$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: C8s1YBd9ixrfGCCHlHVJZcJtn1O9blw/sI+UVyFJH5U= Subject key identifier: 28:10:3E:9F:2A:B2:1B:4C:CE:B7:CB:B8:D5:9A:95:78:D6:29:54:4D Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 0A4F Signing time: Thu 24 Apr 2025 19:49:35 +0000 Manifest this update: Thu 24 Apr 2025 19:49:34 +0000 Manifest next update: Thu 01 May 2025 19:49:34 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: pdSAXc7fhTTMgiWYfomIqMpzkHG80wCxAKZa8TBagsU=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Validity Not Before: Apr 24 19:49:34 2025 GMT Not After : May 1 19:49:34 2025 GMT Subject: CN=680a95ce-ff69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:23:ab:33:9b:67:45:43:8d:26:f4:c0:6a: d4:77:de:03:c2:88:e5:64:07:60:1e:e7:7f:93:a4: 0c:64:22:57:af:9c:85:20:c5:fd:36:74:2b:a5:a0: 4c:8c:24:a4:56:40:45:8c:51:12:f9:30:b8:ca:76: 6d:93:f4:dc:35:08:f4:08:a5:d8:14:fb:21:bd:ff: 0e:53:56:90:58:db:89:94:86:41:d9:e6:ce:54:7a: af:d6:c4:56:6f:ae:6c:2b:2b:63:74:e7:40:d0:73: d7:fb:da:b5:2a:71:4e:ff:e9:01:bf:0a:78:dd:01: 2e:60:5c:18:23:4b:63:25:4e:fb:54:65:da:0d:ea: 10:01:a7:9d:fb:17:cd:26:d7:13:a8:30:5c:ba:d5: 7c:30:4d:f6:78:6e:f9:7b:52:a8:58:bf:61:33:b6: 02:ab:f3:fc:e8:f5:b7:fb:30:e1:6b:0a:e2:67:05: 95:3c:65:0f:cf:83:ca:af:fa:f1:5b:a1:b5:a0:34: e5:e2:6b:65:4b:86:a6:21:a5:c7:b9:81:4a:22:56: c8:b2:e6:91:9a:37:e6:db:8b:82:1d:ec:4b:ad:eb: 7b:5f:e8:35:57:bb:0d:f4:63:d4:14:4f:cf:30:25: 0b:3e:79:d7:3f:d2:58:36:06:61:66:ec:7f:41:2e: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:3E:9F:2A:B2:1B:4C:CE:B7:CB:B8:D5:9A:95:78:D6:29:54:4D X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c2:bb:09:0a:78:65:8f:7e:f0:a6:2e:76:f2:14:07:6b:c5: 35:5d:2e:a6:f5:5b:fd:d4:6a:7a:59:5a:8d:dc:c1:cf:44:ed: 36:af:ed:3e:39:1d:6f:f6:25:bd:d2:4a:6a:28:ac:82:8b:c5: af:2a:f9:ae:e6:bb:0f:ba:b5:a1:d9:d0:2e:99:d7:96:21:2a: 3b:ae:9e:31:40:47:78:63:12:8f:ab:2e:25:54:e6:0e:8d:3a: 9c:d2:fb:82:16:f3:8e:ae:cb:ad:6d:84:9c:7c:2a:ee:06:56: c6:a1:1d:27:99:a6:76:5a:c6:41:d4:4a:c0:05:ca:38:4f:e8: f1:97:05:09:57:ac:3a:bb:a3:1e:99:0b:b1:9c:02:b5:cc:fa: 95:86:ca:42:a1:96:f0:28:5e:c3:22:5f:1f:96:b1:47:8e:e7: 87:a4:37:e6:d4:6e:28:e7:5d:7c:5f:bc:82:5c:d1:87:e2:a4: b2:cc:ae:39:e3:d3:b1:06:c2:8c:c7:57:85:31:a1:d9:3e:66: cf:58:11:f0:51:00:43:34:af:92:52:f4:93:17:b7:26:0f:70: 28:e1:0a:68:ab:d5:74:66:d8:82:4b:94:0f:8c:a2:01:4e:07: 7b:ed:64:3d:88:36:17:a1:18:7d:d6:47:f3:c3:0b:72:68:ae: b8:ad:2b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjUwNDI0MTk0OTM0WhcNMjUwNTAxMTk0OTM0WjAYMRYwFAYD VQQDEw02ODBhOTVjZS1mZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxckjqzObZ0VDjSb0wGrUd94DwojlZAdgHud/k6QMZCJXr5yFIMX9NnQrpaBM jCSkVkBFjFES+TC4ynZtk/TcNQj0CKXYFPshvf8OU1aQWNuJlIZB2ebOVHqv1sRW b65sKytjdOdA0HPX+9q1KnFO/+kBvwp43QEuYFwYI0tjJU77VGXaDeoQAaed+xfN JtcTqDBcutV8ME32eG75e1KoWL9hM7YCq/P86PW3+zDhawriZwWVPGUPz4PKr/rx W6G1oDTl4mtlS4amIaXHuYFKIlbIsuaRmjfm24uCHexLret7X+g1V7sN9GPUFE/P MCULPnnXP9JYNgZhZux/QS74YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgQPp8q shtMzrfLuNWalXjWKVRNMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnwrsJCnhlj37wpi528hQHa8U1XS6m9Vv91Gp6WVqN3MHPRO02r+0+ OR1v9iW90kpqKKyCi8WvKvmu5rsPurWh2dAumdeWISo7rp4xQEd4YxKPqy4lVOYO jTqc0vuCFvOOrsutbYScfCruBlbGoR0nmaZ2WsZB1ErABco4T+jxlwUJV6w6u6Me mQuxnAK1zPqVhspCoZbwKF7DIl8flrFHjueHpDfm1G4o5118X7yCXNGH4qSyzK45 49OxBsKMx1eFMaHZPmbPWBHwUQBDNK+SUvSTF7cmD3Ao4Qpoq9V0ZtiCS5QPjKIB Tgd77WQ9iDYXoRh91kfzwwtyaK64rSuZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:55 2025 by rpki-client