$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: 7ks0xkNgeHUrfj07fpG9DNsG2Q7Mng2IPv7xmDSOVls= Subject key identifier: 90:24:B1:8E:FA:B4:4D:E2:CC:DD:BD:B5:6F:52:4F:95:14:25:21:DB Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 0787 Signing time: Thu 24 Apr 2025 21:10:50 +0000 Manifest this update: Thu 24 Apr 2025 21:10:49 +0000 Manifest next update: Thu 01 May 2025 21:10:49 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: zJnximQDBKy7cehX9HL3geIpLh6i6tPpt+TNICPvgJs=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Apr 24 21:10:49 2025 GMT Not After : May 1 21:10:49 2025 GMT Subject: CN=680aa8d9-2907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:3e:b6:75:ec:d9:24:06:33:c1:5a:2b:a5: b0:5e:14:05:af:94:2e:6f:00:b7:e4:be:3a:7d:90: d9:ba:b4:2b:51:63:98:db:27:ff:03:1e:c1:f6:49: ac:41:92:93:50:f8:8b:96:53:e3:44:85:d5:ff:24: 3f:b8:c7:ed:c8:48:6b:d4:c9:72:f3:1e:43:05:3f: 3b:49:5f:ce:51:7e:be:1a:c0:ec:12:41:cd:9a:ea: b7:ae:45:d5:54:5a:2b:66:49:71:85:78:69:fa:a4: 33:98:74:60:04:17:ce:ca:a7:83:ea:ab:c5:df:6d: fa:00:0e:01:f4:00:ef:67:e8:2f:75:b1:51:34:4b: 07:c5:63:c2:c1:d0:36:15:0e:af:e9:4e:05:f5:59: 58:73:4d:b2:3e:3b:9e:0f:7f:d9:e5:8c:c8:ee:51: 7d:ac:a3:eb:2a:fb:3e:02:66:5a:70:7a:9b:fc:10: 98:f7:ac:4c:30:f5:22:a9:17:5e:a9:b3:f2:55:4e: b5:69:b8:02:7e:15:f8:f9:08:df:52:01:61:26:91: a9:89:24:b1:6a:38:c9:a7:e4:58:a3:65:06:df:b7: 9b:82:00:b9:41:44:16:ab:4f:25:14:9b:24:2d:af: 77:cc:b2:69:f1:00:a5:db:30:a8:62:e0:4c:e5:dc: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:24:B1:8E:FA:B4:4D:E2:CC:DD:BD:B5:6F:52:4F:95:14:25:21:DB X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:26:0b:58:4c:9c:9e:43:ba:92:34:0b:5b:6c:3d:96:f2:f1: 74:4b:c4:3c:8d:32:38:d8:7a:dd:05:0c:46:b2:c8:e1:7c:61: 88:6a:6b:e0:1c:c0:df:a7:f6:cc:3c:99:aa:69:6b:dd:27:21: 5e:1e:e2:b1:a1:4a:51:e4:81:dd:af:9d:a0:ee:45:71:15:1b: 0e:04:a4:ad:f0:af:63:f7:b9:30:97:28:16:74:7d:0d:08:31: c2:cc:31:0e:84:6b:65:06:4f:dd:5e:ba:3e:bd:e8:59:1e:ba: 20:03:2e:a6:f2:c7:77:2c:d6:9f:35:88:48:25:4e:47:d8:cc: cc:84:8a:ba:09:b1:4b:1b:a8:6a:14:d7:f4:6a:c3:30:c6:73: e8:ad:45:00:6c:37:56:c0:69:2e:02:33:e5:1e:50:4a:42:d5: b5:25:12:f7:2a:04:81:38:18:04:51:6d:81:1a:5d:82:22:36: 4e:bc:86:a8:7f:9e:d3:59:3e:97:60:d2:38:20:89:6c:1e:c1: 39:44:e1:28:70:9f:0d:05:8b:e1:80:f0:ff:f6:31:8e:59:73: 39:16:6f:22:05:73:89:eb:0e:1c:5a:07:28:f1:bf:00:3c:2b: cb:de:44:58:a6:0f:5b:e1:b4:7a:c3:8d:6d:e1:f9:0b:bc:95: 77:c4:1c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwNDI0MjExMDQ5WhcNMjUwNTAxMjExMDQ5WjAYMRYwFAYD VQQDEw02ODBhYThkOS0yOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/c+tnXs2SQGM8FaK6WwXhQFr5QubwC35L46fZDZurQrUWOY2yf/Ax7B9kms QZKTUPiLllPjRIXV/yQ/uMftyEhr1Mly8x5DBT87SV/OUX6+GsDsEkHNmuq3rkXV VForZklxhXhp+qQzmHRgBBfOyqeD6qvF3236AA4B9ADvZ+gvdbFRNEsHxWPCwdA2 FQ6v6U4F9VlYc02yPjueD3/Z5YzI7lF9rKPrKvs+AmZacHqb/BCY96xMMPUiqRde qbPyVU61abgCfhX4+QjfUgFhJpGpiSSxajjJp+RYo2UG37ebggC5QUQWq08lFJsk La93zLJp8QCl2zCoYuBM5dyedQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAksY76 tE3izN29tW9ST5UUJSHbMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJgtYTJyeQ7qSNAtbbD2W8vF0S8Q8jTI42HrdBQxGssjhfGGIamvg HMDfp/bMPJmqaWvdJyFeHuKxoUpR5IHdr52g7kVxFRsOBKSt8K9j97kwlygWdH0N CDHCzDEOhGtlBk/dXro+vehZHrogAy6m8sd3LNafNYhIJU5H2MzMhIq6CbFLG6hq FNf0asMwxnPorUUAbDdWwGkuAjPlHlBKQtW1JRL3KgSBOBgEUW2BGl2CIjZOvIao f57TWT6XYNI4IIlsHsE5ROEocJ8NBYvhgPD/9jGOWXM5Fm8iBXOJ6w4cWgco8b8A PCvL3kRYpg9b4bR6w41t4fkLvJV3xBxT -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:12 2025 by rpki-client