$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: 0EQ4ao0mz7HFMqxtCniyiKEaxXEzHBcdYUjcvp++jgA= Subject key identifier: CC:B4:AD:30:A2:14:C5:E5:27:59:CC:AE:A0:18:18:6D:71:A7:3B:4D Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 27 Signing time: Fri 25 Apr 2025 06:46:26 +0000 Manifest this update: Fri 25 Apr 2025 06:46:26 +0000 Manifest next update: Fri 02 May 2025 06:46:26 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: eePSDGa4TcF0b1QbX4u8Vnz7J7Uvo1G9aWQYpfHIiag=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: Apr 25 06:46:26 2025 GMT Not After : May 2 06:46:26 2025 GMT Subject: CN=680b2fc2-9fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:cc:14:57:5c:47:37:83:21:01:92:23:87: 67:78:31:d8:53:26:03:0d:c6:9f:a5:a9:5c:de:d3: 40:4b:75:60:91:5e:0a:43:ea:13:e1:ac:74:d5:e5: 51:78:f3:a3:1d:70:5e:b1:97:58:d1:79:0b:9a:f2: e4:a0:03:f8:3f:cb:8a:3a:f8:5f:6c:ec:1e:5b:a3: 07:ad:ed:96:29:c2:c7:e5:08:f4:15:3b:1a:fd:2f: 57:50:07:7a:ba:b8:11:e2:e0:31:e2:76:42:25:4f: 02:44:f9:cb:b5:6c:a9:14:6e:d9:47:5b:98:9b:a0: de:f1:9f:f3:ef:a5:10:e6:f7:c1:bd:f5:8d:dc:90: a1:46:5d:e5:ce:91:91:eb:25:6a:5d:92:8d:95:81: 60:68:c4:fa:22:f4:66:39:f7:fa:22:cb:bb:20:39: ce:90:8b:bf:6b:9f:85:4c:6b:13:ea:bd:31:f7:38: ec:2b:7d:12:8c:10:01:b2:9d:b8:f4:21:63:8f:f3: 6d:4f:39:b2:b6:96:0f:bd:dd:29:50:9d:73:62:74: 88:68:ea:ed:1e:56:c6:f7:37:83:79:27:28:48:12: 84:cb:96:10:c1:36:d5:c5:eb:1a:ad:a0:52:3d:31: 4a:27:2a:e5:dc:52:16:28:a8:78:f6:49:31:76:2c: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:AD:30:A2:14:C5:E5:27:59:CC:AE:A0:18:18:6D:71:A7:3B:4D X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5b:ae:40:27:2b:fd:be:8e:4a:a4:23:da:69:01:2c:c9:a4: 55:00:5e:9c:2f:a7:a8:fa:ec:61:76:ea:a9:17:84:51:5c:9c: 9b:7c:cc:07:c1:93:8c:67:9a:83:26:35:f3:ca:66:48:74:5e: 2a:38:5c:4b:fb:41:46:75:d3:2a:8a:e4:c2:e1:a4:3c:d3:c5: 52:19:95:eb:39:d0:41:04:74:89:12:c0:ae:eb:84:1e:e7:58: 95:08:61:2b:87:64:ef:c6:bb:64:0e:9f:33:6c:15:f6:7c:15: d1:cb:f4:b5:d9:e3:b1:2f:87:a7:1b:b6:fc:75:fe:0e:1d:25: a9:e5:5d:78:32:24:7a:0e:fa:2b:ff:63:be:79:98:6d:44:7d: 29:57:c2:b7:1a:16:05:b5:6f:94:eb:13:e3:c9:92:b1:78:fe: 9c:e2:4b:4d:ad:f0:ee:07:75:52:d7:27:b2:a7:39:f1:76:5a: 90:3e:8d:12:69:7d:9d:46:a2:1d:0e:31:ee:7c:1d:2d:cc:c6: f2:91:4c:85:83:76:d3:1a:08:bf:ec:c7:b2:53:d5:2c:a0:95: 67:43:ff:0d:44:69:44:38:91:8a:ea:97:b6:2f:69:f3:57:e9: d1:1b:b4:7d:67:5a:ed:48:22:f7:f3:22:28:e4:49:fd:bc:96: 64:89:8b:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTA0MjUwNjQ2MjZaFw0yNTA1MDIwNjQ2MjZaMBgxFjAUBgNV BAMTDTY4MGIyZmMyLTlmZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeQswUV1xHN4MhAZIjh2d4MdhTJgMNxp+lqVze00BLdWCRXgpD6hPhrHTV5VF4 86MdcF6xl1jReQua8uSgA/g/y4o6+F9s7B5bowet7ZYpwsflCPQVOxr9L1dQB3q6 uBHi4DHidkIlTwJE+cu1bKkUbtlHW5iboN7xn/PvpRDm98G99Y3ckKFGXeXOkZHr JWpdko2VgWBoxPoi9GY59/oiy7sgOc6Qi79rn4VMaxPqvTH3OOwrfRKMEAGynbj0 IWOP821PObK2lg+93SlQnXNidIho6u0eVsb3N4N5JyhIEoTLlhDBNtXF6xqtoFI9 MUonKuXcUhYoqHj2STF2LBvRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzLStMKIU xeUnWcyuoBgYbXGnO00wHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACBbrkAnK/2+jkqkI9ppASzJpFUAXpwvp6j67GF26qkXhFFcnJt8zAfB k4xnmoMmNfPKZkh0Xio4XEv7QUZ10yqK5MLhpDzTxVIZles50EEEdIkSwK7rhB7n WJUIYSuHZO/Gu2QOnzNsFfZ8FdHL9LXZ47Evh6cbtvx1/g4dJanlXXgyJHoO+iv/ Y755mG1EfSlXwrcaFgW1b5TrE+PJkrF4/pziS02t8O4HdVLXJ7KnOfF2WpA+jRJp fZ1Goh0OMe58HS3MxvKRTIWDdtMaCL/sx7JT1SyglWdD/w1EaUQ4kYrql7YvafNX 6dEbtH1nWu1IIvfzIijkSf28lmSJiwA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:19 2025 by rpki-client