$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json) Hash identifier: BWBj/9+tilVXD7Coxwi49H3Nry/DKJgYjzvyDm7UP7w= Subject key identifier: C2:CC:CE:15:94:55:60:94:A7:C1:9A:64:25:4D:EC:CE:0B:46:95:D8 Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft Manifest number: 012A Signing time: Sat 03 May 2025 04:11:35 +0000 Manifest this update: Sat 03 May 2025 04:11:34 +0000 Manifest next update: Sat 10 May 2025 04:11:34 +0000 Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: hNtDeq60ImmAgcBJRDtizgxOz3KzbyqxkNDAJY98sAM=) 2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: tr6zyJGh7+1q2ybxGoLN0xTOQqNRAsC2+oBUs/Woa0Y=) 3: EE44E774314411EF956C0046C4F9AE02.roa (hash: RuueBAzkzHj3V8fqwlyaa9eFSpNJ4wgOoJ0+Jq+BXus=) 4: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: zTFd6R54T3NlCmkGgnrlEJM5la1RNIWxE66Q49nYSZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: May 3 04:11:34 2025 GMT Not After : May 10 04:11:34 2025 GMT Subject: CN=68159776-b932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:e3:73:d8:09:80:86:7e:85:58:6a:d9:36: 0a:6b:fd:8a:25:f5:5e:73:82:b5:af:8c:5f:1c:40: 70:fa:85:8c:99:ef:9a:81:4e:d3:e9:08:ef:0a:69: 06:af:43:ab:8b:67:5a:02:d4:15:2f:54:2e:76:77: b0:14:ef:0c:4e:67:2d:44:60:a6:fb:4d:6d:d9:d6: c9:7a:e3:d3:1e:9d:38:99:53:0e:1a:33:14:98:fc: 48:b7:b6:9a:10:d9:a2:20:44:42:76:ac:ed:52:96: b8:12:21:66:9e:e7:2a:ec:bb:45:d9:fa:96:d6:e7: 7d:41:79:e4:9c:56:85:08:43:3d:8a:f0:18:2b:88: c4:8c:78:9a:60:b5:d9:83:10:de:79:62:cd:45:e1: 65:36:0d:d6:9f:0c:6b:67:1a:c7:b7:0b:f5:50:84: b6:70:2c:11:64:af:c0:1f:6d:57:b0:8f:77:3a:72: 1c:2f:b2:e6:f7:76:32:89:41:87:9a:cb:11:14:19: 2d:61:7e:4d:bb:24:db:b4:2b:96:5b:ed:ed:d5:b0: 1a:c2:40:e5:29:a5:0e:16:7b:5d:ec:eb:40:49:28: 4a:f4:7d:67:e6:ae:0a:12:2e:75:18:c5:01:3f:83: f4:a4:99:ad:2a:fd:9d:b9:4f:41:aa:08:33:54:18: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CC:CE:15:94:55:60:94:A7:C1:9A:64:25:4D:EC:CE:0B:46:95:D8 X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:56:36:3f:94:23:a5:9b:aa:40:c5:bd:0e:fd:b3:22:d3:c4: ed:79:fa:92:46:85:6c:db:66:a1:45:33:99:78:0f:a5:c8:b0: 67:16:ae:cb:28:ae:51:65:57:02:22:be:94:ec:78:0b:12:f2: 24:6e:1f:d4:2c:b1:5d:d7:20:3f:66:03:43:a3:ed:6a:a5:d4: 20:bf:53:ae:6a:ab:07:fa:b0:7c:d9:0d:af:9a:1a:2c:09:f4: de:27:a7:d0:77:5b:1f:ef:af:c4:f9:1e:ed:b3:5c:71:9d:fa: 24:11:a1:a0:5e:68:a7:46:db:70:9f:e3:74:a8:ac:c6:ff:b6: 59:81:a0:b6:fd:6d:cb:8f:9c:18:d5:0a:a5:e5:80:fd:d4:c0: fb:39:12:f4:be:a8:f9:00:82:e1:8b:9e:61:8d:f7:3c:e5:ae: cf:8c:df:77:1e:a5:31:5b:ce:9e:c9:62:91:ff:0f:99:2d:49: 18:1e:d9:67:bf:34:05:d0:90:fd:fd:0b:16:ef:46:1b:38:d4: 1c:bb:35:20:5d:3c:72:2f:a6:69:5a:4f:f4:df:92:72:6b:f1: 33:01:e0:d8:2f:59:97:83:37:1d:69:5b:8b:7b:da:9c:04:09: b6:be:36:af:4a:4a:7c:b1:d0:f8:63:86:5a:df:01:39:54:89: 02:1f:a4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx MDMxM0JCQ0EwHhcNMjUwNTAzMDQxMTM0WhcNMjUwNTEwMDQxMTM0WjAYMRYwFAYD VQQDEw02ODE1OTc3Ni1iOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9zjc9gJgIZ+hVhq2TYKa/2KJfVec4K1r4xfHEBw+oWMme+agU7T6QjvCmkG r0Ori2daAtQVL1QudnewFO8MTmctRGCm+01t2dbJeuPTHp04mVMOGjMUmPxIt7aa ENmiIERCdqztUpa4EiFmnucq7LtF2fqW1ud9QXnknFaFCEM9ivAYK4jEjHiaYLXZ gxDeeWLNReFlNg3WnwxrZxrHtwv1UIS2cCwRZK/AH21XsI93OnIcL7Lm93YyiUGH mssRFBktYX5NuyTbtCuWW+3t1bAawkDlKaUOFntd7OtASShK9H1n5q4KEi51GMUB P4P0pJmtKv2duU9BqggzVBhCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLMzhWU VWCUp8GaZCVN7M4LRpXYMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjlBNS9FMjlFNzM2MDdBMTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtN RjZtQ1VRbTd1M0lRTVR1OG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYVjY/lCOlm6pAxb0O/bMi08TtefqSRoVs22ahRTOZeA+lyLBnFq7L KK5RZVcCIr6U7HgLEvIkbh/ULLFd1yA/ZgNDo+1qpdQgv1OuaqsH+rB82Q2vmhos CfTeJ6fQd1sf76/E+R7ts1xxnfokEaGgXminRttwn+N0qKzG/7ZZgaC2/W3Lj5wY 1Qql5YD91MD7ORL0vqj5AILhi55hjfc85a7PjN93HqUxW86eyWKR/w+ZLUkYHtln vzQF0JD9/QsW70YbONQcuzUgXTxyL6ZpWk/035Jya/EzAeDYL1mXgzcdaVuLe9qc BAm2vjavSkp8sdD4Y4Za3wE5VIkCH6Sb -----END CERTIFICATE-----Generated at Sat May 3 17:18:17 2025 by rpki-client