$ rpki-client -vvf rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft File: VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft (raw, json) Hash identifier: q2dBXd0wDqsp9zrTeH+rXajITbEevS0S6Ck1gXr6GrM= Subject key identifier: CD:FB:AC:5C:EE:E5:A4:2C:97:8A:B1:0C:63:B0:6D:5E:32:AD:C8:1C Authority key identifier: 54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 Certificate issuer: /CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft Manifest number: 7A Signing time: Fri 25 Apr 2025 05:43:49 +0000 Manifest this update: Fri 25 Apr 2025 05:43:48 +0000 Manifest next update: Fri 02 May 2025 05:43:48 +0000 Files and hashes: 1: VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl (hash: 7zqQR7HlAcYFeVucc3RR8sVmOEfzceQOPIjndoHZldg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F653, serialNumber=549093D2C161749E8C6F0E885627541089A54DC3 Validity Not Before: Apr 25 05:43:48 2025 GMT Not After : May 2 05:43:48 2025 GMT Subject: CN=680b2114-4bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:52:07:37:90:54:e0:d8:eb:76:4e:6e:3b: db:bf:0e:e0:87:04:f0:9b:50:b2:3c:a3:f8:5f:6f: e0:5c:dd:2b:39:11:4c:90:f4:cb:df:74:ef:1d:23: e4:32:12:67:60:07:7f:c5:2d:4f:e6:52:5e:2b:7d: 3f:77:f5:9a:07:3a:14:51:f0:c4:18:db:17:fa:15: ed:af:a6:6c:23:10:a5:2a:2a:2a:93:7d:9b:84:f5: 15:73:41:4b:64:5a:93:63:b5:5e:9a:e3:89:3c:d0: 34:f1:05:77:99:c0:da:9b:bc:7e:f1:29:3f:ff:d8: 2d:d8:0d:69:65:32:72:d8:d1:64:12:ca:a1:f4:53: 86:b7:52:95:d6:b2:1f:c2:ca:5c:77:c2:73:dd:aa: 34:8a:dc:a0:f4:e8:e7:f9:a5:e4:6d:d8:36:db:42: 7d:3c:7c:9d:8d:d7:ee:05:68:b4:3f:44:db:1a:f8: c8:66:56:e2:5c:43:65:ed:15:a0:b8:9f:e2:5b:64: e4:8e:06:02:0c:73:14:4b:97:a3:8b:b2:50:f5:c6: 04:b3:24:cc:ac:25:5f:d1:1e:a0:da:ae:84:fe:01: ec:65:73:95:5e:98:da:2f:6c:8e:f5:7e:3c:b6:4a: 3b:19:90:9b:41:c1:57:82:fc:36:b5:8a:5e:6e:df: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FB:AC:5C:EE:E5:A4:2C:97:8A:B1:0C:63:B0:6D:5E:32:AD:C8:1C X509v3 Authority Key Identifier: keyid:54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:eb:74:9e:b8:28:ff:35:eb:8e:56:82:81:65:39:81:ff:a0: b5:34:e4:f1:7c:5f:d8:19:34:10:54:61:02:e4:7c:90:ee:e6: 65:74:6f:99:87:e1:3b:75:76:5d:75:31:91:6f:25:90:26:76: e6:e1:7d:ba:c0:74:06:eb:ff:ff:a1:5f:60:99:2e:c3:e3:2d: c8:e2:78:08:25:19:d2:cd:05:2c:0a:29:79:73:9a:96:8f:a0: 69:cf:cd:28:93:8c:02:4f:ad:7f:31:3b:44:ad:df:d6:18:d6: 23:92:29:b9:bb:45:b7:81:06:b0:9c:e8:fa:a9:18:d8:58:bf: 6d:43:60:17:29:17:ec:61:db:66:29:07:c7:ab:77:4b:59:7d: d2:d2:2d:33:22:8c:25:4c:73:22:0b:a1:fc:11:99:f9:08:58: e2:44:1e:62:35:d5:57:ad:28:ae:87:ac:b7:58:cb:e0:5a:fb: e4:0a:f8:9a:4b:60:c1:28:58:58:d5:a9:16:0c:fb:cb:1d:be: b8:70:72:d8:fd:8c:00:57:c9:1d:5a:c0:e4:de:3a:be:51:0e: 50:b3:1e:81:84:b3:18:fe:16:5f:19:9c:da:b4:fc:6f:5c:db: 0b:68:dd:8e:45:5c:0d:f1:d9:cf:33:a5:48:60:58:33:9c:6b: 6a:ae:18:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjY1MzExMC8GA1UEBRMoNTQ5MDkzRDJDMTYxNzQ5RThDNkYwRTg4NTYyNzU0MTA4 OUE1NERDMzAeFw0yNTA0MjUwNTQzNDhaFw0yNTA1MDIwNTQzNDhaMBgxFjAUBgNV BAMTDTY4MGIyMTE0LTRiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG/VIHN5BU4Njrdk5uO9u/DuCHBPCbULI8o/hfb+Bc3Ss5EUyQ9MvfdO8dI+Qy EmdgB3/FLU/mUl4rfT939ZoHOhRR8MQY2xf6Fe2vpmwjEKUqKiqTfZuE9RVzQUtk WpNjtV6a44k80DTxBXeZwNqbvH7xKT//2C3YDWllMnLY0WQSyqH0U4a3UpXWsh/C ylx3wnPdqjSK3KD06Of5peRt2DbbQn08fJ2N1+4FaLQ/RNsa+MhmVuJcQ2XtFaC4 n+JbZOSOBgIMcxRLl6OLslD1xgSzJMysJV/RHqDaroT+Aexlc5VemNovbI71fjy2 SjsZkJtBwVeC/Da1il5u363dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzfusXO7l pCyXirEMY7BtXjKtyBwwHwYDVR0jBBgwFoAUVJCT0sFhdJ6Mbw6IVidUEImlTcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNjUzLzBEOTQ0Qjg0NkE2 MDExRUY4MzFEMTg3OEM0RjlBRTAyL1ZKQ1Qwc0ZoZEo2TWJ3NklWaWRVRUltbFRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpDVDBzRmhkSjZNYnc2SVZpZFVFSW1sVGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NjUzLzBEOTQ0Qjg0NkE2MDExRUY4MzFEMTg3OEM0RjlBRTAyL1ZKQ1Qwc0ZoZEo2 TWJ3NklWaWRVRUltbFRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDrdJ64KP81645WgoFlOYH/oLU05PF8X9gZNBBUYQLkfJDu5mV0b5mH 4Tt1dl11MZFvJZAmdubhfbrAdAbr//+hX2CZLsPjLcjieAglGdLNBSwKKXlzmpaP oGnPzSiTjAJPrX8xO0St39YY1iOSKbm7RbeBBrCc6PqpGNhYv21DYBcpF+xh22Yp B8erd0tZfdLSLTMijCVMcyILofwRmfkIWOJEHmI11VetKK6HrLdYy+Ba++QK+JpL YMEoWFjVqRYM+8sdvrhwctj9jABXyR1awOTeOr5RDlCzHoGEsxj+Fl8ZnNq0/G9c 2wto3Y5FXA3x2c8zpUhgWDOca2quGFE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:26 2025 by rpki-client