$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: D1KWM6Jt3pn/AEVdEiQVDVpJrf+FgS8q9M3bqTDQIf0= Subject key identifier: 69:58:16:DA:1F:A1:7D:60:DD:C9:3D:43:6C:DE:E2:21:31:9D:42:37 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DB4 Signing time: Thu 24 Apr 2025 17:53:29 +0000 Manifest this update: Thu 24 Apr 2025 17:53:28 +0000 Manifest next update: Thu 01 May 2025 17:53:28 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 9Tv9vSmVWxexMJbbUJS4xcw/xqIZJTX3BaRtFtGQAWs=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Apr 24 17:53:28 2025 GMT Not After : May 1 17:53:28 2025 GMT Subject: CN=680a7a99-51b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:5b:d7:0e:16:23:13:63:90:8b:90:de:79: 55:07:a3:8d:9e:97:ad:52:19:17:a8:44:20:32:37: 7e:da:34:ef:5d:01:1c:cd:ef:58:75:7e:b3:87:a1: f5:8a:e2:81:54:49:c6:66:c4:c5:ac:52:f1:24:cd: 6d:78:09:9a:9e:96:d8:fb:02:4b:38:b3:72:a3:59: 6b:47:ca:61:95:e0:6a:12:87:25:af:be:49:2e:74: 3e:b3:74:4c:54:21:bd:ef:58:62:f3:7f:18:62:2f: af:d3:02:2b:64:de:04:7d:55:8a:84:0e:7d:63:43: 0b:dd:68:01:15:f6:06:bb:17:1d:d1:10:63:de:14: a3:e4:14:69:e1:8f:8c:44:d9:0c:60:2e:e7:c3:39: b2:e7:39:7d:66:a3:fe:1e:f5:cc:c5:5e:83:ef:d7: 38:0b:73:75:b7:0c:fd:27:ce:64:79:10:86:87:77: de:fc:08:53:03:27:b2:90:d2:89:0b:20:20:e0:c3: 4d:13:c7:52:d2:cd:dd:16:20:b6:4b:26:16:bd:13: 35:2c:79:b0:0f:2c:0f:bd:28:e5:29:39:59:49:8d: a0:a9:4b:70:ac:60:c7:df:da:e1:39:21:68:90:b0: 39:a8:d8:ba:53:bc:cc:5d:03:6b:6b:f4:9b:10:2c: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:16:DA:1F:A1:7D:60:DD:C9:3D:43:6C:DE:E2:21:31:9D:42:37 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f6:92:67:81:cc:e4:39:94:86:a1:69:14:37:c1:65:d1:b9: e9:eb:09:5c:6f:ed:16:9e:ac:84:45:a6:a7:c7:09:fe:41:10: 7e:99:40:ce:05:8a:6e:b5:7e:11:2e:41:fa:21:ba:02:75:95: 9c:b2:ba:14:9b:51:de:c2:b1:7c:33:5b:90:f2:41:7e:d0:d5: 11:71:35:5c:91:38:61:be:1e:25:86:24:79:06:71:d6:6b:48: f7:2a:26:29:69:57:bf:89:90:cf:b7:33:98:a8:6a:89:44:80: 9f:36:36:22:95:2b:24:e3:c4:f7:5d:f0:32:0b:c7:20:64:f7: 7f:32:19:d7:46:ed:37:e5:92:f2:02:9b:2d:e4:d3:4c:94:d0: 63:99:e3:89:77:8a:21:4b:26:7f:7b:05:ec:19:b6:c0:01:54: 50:85:6f:c8:d3:b3:46:1e:3f:53:ca:59:6b:76:a0:6a:52:53: b1:ca:a1:2f:81:c2:a9:ed:69:0c:33:13:72:a0:a0:27:a5:7f: a7:9c:db:19:ed:68:99:2d:ea:cc:f6:b4:44:75:71:fb:e0:f3: 3f:e1:55:c3:cd:39:9f:0f:e3:2e:0d:1d:2f:c9:95:b4:06:53: 3a:57:cf:e6:40:7e:0a:ea:f8:35:aa:6c:44:2d:56:87:7e:a8: 7a:00:e5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNDI0MTc1MzI4WhcNMjUwNTAxMTc1MzI4WjAYMRYwFAYD VQQDEw02ODBhN2E5OS01MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlFb1w4WIxNjkIuQ3nlVB6ONnpetUhkXqEQgMjd+2jTvXQEcze9YdX6zh6H1 iuKBVEnGZsTFrFLxJM1teAmanpbY+wJLOLNyo1lrR8phleBqEoclr75JLnQ+s3RM VCG971hi838YYi+v0wIrZN4EfVWKhA59Y0ML3WgBFfYGuxcd0RBj3hSj5BRp4Y+M RNkMYC7nwzmy5zl9ZqP+HvXMxV6D79c4C3N1twz9J85keRCGh3fe/AhTAyeykNKJ CyAg4MNNE8dS0s3dFiC2SyYWvRM1LHmwDywPvSjlKTlZSY2gqUtwrGDH39rhOSFo kLA5qNi6U7zMXQNra/SbECz7JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlYFtof oX1g3ck9Q2ze4iExnUI3MB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR9pJngczkOZSGoWkUN8Fl0bnp6wlcb+0WnqyERaanxwn+QRB+mUDO BYputX4RLkH6IboCdZWcsroUm1HewrF8M1uQ8kF+0NURcTVckThhvh4lhiR5BnHW a0j3KiYpaVe/iZDPtzOYqGqJRICfNjYilSsk48T3XfAyC8cgZPd/MhnXRu035ZLy Apst5NNMlNBjmeOJd4ohSyZ/ewXsGbbAAVRQhW/I07NGHj9TyllrdqBqUlOxyqEv gcKp7WkMMxNyoKAnpX+nnNsZ7WiZLerM9rREdXH74PM/4VXDzTmfD+MuDR0vyZW0 BlM6V8/mQH4K6vg1qmxELVaHfqh6AOUt -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:25 2025 by rpki-client