$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: PwA/uIJ46TXe0kC04+T7JilAGh2BBeKxnX6s9J6vjdk= Subject key identifier: E1:69:B3:7E:3A:EF:0B:47:D3:00:09:EF:7B:DF:5F:6D:BB:48:08:F7 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 0194 Signing time: Fri 25 Apr 2025 02:34:55 +0000 Manifest this update: Fri 25 Apr 2025 02:34:54 +0000 Manifest next update: Fri 02 May 2025 02:34:54 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: nDX9/WkUgRUxLI+Ih/rPMGYH4cLmVib9Yo8NoSOrgw0=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Apr 25 02:34:54 2025 GMT Not After : May 2 02:34:54 2025 GMT Subject: CN=680af4cf-5e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:e0:2b:33:4b:15:70:91:15:fc:bb:be:41: 91:c9:2f:11:fa:86:85:8b:6a:28:83:f3:96:9e:aa: c6:b8:1b:33:2e:01:e3:cd:d3:f7:90:ed:49:06:c7: 1a:d4:c9:ff:87:c1:88:24:46:12:df:a5:5e:e6:03: d9:42:d3:94:06:95:d3:a0:3e:dd:87:06:12:1a:ed: 50:9f:b5:fb:da:9d:65:9c:fa:76:f4:98:d3:21:e2: fd:89:d5:97:0b:ad:b1:2b:c2:9b:89:b6:4e:e1:8a: 72:e5:a3:a3:96:ff:44:88:b7:b0:d8:e8:85:82:46: 62:7f:c5:3d:19:2b:c4:76:bf:14:ce:56:16:be:0c: bd:08:e2:d0:d8:51:ad:f5:67:54:f8:25:09:92:ff: d0:02:33:6c:97:71:fc:8c:9b:3d:e5:bd:e7:22:67: 88:e8:b8:81:61:82:fa:21:6a:3e:86:3f:56:fe:bf: 38:1a:7c:d4:01:a0:da:1e:3e:5c:71:01:5a:dc:e9: 7f:27:9d:7a:53:22:e3:82:ff:7d:2e:68:18:01:7a: 62:96:19:5b:71:bd:eb:10:e4:7d:c9:62:d0:06:a8: 2a:64:13:6d:92:3c:b6:6b:2a:db:a2:a3:2e:2e:be: 1c:1e:29:e9:10:8d:a0:0c:ff:93:0a:6b:0e:34:c6: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:69:B3:7E:3A:EF:0B:47:D3:00:09:EF:7B:DF:5F:6D:BB:48:08:F7 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:f8:76:fd:91:96:42:2c:76:0b:fe:8f:18:a1:eb:5a:72: ce:49:40:c8:9e:64:61:7b:6b:eb:2c:37:50:24:e9:e1:cd:63: 1c:7a:e3:6e:df:ef:82:7a:74:05:68:59:d0:4e:18:16:ba:73: 9a:3a:c0:77:b3:3d:45:bd:ea:83:90:0f:8e:be:b4:e8:d9:44: 08:a3:cd:91:d1:b9:58:45:b9:4b:85:c5:95:95:1b:e3:10:70: 1e:57:b4:9f:4b:eb:b8:dd:82:d9:28:11:42:5d:5b:c6:3a:2f: e4:d7:3e:29:ed:b6:78:8e:8e:7c:5e:2d:14:0b:76:b9:f5:da: d2:7b:7f:ef:28:6b:38:88:4e:ae:70:57:76:8c:23:9f:c0:46: 4b:e9:9e:9d:5d:d0:9f:40:6e:73:f4:ea:be:fd:62:aa:ce:d0: 56:a2:16:37:9d:77:73:f4:f9:67:bd:cc:96:bf:c3:8a:8a:19: 59:57:ea:9f:97:6c:28:4d:b8:94:b4:26:d3:d1:ce:0f:2b:f6: f9:0b:70:bf:47:b8:d8:f5:f1:d1:c0:5b:76:61:5f:a9:18:de: 8c:e1:ee:30:28:32:9b:ef:46:6f:ce:68:dd:05:05:01:2d:2a: 83:14:2e:f6:99:12:62:4f:bb:8c:12:20:98:62:ab:89:de:36: aa:f3:40:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUwNDI1MDIzNDU0WhcNMjUwNTAyMDIzNDU0WjAYMRYwFAYD VQQDEw02ODBhZjRjZi01ZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjvgKzNLFXCRFfy7vkGRyS8R+oaFi2oog/OWnqrGuBszLgHjzdP3kO1JBsca 1Mn/h8GIJEYS36Ve5gPZQtOUBpXToD7dhwYSGu1Qn7X72p1lnPp29JjTIeL9idWX C62xK8KbibZO4Ypy5aOjlv9EiLew2OiFgkZif8U9GSvEdr8UzlYWvgy9COLQ2FGt 9WdU+CUJkv/QAjNsl3H8jJs95b3nImeI6LiBYYL6IWo+hj9W/r84GnzUAaDaHj5c cQFa3Ol/J516UyLjgv99LmgYAXpilhlbcb3rEOR9yWLQBqgqZBNtkjy2ayrboqMu Lr4cHinpEI2gDP+TCmsONMZpTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFps346 7wtH0wAJ73vfX227SAj3MB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJMPh2/ZGWQix2C/6PGKHrWnLOSUDInmRhe2vrLDdQJOnhzWMceuNu 3++CenQFaFnQThgWunOaOsB3sz1FveqDkA+OvrTo2UQIo82R0blYRblLhcWVlRvj EHAeV7SfS+u43YLZKBFCXVvGOi/k1z4p7bZ4jo58Xi0UC3a59drSe3/vKGs4iE6u cFd2jCOfwEZL6Z6dXdCfQG5z9Oq+/WKqztBWohY3nXdz9PlnvcyWv8OKihlZV+qf l2woTbiUtCbT0c4PK/b5C3C/R7jY9fHRwFt2YV+pGN6M4e4wKDKb70ZvzmjdBQUB LSqDFC72mRJiT7uMEiCYYquJ3jaq80DP -----END CERTIFICATE-----Generated at Sat Apr 26 05:44:33 2025 by rpki-client