$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: 2wHHOPTVwUSB3uHvP2zJ8DiLrRLYmu2QweN9fr9cR0U= Subject key identifier: A9:7C:A7:65:11:74:E2:68:B9:AD:CC:2B:7F:AE:5E:A3:D2:20:73:79 Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: 48 Signing time: Fri 25 Apr 2025 06:25:26 +0000 Manifest this update: Fri 25 Apr 2025 06:25:26 +0000 Manifest next update: Fri 02 May 2025 06:25:26 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: W9c79sADhwaZ1knTbI0/T/x1QI/TOckgHmgTMu5fnJ0=) 2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: 46zNjtnLZ5ywrRRPOzjWlNv+erVogDzKd0OwWv6xC4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: Apr 25 06:25:26 2025 GMT Not After : May 2 06:25:26 2025 GMT Subject: CN=680b2ad6-a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:88:af:a9:6b:07:58:9c:ef:00:b8:fb:b3: 5e:91:66:8d:57:e1:f2:5e:94:53:9e:75:48:0a:9e: d4:e7:04:3d:9b:b4:49:55:5b:0f:df:6a:0e:1b:db: 79:b6:6a:a9:24:58:04:3a:2a:ee:dd:df:0f:b5:cc: 5a:41:00:50:d4:51:c0:fe:a9:dd:05:8b:30:d8:02: 24:1e:d0:d9:32:15:ed:cc:d3:2a:5d:cf:d4:02:8e: cf:d7:7c:1d:10:bc:65:e6:09:60:d9:31:9c:20:ef: ef:d3:d3:ea:a2:4b:ea:34:c4:e0:db:d1:c4:4e:82: 59:20:c5:76:e2:ac:2f:c0:87:1e:2f:b5:55:a4:0b: b3:83:fe:c1:81:41:eb:5f:3a:9f:1d:26:ce:97:43: c0:3f:ca:4f:8c:12:57:53:e1:f3:48:bd:55:9f:09: af:ad:09:8e:31:16:cc:4c:5f:e2:01:93:94:98:1d: cd:cd:2b:90:03:a9:a3:d3:57:47:06:fc:6c:3d:54: cd:87:ce:04:e5:1e:9d:c0:04:d1:5b:04:38:96:43: c0:28:86:af:ab:a1:ae:82:fa:2a:d1:35:82:b5:de: 2a:ee:90:9d:cf:a0:1b:37:d7:67:e1:46:4e:24:e3: e8:ef:dc:9a:f1:a0:3e:54:2a:23:91:6e:a5:e8:a3: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:A7:65:11:74:E2:68:B9:AD:CC:2B:7F:AE:5E:A3:D2:20:73:79 X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:7c:16:c5:55:30:05:d2:42:a9:38:24:4b:34:6e:25:5a: a0:77:ec:40:e0:26:95:7c:cc:b7:83:d9:d4:66:8e:f9:35:64: 21:64:ed:bd:50:1a:d4:67:bf:71:33:d3:41:df:2d:6a:a9:d7: 4f:f2:e1:f7:84:24:95:46:e2:c4:13:0d:a2:d4:44:9e:7b:32: 3c:d8:dd:f2:d2:64:41:ab:ae:11:04:5b:b8:42:34:b6:12:ed: 9b:39:02:35:f3:db:40:45:13:60:d9:32:49:f2:80:cd:b3:58: 2b:6c:2f:c7:ce:46:39:f5:33:92:a3:45:71:98:93:22:61:a6: 59:f6:0b:7a:ab:50:9c:f3:e9:6f:40:09:ac:64:ab:97:63:6d: 25:ea:1c:e0:93:cd:f2:45:41:6e:7e:62:20:e8:0a:75:a9:80: 67:06:db:7a:de:4b:0b:0c:d3:4c:1f:e4:e4:a4:75:ff:ca:9c: 89:29:41:e2:64:cf:32:83:e3:65:ae:19:bb:2d:93:37:08:f1: e0:dc:e1:21:ce:e7:3b:76:67:7c:12:15:2d:29:0f:ad:e8:4c: 22:93:6b:3f:68:9e:a3:f3:b7:54:f6:8a:ff:d4:77:b5:1c:e1: 73:b5:a8:23:66:16:f2:6f:a0:fb:3b:5b:eb:5b:1a:0e:15:31: aa:93:76:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUVGODExMC8GA1UEBRMoNTZDNjkzMDVCNUVCQTU0MjU1NUQ4Qzc4QzU2MUFCN0E2 Q0QxQUEyQzAeFw0yNTA0MjUwNjI1MjZaFw0yNTA1MDIwNjI1MjZaMBgxFjAUBgNV BAMTDTY4MGIyYWQ2LWE0ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI7oivqWsHWJzvALj7s16RZo1X4fJelFOedUgKntTnBD2btElVWw/fag4b23m2 aqkkWAQ6Ku7d3w+1zFpBAFDUUcD+qd0FizDYAiQe0NkyFe3M0ypdz9QCjs/XfB0Q vGXmCWDZMZwg7+/T0+qiS+o0xODb0cROglkgxXbirC/Ahx4vtVWkC7OD/sGBQetf Op8dJs6XQ8A/yk+MEldT4fNIvVWfCa+tCY4xFsxMX+IBk5SYHc3NK5ADqaPTV0cG /Gw9VM2HzgTlHp3ABNFbBDiWQ8Aohq+roa6C+irRNYK13irukJ3PoBs312fhRk4k 4+jv3JrxoD5UKiORbqXoo8m3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqXynZRF0 4mi5rcwrf65eo9Igc3kwHwYDVR0jBBgwFoAUVsaTBbXrpUJVXYx4xWGremzRqiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUY4Lzk3OTlFNkQwQkJD NDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnNhVEJiWHJwVUpWWFl4NHhXR3JlbXpScWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RUY4Lzk3OTlFNkQwQkJDNDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVK VlhZeDR4V0dyZW16UnFpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ29fBbFVTAF0kKpOCRLNG4lWqB37EDgJpV8zLeD2dRmjvk1ZCFk7b1Q GtRnv3Ez00HfLWqp10/y4feEJJVG4sQTDaLURJ57MjzY3fLSZEGrrhEEW7hCNLYS 7Zs5AjXz20BFE2DZMknygM2zWCtsL8fORjn1M5KjRXGYkyJhpln2C3qrUJzz6W9A Caxkq5djbSXqHOCTzfJFQW5+YiDoCnWpgGcG23reSwsM00wf5OSkdf/KnIkpQeJk zzKD42WuGbstkzcI8eDc4SHO5zt2Z3wSFS0pD63oTCKTaz9onqPzt1T2iv/Ud7Uc 4XO1qCNmFvJvoPs7W+tbGg4VMaqTdkI= -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:01 2025 by rpki-client