$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: yg7dpC+CpTZeyQhVQ7tIWMVL98jMkUm1sG6smG00+cQ= Subject key identifier: D0:1E:A8:21:34:E9:6B:5A:A2:53:0E:F5:7F:A6:1D:D8:1C:A8:A9:21 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 0144 Signing time: Fri 25 Apr 2025 03:27:59 +0000 Manifest this update: Fri 25 Apr 2025 03:27:59 +0000 Manifest next update: Fri 02 May 2025 03:27:59 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: nN5/CkwFvxCxZeE6KTQm4SWu5XoSCG7rShFY8fD7a+4=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Apr 25 03:27:59 2025 GMT Not After : May 2 03:27:59 2025 GMT Subject: CN=680b013f-45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:d6:d0:7f:c3:0a:17:a5:27:25:5b:4d:87: a4:87:81:0e:29:62:49:6e:1a:db:90:69:45:ac:18: f1:f6:26:fe:64:ca:45:5f:14:74:18:ff:37:dc:7a: f6:9a:d4:85:7d:e9:e2:fb:8d:5f:6c:96:ba:bb:86: 14:5e:60:aa:ae:9b:5a:98:c9:a7:60:16:e5:5c:35: ef:05:a0:b1:46:9f:ed:cc:29:b8:7a:73:07:96:5d: 13:06:22:e6:11:b0:2c:a5:b7:bf:3f:10:2f:6a:25: d6:23:a0:86:b6:b9:22:c5:5a:97:b4:b7:90:d0:e4: 4e:7d:6c:2e:c9:16:67:01:d9:7e:c3:75:72:8b:76: c0:29:b5:72:95:ad:7c:37:25:e0:78:2b:5b:a2:09: 77:07:a4:57:7b:52:f8:2b:fa:64:32:0f:44:1f:b0: 9c:45:74:89:d5:01:48:3d:8e:fa:8b:95:b1:a8:68: 0b:97:3e:17:0b:23:2f:82:16:9c:43:3c:58:df:6f: 5e:81:e4:13:cc:9a:38:f7:aa:58:78:5b:86:6b:04: 4b:68:a4:49:6d:45:0a:fd:ae:92:af:2d:35:21:bf: 45:d6:b6:7d:8e:05:c1:fe:f0:7d:ad:eb:b2:8c:f3: bb:96:c4:96:6a:c6:41:91:72:68:0a:df:db:e1:4a: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:A8:21:34:E9:6B:5A:A2:53:0E:F5:7F:A6:1D:D8:1C:A8:A9:21 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c3:65:77:22:89:0c:e6:80:30:ae:72:f2:f5:bf:33:99:4f: 0c:39:a9:1c:e3:31:ca:c0:8f:03:b7:ea:a5:bd:2b:1b:cb:2c: 72:d0:12:7a:17:09:d5:08:f1:10:26:e4:30:b6:fe:3f:28:04: c2:15:ac:3d:cb:4e:61:f3:f0:28:8d:a8:c3:89:cd:64:2b:c2: 50:2d:30:1a:41:ad:41:85:f4:e7:75:56:3b:91:da:a1:ff:6a: b8:c5:43:f4:28:36:52:87:8f:ac:21:2f:ba:87:b8:32:73:84: 9c:24:84:d9:e9:d4:ea:fa:08:94:4c:19:ce:2d:2e:97:21:ed: 7f:f4:25:54:48:15:ed:95:be:a1:d0:45:95:32:8f:af:a5:99: 93:1e:a5:fa:07:bb:76:8e:96:5f:62:a7:16:48:ce:6f:34:be: 69:18:47:bf:53:d7:39:c2:f8:8f:04:99:87:39:f6:fa:d7:4b: fe:b9:ea:8c:7d:7a:92:55:33:e7:23:67:b1:83:95:aa:33:3e: e3:a3:ef:cd:07:d4:02:72:2c:9f:bd:3f:0a:4c:db:50:5b:e6: 9e:ad:bb:e5:b6:e8:f7:b0:90:2f:c7:3f:bd:fc:79:e2:07:d5: d0:91:a2:08:49:42:d6:1b:3f:9e:6b:85:20:07:ac:15:53:11: 87:94:aa:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwNDI1MDMyNzU5WhcNMjUwNTAyMDMyNzU5WjAYMRYwFAYD VQQDEw02ODBiMDEzZi00NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbLW0H/DChelJyVbTYekh4EOKWJJbhrbkGlFrBjx9ib+ZMpFXxR0GP833Hr2 mtSFfeni+41fbJa6u4YUXmCqrptamMmnYBblXDXvBaCxRp/tzCm4enMHll0TBiLm EbAspbe/PxAvaiXWI6CGtrkixVqXtLeQ0OROfWwuyRZnAdl+w3Vyi3bAKbVyla18 NyXgeCtbogl3B6RXe1L4K/pkMg9EH7CcRXSJ1QFIPY76i5WxqGgLlz4XCyMvghac QzxY329egeQTzJo496pYeFuGawRLaKRJbUUK/a6Sry01Ib9F1rZ9jgXB/vB9reuy jPO7lsSWasZBkXJoCt/b4UpBQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAeqCE0 6WtaolMO9X+mHdgcqKkhMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNw2V3IokM5oAwrnLy9b8zmU8MOakc4zHKwI8Dt+qlvSsbyyxy0BJ6 FwnVCPEQJuQwtv4/KATCFaw9y05h8/AojajDic1kK8JQLTAaQa1BhfTndVY7kdqh /2q4xUP0KDZSh4+sIS+6h7gyc4ScJITZ6dTq+giUTBnOLS6XIe1/9CVUSBXtlb6h 0EWVMo+vpZmTHqX6B7t2jpZfYqcWSM5vNL5pGEe/U9c5wviPBJmHOfb610v+ueqM fXqSVTPnI2exg5WqMz7jo+/NB9QCciyfvT8KTNtQW+aerbvltuj3sJAvxz+9/Hni B9XQkaIISULWGz+ea4UgB6wVUxGHlKpq -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:03 2025 by rpki-client