$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json) Hash identifier: K87cIypFA7M7M7YGSzNW/VT5X7ofXO1+0WFTcL6MTKw= Subject key identifier: 41:DC:FF:A8:36:AA:17:1F:C9:AD:81:D7:16:BF:21:0B:B3:BF:79:C1 Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft Manifest number: 01B0 Signing time: Fri 25 Apr 2025 02:25:51 +0000 Manifest this update: Fri 25 Apr 2025 02:25:50 +0000 Manifest next update: Fri 02 May 2025 02:25:50 +0000 Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: ecGKn/QKvUdUlRSHVvmWVB9awENYwPCrzUW/vp63A0s=) 2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: Apr 25 02:25:50 2025 GMT Not After : May 2 02:25:50 2025 GMT Subject: CN=680af2ae-024e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:ee:84:0c:35:e4:ef:45:ba:8c:4d:e6:54: b2:df:d1:4c:cd:2d:90:4c:25:b6:92:7d:4a:b6:10: 8d:89:6b:31:42:f4:5b:b7:89:34:06:ca:56:ea:8c: 5a:31:bd:19:33:95:e2:f0:33:fd:17:c6:b0:0e:e7: da:d8:1c:d1:4f:31:c7:62:4c:fd:ba:a5:39:80:87: 40:e2:73:05:8a:fd:a3:6b:34:07:d9:18:3f:a1:59: 1d:2a:80:7a:9a:32:b6:02:2f:62:7d:c1:72:ff:ad: d6:f1:35:54:88:bd:b4:96:1c:71:dc:09:b6:14:ae: 6d:a2:33:eb:6a:dc:82:a4:48:3b:b8:8a:84:49:6e: 99:84:bd:de:9c:cc:05:25:40:6e:04:b0:ec:ce:fa: bd:10:b2:05:1b:e2:65:4b:ba:28:14:70:55:b1:d5: cb:60:da:44:ca:5e:1d:62:60:81:47:df:35:c3:c7: 8f:77:eb:21:54:c7:16:91:33:02:56:06:bf:bc:8d: 4c:49:a9:fa:85:60:ed:ce:cb:9f:cb:b9:8f:e8:2b: 59:e7:df:3e:e3:ed:dc:32:2e:9c:f9:03:31:b8:d8: 50:a9:01:bc:30:05:f3:12:53:08:2c:90:01:d2:77: 24:62:51:00:3b:86:87:3d:0a:bd:0e:90:5c:7f:16: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:FF:A8:36:AA:17:1F:C9:AD:81:D7:16:BF:21:0B:B3:BF:79:C1 X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:74:43:12:e3:ae:30:17:57:3f:fe:20:8d:41:08:ad:4f:48: 2e:38:36:b6:c8:12:5c:1e:c3:ad:ea:0f:59:9f:3a:98:1a:a9: 05:11:a9:07:ad:3c:12:51:99:b1:8e:f8:02:ef:f6:37:47:30: 90:ac:a1:4f:0d:1d:9c:d2:17:47:0e:1a:84:30:e1:a4:fd:d3: 70:66:a3:fc:a9:e1:dd:bc:36:0b:a8:c3:1c:a7:7e:b5:af:c3: d2:5d:fc:ff:fc:24:b7:13:08:3d:e9:f9:90:80:f4:47:2a:7b: db:42:60:82:a0:0a:c0:9d:5e:6c:5e:a4:a6:92:3c:f9:6c:41: 1b:6d:58:a4:99:37:22:89:3e:02:18:bf:2d:d1:40:97:a4:38: f3:24:ad:29:27:ff:ab:56:3f:1c:b3:55:c8:6e:32:99:f9:4f: 80:45:f6:b9:e6:9a:ce:2b:17:48:fb:42:33:b7:e8:8c:c3:67: d0:1f:f0:65:22:09:89:7d:b0:fb:ed:b6:b5:c1:70:9e:9e:ea: 15:fb:e3:7a:2a:d8:86:d7:3f:eb:81:11:35:01:9a:0f:28:2e: 31:ab:e6:95:83:d9:a5:05:09:bf:04:6d:00:c3:c1:f1:79:fd: 21:38:12:d1:b6:80:dd:20:4d:93:7e:0b:5d:d3:fe:4c:20:90: ca:c1:cc:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjUwNDI1MDIyNTUwWhcNMjUwNTAyMDIyNTUwWjAYMRYwFAYD VQQDEw02ODBhZjJhZS0wMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY3uhAw15O9FuoxN5lSy39FMzS2QTCW2kn1KthCNiWsxQvRbt4k0BspW6oxa Mb0ZM5Xi8DP9F8awDufa2BzRTzHHYkz9uqU5gIdA4nMFiv2jazQH2Rg/oVkdKoB6 mjK2Ai9ifcFy/63W8TVUiL20lhxx3Am2FK5tojPratyCpEg7uIqESW6ZhL3enMwF JUBuBLDszvq9ELIFG+JlS7ooFHBVsdXLYNpEyl4dYmCBR981w8ePd+shVMcWkTMC Vga/vI1MSan6hWDtzsufy7mP6CtZ598+4+3cMi6c+QMxuNhQqQG8MAXzElMILJAB 0nckYlEAO4aHPQq9DpBcfxaGDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHc/6g2 qhcfya2B1xa/IQuzv3nBMB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt UElYZ1pGZHdaVXRfazJ5WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZdEMS464wF1c//iCNQQitT0guODa2yBJcHsOt6g9ZnzqYGqkFEakH rTwSUZmxjvgC7/Y3RzCQrKFPDR2c0hdHDhqEMOGk/dNwZqP8qeHdvDYLqMMcp361 r8PSXfz//CS3Ewg96fmQgPRHKnvbQmCCoArAnV5sXqSmkjz5bEEbbVikmTciiT4C GL8t0UCXpDjzJK0pJ/+rVj8cs1XIbjKZ+U+ARfa55prOKxdI+0Izt+iMw2fQH/Bl IgmJfbD77ba1wXCenuoV++N6KtiG1z/rgRE1AZoPKC4xq+aVg9mlBQm/BG0Aw8Hx ef0hOBLRtoDdIE2Tfgtd0/5MIJDKwcwp -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:53 2025 by rpki-client