$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft File: vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json) Hash identifier: OijJs+pRXRdsRbPJ1lqXgH+JXDdODGM2Sjyv8Ja+KhI= Subject key identifier: 38:D9:BB:F9:F0:38:A6:9B:A2:3B:06:E6:AB:70:17:BC:34:C7:D0:16 Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft Manifest number: FA Signing time: Fri 25 Apr 2025 04:18:19 +0000 Manifest this update: Fri 25 Apr 2025 04:18:19 +0000 Manifest next update: Fri 02 May 2025 04:18:19 +0000 Files and hashes: 1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: 7QJnWm/5o56m89khy8zBGEAYtfV+O8OgO17BKW24yIw=) 2: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (hash: fRxukvtDkGIC3D8QBaI9ZwcR1VcfpvwmoqPaTDJZIsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Validity Not Before: Apr 25 04:18:19 2025 GMT Not After : May 2 04:18:19 2025 GMT Subject: CN=680b0d0b-f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:b8:a7:cd:29:38:9e:50:fd:27:58:33:97: 12:75:8a:26:19:cc:78:3e:69:47:18:69:45:d9:90: 6c:2d:82:c0:0e:6e:e9:58:a4:ab:69:1b:9b:2a:7a: fc:26:ec:73:f5:84:de:85:a6:3e:3b:08:9d:27:f6: c3:f8:90:31:47:15:ef:ef:c9:27:9e:74:4f:5c:1d: bd:8f:02:49:20:6e:76:96:42:38:74:ed:af:fb:67: 0d:da:5f:1a:80:a1:2a:b4:07:53:ed:3f:ca:7e:26: 83:fb:cf:ea:19:e5:35:19:7c:df:3c:f5:8f:ee:41: 8c:61:c2:4a:d4:6a:1c:ae:26:9b:36:72:ec:5c:e2: 1d:dd:6d:1f:96:f7:43:87:bb:37:62:eb:dc:70:ae: 7b:5d:9b:e2:20:01:55:21:74:43:a0:8c:00:b2:c0: 73:8f:e2:5d:e4:c7:19:eb:a6:3f:86:03:2c:7a:8f: 2e:f8:69:1a:a0:72:21:68:ac:dc:61:fa:da:f6:5e: 81:26:c7:d4:5f:2c:9e:5c:d5:de:3b:e7:60:cd:73: 40:98:5b:9a:3f:70:88:d7:7b:32:34:47:b1:1d:f4: 9a:6b:48:a2:d9:26:af:ae:7e:29:76:b4:fc:d0:2f: f6:ae:77:49:b6:bd:38:1c:aa:a1:69:d1:06:1c:86: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:BB:F9:F0:38:A6:9B:A2:3B:06:E6:AB:70:17:BC:34:C7:D0:16 X509v3 Authority Key Identifier: keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:45:9b:eb:e6:91:e3:31:c9:91:d8:d5:c6:97:45:75:12:f3: fe:ea:ba:8e:12:27:d7:84:b5:00:ee:8a:a4:f7:55:b6:00:97: 4b:26:f5:b4:f9:4c:2b:71:89:09:14:8c:a0:6d:66:90:b5:d8: 4e:c4:39:e9:6d:84:7e:90:5b:33:7c:6e:e6:77:4e:fb:71:f0: 0f:aa:76:38:7e:54:88:49:3e:f0:11:67:2f:3d:19:99:e6:b1: 91:45:ce:b0:f1:64:aa:73:f9:89:cf:fb:f7:b5:5d:e7:03:87: 3a:0c:fa:2e:f9:a6:2d:a9:24:90:2b:b1:9b:9d:b0:7e:d7:c6: f3:4a:ec:df:21:1f:cb:a1:c2:fd:41:85:0d:55:28:ff:8d:07: 7e:aa:87:de:fa:53:36:66:d7:b7:b7:ac:70:c3:56:34:d4:fd: 6b:6e:03:f5:c1:e6:97:6c:c3:f4:4f:c5:f7:13:85:61:41:29: 59:2f:a3:60:d9:8f:56:86:c7:e8:e0:65:7b:2f:ff:fa:c1:b9: 5c:87:4c:8a:a4:b1:46:af:7c:4d:af:4b:2c:b4:a8:4b:ad:e7: 25:57:3e:b1:c6:1a:67:94:e3:09:09:f1:52:8c:a4:2e:8d:42: f1:6b:cb:20:31:56:41:5b:73:f7:3d:ec:a7:8d:df:67:0b:16: ac:99:0c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx MkE3MTMzMUUwHhcNMjUwNDI1MDQxODE5WhcNMjUwNTAyMDQxODE5WjAYMRYwFAYD VQQDEw02ODBiMGQwYi1mOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41i4p80pOJ5Q/SdYM5cSdYomGcx4PmlHGGlF2ZBsLYLADm7pWKSraRubKnr8 Juxz9YTehaY+OwidJ/bD+JAxRxXv78knnnRPXB29jwJJIG52lkI4dO2v+2cN2l8a gKEqtAdT7T/KfiaD+8/qGeU1GXzfPPWP7kGMYcJK1GocriabNnLsXOId3W0flvdD h7s3YuvccK57XZviIAFVIXRDoIwAssBzj+Jd5McZ66Y/hgMseo8u+GkaoHIhaKzc Yfra9l6BJsfUXyyeXNXeO+dgzXNAmFuaP3CI13syNEexHfSaa0ii2Savrn4pdrT8 0C/2rndJtr04HKqhadEGHIZohQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjZu/nw OKabojsG5qtwF7w0x9AWMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKRZvr5pHjMcmR2NXGl0V1EvP+6rqOEifXhLUA7oqk91W2AJdLJvW0 +UwrcYkJFIygbWaQtdhOxDnpbYR+kFszfG7md077cfAPqnY4flSIST7wEWcvPRmZ 5rGRRc6w8WSqc/mJz/v3tV3nA4c6DPou+aYtqSSQK7GbnbB+18bzSuzfIR/LocL9 QYUNVSj/jQd+qofe+lM2Zte3t6xww1Y01P1rbgP1weaXbMP0T8X3E4VhQSlZL6Ng 2Y9Whsfo4GV7L//6wblch0yKpLFGr3xNr0sstKhLreclVz6xxhpnlOMJCfFSjKQu jULxa8sgMVZBW3P3Peynjd9nCxasmQzl -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:36 2025 by rpki-client