:58:90:10:d2:fd: 41:5a:cc:dd:f1:80:bd:cb:b2:b3:4c:92:87:e3:d7:4a:34:88: 91:0d:db:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz MkEyMDU4MjAwHhcNMjUwNDI0MjIxMTIyWhcNMjUwNTAxMjIxMTIyWjAYMRYwFAYD VQQDEw02ODBhYjcwYS1iOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSVfDfJe+BU2kiN/zCKygoMPYw6iJieSdb3GBNrlF5UyldDL4J7yCDtm0z31 VPVTl7po+fR6Z1VK+BMYLP7XQYBTT2IjXUzVxSD9g5eZx8ktBw2RXrckBWux/9GU J42QTkvizZdtec42aJPi2A8T8BRshg+ndhBeSHkc3N70ZUqEjN/QHPip73XitFem oyyp9Hjd9ECCqJtP0a+QFwhbEsMzKEDdYuQG5fN5KjU1RwMNPHGvPrNQZsOFGkMH WWb+fuDwe9JnXhuKQku6sCYEL1yIIeWLOvyk5x3s4dL60H2524ADJYWposBeV37z wAsUQEUVssn+ZtFb4Xpl1uhufwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpvK7fm sfsfCZj7CF0e+vP+a7ojMB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUY4OS9EMzVBQTVBQTdCRTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVK aS03MlphcWN2ZjB5b2dXQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLjHYdkrz0D9vXbHsjBOtRrbNp2oPCcxoYiZdEO3xxvJru7ykOxd2R BZaCPXuin+kljIgslkQUABEOxYjxXyWEidBqhvCFoFFHwiMma/oogPvA2XuNyC8U OEAqAT9HournQtyb2ZK81aa85n4nxvavU3F5h+DrbYwvNTlK11OAtTeRxGdoCqVN +NiWKlvXPlf5OxKhkrfm/eFTP0cc1r/E6jVV+mg/556U5PQv2TwDKgNxR3jsunRl n5LyNgFCW3NBu7H1wmxPxv79zrqDamfbZ0b0vCBnC0I9MYgFGzScHxNxaspgWJAQ 0v1BWszd8YC9y7KzTJKH49dKNIiRDdvs -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:40 2025 by rpki-client