$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: mC9WVEq0PnIl1wCx4xwcpHLpuWjHVFYcyCJDDmkv8YY= Subject key identifier: C2:EC:49:95:A5:6D:E3:4A:D3:9F:E0:E5:3D:47:A3:7B:C3:47:59:81 Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: 72 Signing time: Fri 25 Apr 2025 05:48:52 +0000 Manifest this update: Fri 25 Apr 2025 05:48:51 +0000 Manifest next update: Fri 02 May 2025 05:48:51 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: 9tRRr4i+XBGMciW+Mi11n9+hqRY/HgN9k3/uaKCwRFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: Apr 25 05:48:51 2025 GMT Not After : May 2 05:48:51 2025 GMT Subject: CN=680b2243-2c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:33:c3:e5:9c:50:1d:1e:8f:7a:5b:7d:81: 94:a9:85:b4:bd:4d:7e:d8:25:a4:a1:3b:a8:e5:cf: 6a:8b:13:b5:ad:05:87:19:32:97:33:d6:be:80:d9: 4a:08:3f:a3:ef:4c:f9:b6:df:f4:6b:88:b6:a8:39: 57:11:89:0b:3b:d7:2f:5a:53:60:1f:9b:52:36:bc: 5e:57:f2:af:aa:05:e3:84:cf:bc:a1:c1:d0:7c:c6: 12:b6:4b:a6:6f:41:cd:b2:59:c3:32:23:0b:72:be: 69:69:2a:01:6f:6a:0b:d4:44:30:e8:7e:1f:ff:e5: 60:f8:12:63:39:63:fc:04:0d:7e:08:19:93:79:60: 9b:f7:d6:c8:d4:cd:8d:c0:b6:ac:6e:11:d1:a5:42: cd:88:1b:9a:36:54:2d:db:c2:4c:0f:8a:66:15:1f: 4e:78:bc:05:8f:c1:dd:72:06:3f:a1:46:62:17:2c: 8b:3f:f4:02:b6:19:75:e5:a0:c5:c9:46:e0:15:80: 6f:a4:97:bb:3f:64:08:fd:26:09:37:96:c3:c2:61: 7f:e6:7e:fd:16:2b:e1:8d:2a:55:34:69:da:f3:ce: 49:eb:d2:1a:f7:c0:c9:ae:c5:78:25:2f:e0:56:e2: 25:65:11:2f:b9:cf:00:9f:28:38:95:ce:6c:f7:89: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:49:95:A5:6D:E3:4A:D3:9F:E0:E5:3D:47:A3:7B:C3:47:59:81 X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:51:80:46:1c:fe:dd:05:45:6c:81:e1:6e:64:8a:6f:c2:8e: c7:c9:5e:c9:62:9b:64:05:1a:3d:3d:38:16:af:eb:b9:bc:a7: 5c:a6:87:ae:94:70:42:42:be:b4:05:67:ae:bc:a1:91:91:6f: ae:cc:df:f4:61:43:7f:69:30:60:6a:58:b8:e2:b9:80:26:dd: 48:0d:03:0b:4e:00:57:52:2f:ed:26:93:92:a6:64:49:6c:0e: 3d:9c:35:7e:a0:3d:fe:e5:2a:6c:e1:54:44:07:2d:fe:0b:94: 16:45:02:df:6a:8f:4b:0f:e5:51:5b:5e:5c:c2:02:64:ae:b5: 24:98:0c:b1:9a:cb:05:fa:a5:47:4a:97:0d:5c:cd:51:4c:00: e6:7c:a5:97:91:b8:f2:71:ab:a6:2e:ae:40:27:b3:64:9d:9d: e0:fd:70:5c:e9:cd:71:47:ac:ba:0f:e9:c5:63:a8:9a:a3:f2: 95:a3:06:37:a0:09:7d:dd:76:f9:fa:f1:a3:e7:14:6b:aa:ab: 9e:37:5a:39:10:5d:73:fc:1f:95:75:e1:be:0d:4e:f9:1e:1c: 9f:6a:63:29:4e:04:a3:c7:40:f7:63:f9:67:24:3b:e6:90:0e: ee:da:94:5c:1d:ca:b4:55:10:29:2e:92:de:1e:cb:4a:80:1b: 92:a7:bd:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDNGMDExMC8GA1UEBRMoQkQ5MjYyNkI0MDBCQjE0REU0MUE1MDUzOUQ5NjBGQzVE RDYxREMzNzAeFw0yNTA0MjUwNTQ4NTFaFw0yNTA1MDIwNTQ4NTFaMBgxFjAUBgNV BAMTDTY4MGIyMjQzLTJjMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDShzPD5ZxQHR6Pelt9gZSphbS9TX7YJaShO6jlz2qLE7WtBYcZMpcz1r6A2UoI P6PvTPm23/RriLaoOVcRiQs71y9aU2Afm1I2vF5X8q+qBeOEz7yhwdB8xhK2S6Zv Qc2yWcMyIwtyvmlpKgFvagvURDDofh//5WD4EmM5Y/wEDX4IGZN5YJv31sjUzY3A tqxuEdGlQs2IG5o2VC3bwkwPimYVH054vAWPwd1yBj+hRmIXLIs/9AK2GXXloMXJ RuAVgG+kl7s/ZAj9Jgk3lsPCYX/mfv0WK+GNKlU0adrzzknr0hr3wMmuxXglL+BW 4iVlES+5zwCfKDiVzmz3iWp3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwuxJlaVt 40rTn+DlPUeje8NHWYEwHwYDVR0jBBgwFoAUvZJia0ALsU3kGlBTnZYPxd1h3Dcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0M0YwL0NBNkI5NENDNzRG ODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlpKaWEwQUxzVTNrR2xCVG5aWVB4ZDFoM0RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 M0YwL0NBNkI5NENDNzRGODExRUZCMzQyNzk4NEM0RjlBRTAyL3ZaSmlhMEFMc1Uz a0dsQlRuWllQeGQxaDNEYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAENRgEYc/t0FRWyB4W5kim/CjsfJXslim2QFGj09OBav67m8p1ymh66U cEJCvrQFZ668oZGRb67M3/RhQ39pMGBqWLjiuYAm3UgNAwtOAFdSL+0mk5KmZEls Dj2cNX6gPf7lKmzhVEQHLf4LlBZFAt9qj0sP5VFbXlzCAmSutSSYDLGaywX6pUdK lw1czVFMAOZ8pZeRuPJxq6YurkAns2SdneD9cFzpzXFHrLoP6cVjqJqj8pWjBjeg CX3ddvn68aPnFGuqq543WjkQXXP8H5V14b4NTvkeHJ9qYylOBKPHQPdj+WckO+aQ Du7alFwdyrRVECkukt4ey0qAG5Knvek= -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:48 2025 by rpki-client