$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: tmiMoAxtaCyaaRpr/h4FbN96C8Za4nNQMPWYkTP995g= Subject key identifier: 73:60:81:DE:08:AB:76:48:75:EE:8B:45:75:76:90:7D:25:BD:24:67 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08C4 Signing time: Thu 24 Apr 2025 20:21:25 +0000 Manifest this update: Thu 24 Apr 2025 20:21:25 +0000 Manifest next update: Thu 01 May 2025 20:21:25 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: gJ30sXeschOMnPW2WDTOc2u/DMI+klhDywIogwlH0Zs=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Apr 24 20:21:25 2025 GMT Not After : May 1 20:21:25 2025 GMT Subject: CN=680a9d45-95b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:76:5f:89:96:fe:ad:eb:30:55:07:80:b8:00: f8:b5:49:9a:81:64:98:97:ca:4c:9c:98:5f:da:4a: fe:af:51:26:8c:93:d6:8b:d5:56:ad:c2:75:aa:c4: e4:56:cc:eb:aa:83:df:9a:5f:38:ba:04:e2:cc:b4: c6:60:34:f7:7f:5c:3a:72:65:ca:ee:4c:12:32:ec: 8f:98:2a:20:eb:3d:66:ca:f6:95:45:a1:e8:0c:81: 8c:09:22:3c:57:a0:cd:72:0b:57:b0:b6:48:02:5f: d7:97:2f:8d:97:6a:a6:dd:4d:20:fd:d9:3d:74:9c: 22:24:dd:99:18:39:3e:e1:79:1b:03:f8:4e:82:f8: dd:c4:4b:bf:2b:2f:0d:4a:70:07:c9:09:39:9a:0c: 50:e5:7e:32:c7:0b:dc:5b:5d:8f:f9:78:de:67:03: b2:e9:07:f3:88:1d:cd:21:64:9c:3f:03:bd:1e:3e: fd:1d:38:11:22:7d:58:a6:94:be:20:85:3a:7f:bf: bd:d8:0e:af:75:f4:47:f2:b0:f6:cc:cc:56:5a:cc: 7c:c7:fb:59:c4:7a:56:2b:ec:e6:79:b1:3b:dc:15: 62:0c:83:55:87:c4:0a:83:02:dd:b8:0a:90:3c:4d: c8:37:93:99:31:bc:07:85:6f:7e:01:fd:0c:b7:04: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:81:DE:08:AB:76:48:75:EE:8B:45:75:76:90:7D:25:BD:24:67 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b9:2f:a8:4b:fb:12:89:fe:3a:6e:2d:e4:8e:9f:e0:de:9f: 94:f1:c0:64:14:ae:68:50:2b:b3:e2:97:45:4f:a5:09:59:ce: 4a:43:a5:ae:6e:c0:b8:7d:d5:1b:da:39:2f:c6:60:1a:b7:7c: c4:0e:2f:66:89:c9:a7:80:ab:7c:c1:12:03:76:f6:fb:58:56: 8f:07:2c:03:4d:c9:3f:b5:f7:f3:e0:c6:6c:02:ee:4f:a3:29: 67:27:1e:ca:f7:40:e7:7b:c9:79:41:5d:91:f0:a3:c5:c6:54: 3f:db:cf:69:65:b2:ee:5f:74:2d:9f:3d:a3:15:ec:cb:06:5f: c4:d6:12:91:66:a6:18:e2:29:96:04:6b:df:2f:a8:9e:c2:d0: 76:13:79:c5:7f:7d:d1:60:f8:4e:8a:29:38:86:85:bb:6e:7b: 6b:01:4a:46:9d:72:e9:13:99:e0:0a:bb:1c:16:f9:15:bd:16: 5c:53:6d:09:09:1e:eb:90:1d:30:d6:3f:6e:45:ef:43:81:96: fe:ae:cf:07:7b:8d:9f:90:25:3a:88:f0:fe:12:a1:2f:17:fb: c6:23:79:98:8a:14:ad:82:64:f8:1c:5c:b9:d3:15:c4:ba:91: 44:0f:89:69:7a:92:2d:43:50:46:16:29:1f:c8:1e:d2:33:c3: 3a:05:0b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwNDI0MjAyMTI1WhcNMjUwNTAxMjAyMTI1WjAYMRYwFAYD VQQDEw02ODBhOWQ0NS05NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HZfiZb+reswVQeAuAD4tUmagWSYl8pMnJhf2kr+r1EmjJPWi9VWrcJ1qsTk VszrqoPfml84ugTizLTGYDT3f1w6cmXK7kwSMuyPmCog6z1myvaVRaHoDIGMCSI8 V6DNcgtXsLZIAl/Xly+Nl2qm3U0g/dk9dJwiJN2ZGDk+4XkbA/hOgvjdxEu/Ky8N SnAHyQk5mgxQ5X4yxwvcW12P+XjeZwOy6QfziB3NIWScPwO9Hj79HTgRIn1YppS+ IIU6f7+92A6vdfRH8rD2zMxWWsx8x/tZxHpWK+zmebE73BViDINVh8QKgwLduAqQ PE3IN5OZMbwHhW9+Af0MtwQq6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNggd4I q3ZIde6LRXV2kH0lvSRnMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5uS+oS/sSif46bi3kjp/g3p+U8cBkFK5oUCuz4pdFT6UJWc5KQ6Wu bsC4fdUb2jkvxmAat3zEDi9micmngKt8wRIDdvb7WFaPBywDTck/tffz4MZsAu5P oylnJx7K90Dne8l5QV2R8KPFxlQ/289pZbLuX3Qtnz2jFezLBl/E1hKRZqYY4imW BGvfL6iewtB2E3nFf33RYPhOiik4hoW7bntrAUpGnXLpE5ngCrscFvkVvRZcU20J CR7rkB0w1j9uRe9DgZb+rs8He42fkCU6iPD+EqEvF/vGI3mYihStgmT4HFy50xXE upFED4lpepItQ1BGFikfyB7SM8M6BQsp -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:57 2025 by rpki-client