$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: eT/PhTxKlEPIAtq/MEG2SuvRPjq9PDsnqhr9fl+uQic= Subject key identifier: 5E:E2:C2:7A:C2:9F:3C:29:85:4C:42:0F:6F:66:F2:06:8D:DD:E3:CB Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: 8A Signing time: Fri 25 Apr 2025 05:29:51 +0000 Manifest this update: Fri 25 Apr 2025 05:29:51 +0000 Manifest next update: Fri 02 May 2025 05:29:51 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: EUJ16apRc946jhxj7QThxrEptTw2YBKgm8GZRPJ06kA=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Apr 25 05:29:51 2025 GMT Not After : May 2 05:29:51 2025 GMT Subject: CN=680b1dcf-0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:2d:1b:87:70:ba:5e:a2:01:ed:31:14:48: 12:59:a8:b0:1c:42:17:95:3f:8a:ff:3b:d0:d7:a0: 77:d0:a4:8d:52:88:9a:fc:6b:79:11:83:a2:65:7c: 92:d4:ce:34:a2:16:71:a9:e2:d6:b4:82:98:8d:c4: cd:65:2a:8b:be:5e:b4:1c:22:42:74:a2:40:7e:58: 97:3b:d6:a6:44:8b:80:3f:33:ce:e4:d6:45:9c:8d: da:a0:2c:fb:5a:6d:f8:c8:b4:d9:39:35:b4:9e:1d: 3f:9d:fb:13:36:25:d5:cb:16:3d:c2:74:4b:2a:a7: 48:cc:4c:63:3b:6d:9e:26:1e:c6:03:28:8b:cd:18: f6:f6:52:5d:ab:a3:da:72:44:39:58:31:10:69:07: a3:e0:33:0c:1b:ad:f8:4b:10:8d:62:f1:a1:22:c4: ee:40:dc:3c:dd:a1:e9:82:9b:a5:90:2c:8d:b8:cc: d2:28:ea:24:9b:ae:35:dd:97:f5:a1:0d:8f:66:17: b1:75:b7:f5:c6:02:93:2b:1e:cb:4e:3f:27:48:2c: 10:0a:a3:fe:42:f7:61:60:8f:9d:a9:39:35:2a:6c: 88:29:10:5c:b1:5d:2c:ae:b9:b6:13:b2:7e:2c:c7: 94:55:5a:55:d8:6b:45:16:2a:ae:5e:12:c8:5a:3b: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:C2:7A:C2:9F:3C:29:85:4C:42:0F:6F:66:F2:06:8D:DD:E3:CB X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:59:d5:ec:99:6f:88:d0:06:5f:39:a1:04:3c:72:d6:e4: d6:9d:cb:e9:88:c5:af:61:7e:16:39:6a:7b:27:ff:46:10:d4: 6a:77:09:16:11:8a:79:d0:47:6f:bb:04:d6:4a:58:8d:18:3c: 18:7a:d7:39:78:f6:0b:a5:fe:e2:77:12:d7:08:b3:ae:54:5f: 96:55:70:46:41:1e:10:bc:e1:c1:78:66:36:a0:cb:b6:84:46: e6:e1:c1:79:22:7d:b4:76:52:02:19:99:55:25:f1:ce:b3:96: ce:3d:13:13:c4:32:18:39:57:bb:59:54:fe:fd:89:d7:b0:f5: 7b:d1:e0:b5:1c:29:21:bf:31:d8:87:b4:9a:71:6c:70:17:d7: 02:44:48:ea:e4:23:95:ad:3e:56:79:bf:b0:ec:24:62:2f:e3: 50:fd:61:24:14:04:ed:13:fe:66:ea:e4:ee:92:d4:31:99:fd: 6e:eb:db:20:de:26:6d:2c:a1:61:6f:8d:e9:15:3f:5d:76:d7: a4:5e:19:49:11:54:fd:f7:99:43:ce:b4:53:59:5f:17:30:bc: 95:ae:cf:a9:72:36:70:d1:bb:3c:37:cd:b2:37:8a:de:39:90: a9:05:8e:0b:db:fe:70:6c:8e:09:6a:39:04:be:d5:d1:b1:ad: 72:30:b6:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNDI1MDUyOTUxWhcNMjUwNTAyMDUyOTUxWjAYMRYwFAYD VQQDEw02ODBiMWRjZi0wYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviQtG4dwul6iAe0xFEgSWaiwHEIXlT+K/zvQ16B30KSNUoia/Gt5EYOiZXyS 1M40ohZxqeLWtIKYjcTNZSqLvl60HCJCdKJAfliXO9amRIuAPzPO5NZFnI3aoCz7 Wm34yLTZOTW0nh0/nfsTNiXVyxY9wnRLKqdIzExjO22eJh7GAyiLzRj29lJdq6Pa ckQ5WDEQaQej4DMMG634SxCNYvGhIsTuQNw83aHpgpulkCyNuMzSKOokm6413Zf1 oQ2PZhexdbf1xgKTKx7LTj8nSCwQCqP+QvdhYI+dqTk1KmyIKRBcsV0srrm2E7J+ LMeUVVpV2GtFFiquXhLIWjtxBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7iwnrC nzwphUxCD29m8gaN3ePLMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7y1nV7JlviNAGXzmhBDxy1uTWncvpiMWvYX4WOWp7J/9GENRqdwkW EYp50EdvuwTWSliNGDwYetc5ePYLpf7idxLXCLOuVF+WVXBGQR4QvOHBeGY2oMu2 hEbm4cF5In20dlICGZlVJfHOs5bOPRMTxDIYOVe7WVT+/YnXsPV70eC1HCkhvzHY h7SacWxwF9cCREjq5COVrT5Web+w7CRiL+NQ/WEkFATtE/5m6uTuktQxmf1u69sg 3iZtLKFhb43pFT9ddtekXhlJEVT995lDzrRTWV8XMLyVrs+pcjZw0bs8N82yN4re OZCpBY4L2/5wbI4JajkEvtXRsa1yMLbn -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:58 2025 by rpki-client