$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: lQgZYJTBxhnYX5gPB9qSk51+Yi7uY5Skok0B+Q/xmqw= Subject key identifier: 10:7B:24:BB:A6:95:64:95:BE:19:9C:40:01:9E:7C:FC:27:BC:38:35 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3499 Signing time: Thu 24 Apr 2025 14:37:05 +0000 Manifest this update: Thu 24 Apr 2025 14:37:05 +0000 Manifest next update: Thu 01 May 2025 14:37:05 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: /qJ6ulboBfUghZE9cDhuNfbK/L6Q33IBjDwH29jZK5s=) 2: E0AFFE78218611EF8555476BC4F9AE02.roa (hash: cjt/jzLyIkh6PDpshMiImoc4eT6q581b7EMbqraXEP4=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Apr 24 14:37:05 2025 GMT Not After : May 1 14:37:05 2025 GMT Subject: CN=680a4c91-9236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:8d:5a:f4:19:ec:44:8c:8a:98:fb:15:15: f0:bd:dd:e9:4c:25:a2:c1:bf:56:01:c3:88:a6:de: 58:65:c0:d8:28:84:f4:d8:25:7a:a7:e5:5d:1a:61: 5c:3e:8e:17:0e:35:c2:9f:ce:94:ba:44:98:5f:3e: 2e:d4:0b:a0:a4:c4:c0:24:53:fc:6a:ca:34:81:64: 37:72:59:ff:6d:5e:cf:3f:31:71:96:05:04:5a:0a: 70:22:fe:08:62:f2:6b:de:47:86:25:28:c4:3c:51: da:74:1b:54:67:fc:78:2e:bf:98:61:bd:7e:ad:c1: 83:e7:7d:7b:b1:89:9e:01:9d:d9:49:e3:f3:29:32: 74:85:7f:aa:cc:84:e6:b9:0d:2e:5c:a3:a2:61:e1: cc:be:14:ca:f8:1f:8b:ad:00:c6:60:01:0a:38:91: d3:bb:1b:e1:b3:ab:bb:3d:d8:da:83:e8:c8:5c:2d: 56:8d:93:60:aa:6c:9a:bb:42:88:c6:ef:13:04:8e: 1a:dc:02:20:30:37:e1:4d:67:65:e6:55:cc:c8:0a: 77:f6:da:a6:23:0e:33:3d:f9:5c:90:0f:f5:94:82: f7:ec:42:6b:ce:04:fd:60:c0:dd:8e:b4:a0:3d:36: 46:b4:40:26:24:0c:b8:21:19:cb:4a:82:7c:14:91: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:24:BB:A6:95:64:95:BE:19:9C:40:01:9E:7C:FC:27:BC:38:35 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:76:74:37:15:eb:68:7c:c6:9c:05:61:a8:2e:64:bb:2d:79: 22:f1:fd:1a:c1:49:12:f6:eb:07:5f:ed:82:8d:ca:c0:ca:b3: 68:70:4e:52:02:d1:6e:91:e3:da:51:7d:67:06:e8:a7:66:07: 6f:15:50:2d:5f:70:d6:e5:14:9e:db:80:18:b0:70:f1:72:b5: 21:58:ba:91:29:fc:12:fb:95:81:ac:d9:14:a8:fc:92:ed:81: 08:8e:a0:e8:76:5e:6f:98:7a:2d:44:4d:80:1a:79:a5:7d:2b: 6c:3f:a1:8a:cb:92:75:25:c3:4b:31:3f:d3:eb:56:51:10:2d: 8f:d3:9e:82:19:b7:ed:9c:35:e4:e1:dd:fe:cf:be:eb:7e:d6: e8:95:35:c8:39:c2:6f:38:d7:c6:be:98:4b:fe:02:47:a4:ad: 8f:5f:66:89:5b:70:e7:12:21:3c:27:0f:a5:b0:4f:f7:84:91: 84:9c:2e:4d:a5:8f:a9:ac:03:2c:7a:6e:54:10:e6:42:77:22: 23:27:a1:2e:f6:4d:94:0d:12:40:26:ee:d2:a5:c3:1d:54:58: 8a:ee:95:f5:a6:99:98:19:b6:71:e6:1e:12:09:b1:7e:a9:2c: 23:29:18:fd:0f:11:2d:27:39:fb:3a:06:2a:4d:64:b5:d8:68: ac:4a:6b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNDI0MTQzNzA1WhcNMjUwNTAxMTQzNzA1WjAYMRYwFAYD VQQDEw02ODBhNGM5MS05MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC+NWvQZ7ESMipj7FRXwvd3pTCWiwb9WAcOIpt5YZcDYKIT02CV6p+VdGmFc Po4XDjXCn86UukSYXz4u1AugpMTAJFP8aso0gWQ3cln/bV7PPzFxlgUEWgpwIv4I YvJr3keGJSjEPFHadBtUZ/x4Lr+YYb1+rcGD5317sYmeAZ3ZSePzKTJ0hX+qzITm uQ0uXKOiYeHMvhTK+B+LrQDGYAEKOJHTuxvhs6u7Pdjag+jIXC1WjZNgqmyau0KI xu8TBI4a3AIgMDfhTWdl5lXMyAp39tqmIw4zPflckA/1lIL37EJrzgT9YMDdjrSg PTZGtEAmJAy4IRnLSoJ8FJFuIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB7JLum lWSVvhmcQAGefPwnvDg1MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvdnQ3FetofMacBWGoLmS7LXki8f0awUkS9usHX+2CjcrAyrNocE5S AtFukePaUX1nBuinZgdvFVAtX3DW5RSe24AYsHDxcrUhWLqRKfwS+5WBrNkUqPyS 7YEIjqDodl5vmHotRE2AGnmlfStsP6GKy5J1JcNLMT/T61ZREC2P056CGbftnDXk 4d3+z77rftbolTXIOcJvONfGvphL/gJHpK2PX2aJW3DnEiE8Jw+lsE/3hJGEnC5N pY+prAMsem5UEOZCdyIjJ6Eu9k2UDRJAJu7SpcMdVFiK7pX1ppmYGbZx5h4SCbF+ qSwjKRj9DxEtJzn7OgYqTWS12GisSmuT -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:42 2025 by rpki-client