$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: HlBrZuLZEBjzWf+vwN+0es5tGAk5VIlLoYcF8QDtjwg= Subject key identifier: E3:EC:F1:75:6F:E9:0B:C9:E1:D3:92:4A:33:AE:B7:E7:A3:B8:96:02 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: EC Signing time: Fri 25 Apr 2025 04:27:22 +0000 Manifest this update: Fri 25 Apr 2025 04:27:22 +0000 Manifest next update: Fri 02 May 2025 04:27:22 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: 7Y3+mXzlv1jJ5MjzeLsFPv4QjP6FIf1/RAz1iDw5mcI=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Apr 25 04:27:22 2025 GMT Not After : May 2 04:27:22 2025 GMT Subject: CN=680b0f2a-ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:06:8d:f3:f0:cd:39:ac:14:e5:8c:26:e7: d5:fc:58:2a:a1:1e:04:45:ca:3c:5d:70:2f:55:b1: 55:42:16:11:04:07:2e:ef:87:b5:94:d5:7d:d3:ae: c6:3a:ec:e0:6e:93:79:4c:93:dc:80:b5:68:ad:de: 74:c0:d0:f5:a0:8d:af:50:28:b9:d9:d9:05:2e:16: c0:7a:f6:d0:d5:2e:06:62:e1:eb:eb:5e:8b:69:ae: 3f:14:52:e4:8f:80:dd:d9:2a:5b:d3:fd:8f:27:76: 07:da:55:49:b3:71:28:41:46:11:ce:2e:c1:9a:34: 23:e9:29:d0:bf:6b:36:a4:a1:a5:fc:eb:95:b9:cc: df:66:3c:85:84:56:73:f0:8b:9a:26:00:e9:e3:91: 05:f9:a6:b8:e5:f4:6c:7a:91:f9:44:b7:02:c5:d2: 41:b0:89:2f:1c:e5:03:9e:19:c2:de:5c:98:48:ed: bf:76:28:1b:66:02:72:a4:b1:51:90:b4:2a:b6:9e: a4:29:52:c7:63:8c:1e:ac:f2:70:55:30:8b:30:10: 01:8f:a3:e4:65:91:3f:26:af:ba:73:b0:f5:4a:96: 32:ed:47:ba:8b:da:02:23:43:e2:8b:68:49:e8:d5: 09:11:23:c1:3a:21:8c:83:9c:98:12:28:3a:23:51: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EC:F1:75:6F:E9:0B:C9:E1:D3:92:4A:33:AE:B7:E7:A3:B8:96:02 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fa:a7:d2:c6:50:64:e5:e9:a3:59:2f:aa:21:85:4e:42:ac: ce:13:20:ba:04:e7:4c:59:5b:bc:d5:1e:25:a5:48:e7:f9:74: 2c:ea:c9:5e:bd:f1:5e:44:c8:43:56:08:d0:f2:7a:bc:86:d5: 36:4e:b4:e3:9f:03:b2:98:0d:b8:f6:12:6b:f6:4a:29:fd:a7: 90:da:ea:f0:af:17:57:3f:64:60:a9:74:f0:2e:6b:f0:e0:ae: 71:56:15:07:49:8a:22:07:66:b9:29:db:c6:89:e8:1d:6f:99: 28:0d:03:86:7e:ed:80:c4:9b:23:9b:38:ad:43:dc:1d:9f:cd: ae:52:f7:18:4d:65:69:8e:3a:d3:bb:ea:84:20:55:a9:53:bb: 5a:2a:b0:3a:42:7c:ec:0e:30:83:03:13:3a:a9:c4:35:1e:a9: 0a:4d:0b:0a:60:a2:ce:d9:d9:8e:5a:7b:d9:c5:9c:44:2d:d8: 96:2f:8e:79:9d:51:d9:59:f5:ee:60:64:bf:0a:47:51:35:e7: ea:c4:6b:67:7b:80:7e:82:91:e5:19:44:f4:8b:18:2b:4f:e2: df:cc:70:b0:71:a5:e1:14:84:d4:25:f9:9c:4e:c6:0f:0e:6c: a8:32:af:8a:12:36:74:65:54:e9:a3:99:6f:e8:df:c0:ef:12: 30:a1:3b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNDI1MDQyNzIyWhcNMjUwNTAyMDQyNzIyWjAYMRYwFAYD VQQDEw02ODBiMGYyYS1kZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EwGjfPwzTmsFOWMJufV/FgqoR4ERco8XXAvVbFVQhYRBAcu74e1lNV9067G OuzgbpN5TJPcgLVord50wND1oI2vUCi52dkFLhbAevbQ1S4GYuHr616Laa4/FFLk j4Dd2Spb0/2PJ3YH2lVJs3EoQUYRzi7BmjQj6SnQv2s2pKGl/OuVuczfZjyFhFZz 8IuaJgDp45EF+aa45fRsepH5RLcCxdJBsIkvHOUDnhnC3lyYSO2/digbZgJypLFR kLQqtp6kKVLHY4werPJwVTCLMBABj6PkZZE/Jq+6c7D1SpYy7Ue6i9oCI0Pii2hJ 6NUJESPBOiGMg5yYEig6I1G64wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPs8XVv 6QvJ4dOSSjOut+ejuJYCMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+qfSxlBk5emjWS+qIYVOQqzOEyC6BOdMWVu81R4lpUjn+XQs6sle vfFeRMhDVgjQ8nq8htU2TrTjnwOymA249hJr9kop/aeQ2urwrxdXP2RgqXTwLmvw 4K5xVhUHSYoiB2a5KdvGiegdb5koDQOGfu2AxJsjmzitQ9wdn82uUvcYTWVpjjrT u+qEIFWpU7taKrA6QnzsDjCDAxM6qcQ1HqkKTQsKYKLO2dmOWnvZxZxELdiWL455 nVHZWfXuYGS/CkdRNefqxGtne4B+gpHlGUT0ixgrT+LfzHCwcaXhFITUJfmcTsYP DmyoMq+KEjZ0ZVTpo5lv6N/A7xIwoTvl -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:43 2025 by rpki-client