$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: rXjEazUSp0n/HackE3NeylXUa9AW/qH51lXhc6AUefM= Subject key identifier: 9B:48:70:93:50:8E:6C:E9:71:40:8D:8B:60:66:8F:52:A6:9D:DB:47 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0D6A Signing time: Thu 24 Apr 2025 17:56:47 +0000 Manifest this update: Thu 24 Apr 2025 17:56:46 +0000 Manifest next update: Thu 01 May 2025 17:56:46 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: xjaZaB6LFbvJI0EZD7V2VYP8HYMYVHGteMmD4tn37C4=) 2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: VdJNFDaYIS+GL9qtkVFNMbcche+I8od1o1L3BRBSv5A=) 3: 8EB36E60E6FE11EE90BD3C1FC4F9AE02.roa (hash: JtyRZnFwPCNWdefnQqVRxz9abXZRf2IOClL/TIIj6MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3450 (0xd7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Apr 24 17:56:46 2025 GMT Not After : May 1 17:56:46 2025 GMT Subject: CN=680a7b5e-5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:a6:7a:59:b9:8e:fd:60:37:9d:f6:fc:25: c1:80:f9:16:28:87:f4:a2:96:f9:71:62:e3:c6:61: 0d:ba:0f:0a:59:53:16:11:23:72:ad:5a:6f:2c:de: 8f:49:7e:a5:e6:3f:03:ba:bb:69:9c:f5:b4:d7:85: 08:2a:eb:eb:e3:5f:4b:de:2a:21:51:48:d6:ed:f0: 44:0e:e7:9f:e7:d2:d7:39:a0:8f:a8:d5:cb:61:ca: 10:46:3c:a7:16:03:2b:ff:ef:83:a1:5e:9a:42:79: 3b:2b:d4:d5:6b:ab:76:a0:45:ed:22:27:12:68:e0: 86:dc:68:c8:ad:d1:58:1c:07:e4:f4:20:13:ed:cf: 22:bd:5a:84:71:e9:4e:09:24:9f:8c:7b:90:ef:3c: e3:21:c3:95:29:fe:46:a3:47:ce:fa:46:aa:8e:86: c2:65:0a:cd:43:e4:ec:66:9e:6a:08:f0:e8:12:5c: 8b:05:cb:16:dc:31:a2:ba:cb:89:a8:32:f8:87:c9: 2a:2f:0a:da:9b:c5:ed:58:d9:b4:5d:fa:d3:de:5b: 07:d5:86:ef:2e:ff:8b:b4:dc:0c:34:47:c6:a6:2f: dd:94:73:ae:5f:1c:47:63:fe:59:6d:d4:66:3d:0e: 72:87:a8:a8:80:af:09:3c:1d:be:51:bc:05:6f:5e: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:70:93:50:8E:6C:E9:71:40:8D:8B:60:66:8F:52:A6:9D:DB:47 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:3f:19:a1:b8:53:42:aa:58:9e:ca:52:75:fd:a5:8b:3b: 5a:e9:cf:d5:a1:80:3d:46:99:60:73:5c:70:6b:a4:2c:07:bd: 35:f4:70:a8:72:f5:03:ef:0c:ca:b3:c8:e5:79:34:b2:bb:ea: 1e:8e:1a:81:e4:99:a5:2e:16:1d:05:44:be:3a:4d:dc:1e:54: 6a:f4:ad:af:b5:32:8c:7e:8b:5b:34:07:3c:4d:1f:f5:e1:a9: 63:da:3f:7d:14:10:82:96:f6:67:df:db:d3:56:36:fd:dd:13: cc:53:6c:1e:7d:c5:d4:3a:98:f4:55:3a:7c:47:64:ad:44:7f: 43:bf:32:57:23:18:52:d5:2f:89:b9:04:0f:33:8e:09:d8:c7: d5:5a:0f:48:6b:95:ea:e8:2e:1d:bb:90:33:9a:a5:3d:a7:82: b5:42:45:90:58:08:d7:c3:3e:15:cb:67:bb:c2:91:22:e5:60: 5d:26:e1:8d:32:11:62:a4:f9:3c:7f:1d:42:72:e7:e3:12:cf: 15:61:85:55:f7:1a:f0:91:e8:e6:ad:c7:32:9c:13:a5:32:a3: e5:90:df:91:9d:2a:dd:6b:a9:20:50:b3:98:13:e9:7c:48:5c: a7:2f:57:76:5c:7a:45:d5:53:1f:73:2a:f7:c6:23:a3:cd:10: 87:dd:d2:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwNDI0MTc1NjQ2WhcNMjUwNTAxMTc1NjQ2WjAYMRYwFAYD VQQDEw02ODBhN2I1ZS01YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEimelm5jv1gN532/CXBgPkWKIf0opb5cWLjxmENug8KWVMWESNyrVpvLN6P SX6l5j8DurtpnPW014UIKuvr419L3iohUUjW7fBEDuef59LXOaCPqNXLYcoQRjyn FgMr/++DoV6aQnk7K9TVa6t2oEXtIicSaOCG3GjIrdFYHAfk9CAT7c8ivVqEcelO CSSfjHuQ7zzjIcOVKf5Go0fO+kaqjobCZQrNQ+TsZp5qCPDoElyLBcsW3DGiusuJ qDL4h8kqLwram8XtWNm0XfrT3lsH1YbvLv+LtNwMNEfGpi/dlHOuXxxHY/5ZbdRm PQ5yh6iogK8JPB2+UbwFb160PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtIcJNQ jmzpcUCNi2Bmj1KmndtHMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4PD8ZobhTQqpYnspSdf2lizta6c/VoYA9Rplgc1xwa6QsB7019HCo cvUD7wzKs8jleTSyu+oejhqB5JmlLhYdBUS+Ok3cHlRq9K2vtTKMfotbNAc8TR/1 4alj2j99FBCClvZn39vTVjb93RPMU2wefcXUOpj0VTp8R2StRH9DvzJXIxhS1S+J uQQPM44J2MfVWg9Ia5Xq6C4du5AzmqU9p4K1QkWQWAjXwz4Vy2e7wpEi5WBdJuGN MhFipPk8fx1CcufjEs8VYYVV9xrwkejmrccynBOlMqPlkN+RnSrda6kgULOYE+l8 SFynL1d2XHpF1VMfcyr3xiOjzRCH3dL/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:02 2025 by rpki-client