$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: xjwlcbHyg0YfHX6VP6IsWJstciUwQ9HRJeI5edUEEnw= Subject key identifier: EF:EA:88:84:05:19:4A:56:C2:38:F6:7B:88:5E:FE:63:3A:6F:11:F4 Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 0570 Signing time: Thu 24 Apr 2025 23:11:16 +0000 Manifest this update: Thu 24 Apr 2025 23:11:16 +0000 Manifest next update: Thu 01 May 2025 23:11:16 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: DB7Rtd8m1dPdaNkB0oCtORMIJtXV5yywqdXoaskmzME=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: Apr 24 23:11:16 2025 GMT Not After : May 1 23:11:16 2025 GMT Subject: CN=680ac514-3613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:ec:cd:a9:53:7c:25:c2:3f:b6:6d:30:7a: 80:36:ed:5c:ca:55:0f:77:44:f8:84:ad:36:af:84: 9a:e2:51:7c:7e:e3:6e:74:9a:b5:25:51:e5:e5:8b: 4f:0a:82:f2:42:c9:bc:24:f8:e6:b6:5e:72:82:a7: f4:3c:35:bc:65:f3:36:3f:dd:8a:ce:4b:14:a8:c3: e9:bf:a0:09:c6:a5:b5:c3:10:83:36:f6:f6:a1:0c: 60:3f:17:8d:52:07:e4:9c:31:70:67:63:08:8b:a5: d8:c6:99:8e:7e:ad:aa:0c:c7:fa:64:09:1e:49:0d: 44:99:c4:0d:a4:f3:14:86:82:3c:b4:89:c0:c4:e0: 43:68:00:1c:0d:1f:eb:1e:06:29:e6:31:12:41:5d: 38:18:5b:76:23:5e:ac:03:ec:38:20:b7:04:f2:89: 70:fe:00:a2:30:38:cc:90:08:b6:b4:c3:18:d6:05: 2f:8c:e3:fe:c7:c9:18:ad:3a:9a:35:c1:b4:d9:5e: 0a:8c:2f:a5:33:a1:5a:9b:e6:7d:ee:9b:0e:74:fe: 58:41:10:42:98:3e:6b:25:ee:28:2b:8d:2e:d1:26: 78:ba:8d:7f:25:51:ef:f9:4b:91:ff:4b:85:cc:4f: e3:18:6c:d0:71:be:a3:19:81:80:ce:3b:95:9a:33: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:88:84:05:19:4A:56:C2:38:F6:7B:88:5E:FE:63:3A:6F:11:F4 X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e4:95:ff:45:e3:3b:49:2d:34:f8:d6:b5:71:e6:2a:ba:0a: 2e:21:eb:90:24:56:b4:d7:d1:ac:bf:6e:8f:5c:24:91:9c:75: 8a:ce:01:d5:0f:a1:16:20:2f:2d:25:1f:f4:65:00:81:b6:39: 65:07:89:46:81:84:fe:b0:ec:45:86:6b:ba:73:9d:74:cf:ff: 7f:95:a8:28:d5:f5:8e:72:35:e2:52:ea:98:a0:d6:8f:bb:d5: a5:fc:53:d7:7f:da:00:45:42:8b:07:6b:45:2e:40:7e:05:bb: c9:e7:af:e1:cb:f6:43:c1:31:0b:8d:72:5b:c1:41:6e:4f:98: 1a:d2:ab:2c:09:45:e9:5a:6c:6e:a3:c3:b5:fe:8e:d4:6d:5f: b9:32:31:f2:f4:7d:ca:83:75:f5:73:77:37:d2:93:b5:d0:49: ef:c6:d6:8b:17:7a:32:59:5f:50:f7:a2:fa:61:78:23:7d:fa: 10:2a:d2:ae:05:de:58:57:38:d1:4a:16:f1:e9:e4:f8:3c:de: c7:fc:e0:52:64:2c:06:cd:16:b7:fc:82:69:d4:02:70:72:27: 91:35:34:73:88:28:4d:51:1d:78:fb:3c:f6:c0:d8:f8:57:3e: d0:f1:4d:6f:27:41:8a:6f:e2:7e:5e:12:8f:ae:83:fd:49:1f: b5:2e:ea:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjUwNDI0MjMxMTE2WhcNMjUwNTAxMjMxMTE2WjAYMRYwFAYD VQQDEw02ODBhYzUxNC0zNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJzszalTfCXCP7ZtMHqANu1cylUPd0T4hK02r4Sa4lF8fuNudJq1JVHl5YtP CoLyQsm8JPjmtl5ygqf0PDW8ZfM2P92KzksUqMPpv6AJxqW1wxCDNvb2oQxgPxeN UgfknDFwZ2MIi6XYxpmOfq2qDMf6ZAkeSQ1EmcQNpPMUhoI8tInAxOBDaAAcDR/r HgYp5jESQV04GFt2I16sA+w4ILcE8olw/gCiMDjMkAi2tMMY1gUvjOP+x8kYrTqa NcG02V4KjC+lM6Fam+Z97psOdP5YQRBCmD5rJe4oK40u0SZ4uo1/JVHv+UuR/0uF zE/jGGzQcb6jGYGAzjuVmjOuXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/qiIQF GUpWwjj2e4he/mM6bxH0MB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW5JX/ReM7SS00+Na1ceYqugouIeuQJFa019Gsv26PXCSRnHWKzgHV D6EWIC8tJR/0ZQCBtjllB4lGgYT+sOxFhmu6c510z/9/lago1fWOcjXiUuqYoNaP u9Wl/FPXf9oARUKLB2tFLkB+BbvJ56/hy/ZDwTELjXJbwUFuT5ga0qssCUXpWmxu o8O1/o7UbV+5MjHy9H3Kg3X1c3c30pO10EnvxtaLF3oyWV9Q96L6YXgjffoQKtKu Bd5YVzjRShbx6eT4PN7H/OBSZCwGzRa3/IJp1AJwcieRNTRziChNUR14+zz2wNj4 Vz7Q8U1vJ0GKb+J+XhKProP9SR+1Luod -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:24 2025 by rpki-client