$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: pCRL9TS1TuVe/GJABaSDnrHLLYrhHt16xWHWm4pQJnQ= Subject key identifier: B1:AE:BA:6D:D4:9C:E7:7F:28:43:90:5A:34:49:5F:C0:B1:78:F9:D6 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 075F Signing time: Sat 26 Apr 2025 21:28:01 +0000 Manifest this update: Sat 26 Apr 2025 21:28:00 +0000 Manifest next update: Sat 03 May 2025 21:28:00 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: O8M+D+DrIPCEUJh2R7Q7Wq0XJ9cf7HNioYzk0439V7o=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: baTkvqYLLObVVgzBHPInngFn1RI2tT6fsgLIq4Wf1Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Apr 26 21:28:00 2025 GMT Not After : May 3 21:28:00 2025 GMT Subject: CN=680d4fe1-0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:06:74:b7:8d:e9:22:54:9d:ac:99:d5:de: 99:38:32:bd:e6:f8:8a:25:b5:a9:3a:10:b9:d7:c7: d0:76:92:71:20:7b:16:6e:c1:85:60:d0:22:46:12: 1c:a8:fc:0e:75:ea:00:91:69:84:da:fb:29:40:a5: aa:5e:76:81:3c:3a:1b:8d:ec:7d:c5:d6:8d:71:5c: bd:5e:e1:bc:b4:57:70:b3:72:54:3f:47:b1:0d:70: 2f:69:b7:22:bb:b7:e4:ba:b4:d5:c2:c1:b8:96:7f: 07:57:02:39:ed:9b:99:e3:89:cc:b3:04:39:3a:02: 04:d2:55:88:4d:79:22:42:22:c3:a3:8f:95:79:6c: d8:7e:f2:20:7a:9d:17:0d:0d:b7:e2:15:7e:fc:e6: 72:c0:87:bb:a1:94:dd:b9:4d:c7:f6:17:c1:e1:a2: d0:c6:59:18:fb:19:4f:37:24:af:5e:88:67:5a:ee: 72:98:92:ea:ee:93:36:0e:9f:62:73:13:9a:e5:a4: e9:9e:0c:bc:b5:2f:89:7f:fb:7d:a0:43:b9:13:f5: 69:90:5c:2b:03:17:cb:1d:27:66:a7:a3:27:11:14: b8:b7:38:b3:b6:30:46:0d:c9:da:59:cd:56:26:cd: 06:a0:4b:a2:e4:98:51:b9:70:f5:1f:c1:41:8f:7d: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:BA:6D:D4:9C:E7:7F:28:43:90:5A:34:49:5F:C0:B1:78:F9:D6 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:40:e0:30:3a:3e:7f:c5:e3:1f:a8:0d:c4:a2:ba:c8:10:7d: b6:6f:b6:5b:1d:ae:8b:6f:1e:c1:86:87:8c:31:f7:09:0e:12: 9b:e2:57:35:5e:7b:fc:11:58:12:54:37:32:36:5c:2c:fe:48: 62:dc:31:cd:fb:44:fb:5f:6a:43:c2:c8:bf:86:ef:63:6b:1e: 57:c2:6a:0d:55:45:85:61:ad:50:b5:ad:9a:96:7e:f1:0d:80: 98:5b:ce:f2:5d:17:92:49:8d:00:84:f3:79:ca:3b:e2:4e:b7: 3b:bb:ad:a7:8c:98:cb:a2:5d:18:23:d9:ec:15:a1:de:43:e6: 4d:f2:a9:b8:6c:d2:5e:66:15:5e:23:19:27:e0:7c:4a:40:ce: 41:8b:54:2f:fa:af:87:18:a1:d6:ad:6d:39:ee:7b:73:8d:6d: 58:20:83:0e:6f:63:b7:5a:5c:74:e6:5a:4f:e8:ad:e7:94:6d: 16:7a:a9:86:db:78:1c:3d:c8:aa:3d:0d:53:e5:6b:49:58:b8: 5e:fb:59:bf:97:e1:bd:be:4b:a6:fc:c6:7b:1a:c0:f8:f0:67: cb:41:59:9c:a7:60:de:10:aa:d2:9a:0e:90:41:e9:a5:4c:46: 70:0d:34:0e:3f:a6:50:6b:c1:f6:07:fe:90:9d:5e:1a:b5:a3: c2:f8:5f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwNDI2MjEyODAwWhcNMjUwNTAzMjEyODAwWjAYMRYwFAYD VQQDEw02ODBkNGZlMS0wYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQsGdLeN6SJUnayZ1d6ZODK95viKJbWpOhC518fQdpJxIHsWbsGFYNAiRhIc qPwOdeoAkWmE2vspQKWqXnaBPDobjex9xdaNcVy9XuG8tFdws3JUP0exDXAvabci u7fkurTVwsG4ln8HVwI57ZuZ44nMswQ5OgIE0lWITXkiQiLDo4+VeWzYfvIgep0X DQ234hV+/OZywIe7oZTduU3H9hfB4aLQxlkY+xlPNySvXohnWu5ymJLq7pM2Dp9i cxOa5aTpngy8tS+Jf/t9oEO5E/VpkFwrAxfLHSdmp6MnERS4tziztjBGDcnaWc1W Js0GoEui5JhRuXD1H8FBj30YYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGuum3U nOd/KEOQWjRJX8CxePnWMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9QOAwOj5/xeMfqA3EorrIEH22b7ZbHa6Lbx7BhoeMMfcJDhKb4lc1 Xnv8EVgSVDcyNlws/khi3DHN+0T7X2pDwsi/hu9jax5XwmoNVUWFYa1Qta2aln7x DYCYW87yXReSSY0AhPN5yjviTrc7u62njJjLol0YI9nsFaHeQ+ZN8qm4bNJeZhVe Ixkn4HxKQM5Bi1Qv+q+HGKHWrW057ntzjW1YIIMOb2O3Wlx05lpP6K3nlG0WeqmG 23gcPciqPQ1T5WtJWLhe+1m/l+G9vkum/MZ7GsD48GfLQVmcp2DeEKrSmg6QQeml TEZwDTQOP6ZQa8H2B/6QnV4ataPC+F9Y -----END CERTIFICATE-----Generated at Sun Apr 27 05:58:00 2025 by rpki-client