$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json) Hash identifier: 9e6LUBhm2SCUqmLw+v/BHhotie4Bzb4PtLj2Av7qO2g= Subject key identifier: 5A:C6:48:23:69:B2:CE:1B:F1:F1:BC:07:30:E2:3F:64:AF:30:89:1E Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft Manifest number: 05A4 Signing time: Fri 02 May 2025 23:17:15 +0000 Manifest this update: Fri 02 May 2025 23:17:15 +0000 Manifest next update: Fri 09 May 2025 23:17:15 +0000 Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: UVJrU7KQdcy0+ZCxo/N9piHJ1s7Hpu0O6LeMTPFkcR4=) 2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: CdejYox3BV6EKy7rSMjwH4v5mRzFb0N6duLMtMnZvdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 23:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: May 2 23:17:15 2025 GMT Not After : May 9 23:17:15 2025 GMT Subject: CN=6815527b-e238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:df:ba:b7:85:72:b7:9a:75:02:1b:87:03: 28:4e:12:8a:03:98:fa:e8:19:b2:be:c2:eb:ee:5e: 5e:df:f1:6d:17:bb:f1:88:46:50:d5:d7:57:5c:ad: 97:6d:18:42:44:af:96:ff:1d:b1:01:03:5f:23:2b: 73:1b:4b:26:87:ac:6d:a0:31:fa:90:69:66:40:5c: 7f:db:4d:fb:3b:3e:37:db:b4:cb:c3:99:08:06:3f: 86:1f:81:21:5b:06:37:cc:60:ed:ac:4b:23:ad:c0: b4:6d:f5:7f:ad:65:33:9d:88:5e:3d:c0:60:55:21: 66:c2:f7:b1:f0:48:49:bc:a4:49:b6:87:9d:aa:a7: 7f:f5:d8:b0:01:7e:c2:2e:0c:db:43:c3:7c:18:28: 5a:92:56:8f:08:f5:8a:50:f6:bb:ae:4a:4e:50:f4: c6:6f:1c:8d:eb:05:ca:44:5d:9c:aa:99:65:13:3f: af:2c:07:78:91:82:50:4a:ad:2c:19:49:fe:1b:d5: 1b:ce:ca:2f:4a:6f:f2:4d:7f:36:14:c7:5b:71:84: fd:73:20:7e:cd:bb:d4:51:a0:7e:44:4c:57:b0:f0: 1f:0c:8f:66:19:e8:d6:b9:17:9b:71:ea:43:82:fd: 1e:15:1f:da:e9:d8:4a:56:de:66:a0:96:f8:c7:06: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:48:23:69:B2:CE:1B:F1:F1:BC:07:30:E2:3F:64:AF:30:89:1E X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:11:2c:56:9a:c9:24:a5:a6:1d:55:8a:1e:ab:5e:6b:7d:e4: 37:02:cf:39:16:33:01:fd:d0:0d:28:6c:45:08:37:d0:4d:96: aa:32:82:35:75:89:b4:ee:cc:c8:f8:85:60:c9:62:89:e5:e9: 9d:29:96:74:d4:22:96:87:f3:f3:f3:e9:ba:8d:3d:3a:c5:a7: 02:5c:7c:18:1d:92:a4:36:d5:2f:f6:e8:5f:3b:4e:5d:bb:5c: cd:5c:e1:df:16:bb:0f:dc:89:4f:f9:57:5b:b3:cf:34:c8:2a: 24:d2:98:a8:13:ec:60:b0:5c:aa:45:45:71:14:39:d4:10:5e: 39:c7:77:54:3a:08:c3:fc:c8:ba:56:25:a2:32:ca:7b:6a:67: 83:01:7c:b7:2e:0d:57:22:5c:1e:10:e2:1a:69:40:b5:b4:03: e7:49:be:56:b8:b6:dd:e0:63:64:5a:40:8d:dd:64:a1:a4:d2: 21:7b:59:17:8b:fb:6b:f5:99:b3:c8:6e:a3:9f:ae:5c:bd:d4: 8d:6f:85:f2:5d:86:5a:98:d5:89:cb:89:19:b1:33:13:d7:ca: c2:0e:78:44:a2:c2:16:ba:a0:5f:04:f8:e3:11:96:15:27:e9: a6:d9:30:c2:d1:59:c2:22:9f:b5:69:a8:28:c1:13:5d:c2:c4: 74:c0:43:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwNTAyMjMxNzE1WhcNMjUwNTA5MjMxNzE1WjAYMRYwFAYD VQQDEw02ODE1NTI3Yi1lMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynvfureFcreadQIbhwMoThKKA5j66BmyvsLr7l5e3/FtF7vxiEZQ1ddXXK2X bRhCRK+W/x2xAQNfIytzG0smh6xtoDH6kGlmQFx/2037Oz4327TLw5kIBj+GH4Eh WwY3zGDtrEsjrcC0bfV/rWUznYhePcBgVSFmwvex8EhJvKRJtoedqqd/9diwAX7C LgzbQ8N8GChaklaPCPWKUPa7rkpOUPTGbxyN6wXKRF2cqpllEz+vLAd4kYJQSq0s GUn+G9UbzsovSm/yTX82FMdbcYT9cyB+zbvUUaB+RExXsPAfDI9mGejWuRebcepD gv0eFR/a6dhKVt5moJb4xwbb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrGSCNp ss4b8fG8BzDiP2SvMIkeMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUESxWmskkpaYdVYoeq15rfeQ3As85FjMB/dANKGxFCDfQTZaqMoI1 dYm07szI+IVgyWKJ5emdKZZ01CKWh/Pz8+m6jT06xacCXHwYHZKkNtUv9uhfO05d u1zNXOHfFrsP3IlP+Vdbs880yCok0pioE+xgsFyqRUVxFDnUEF45x3dUOgjD/Mi6 ViWiMsp7ameDAXy3Lg1XIlweEOIaaUC1tAPnSb5WuLbd4GNkWkCN3WShpNIhe1kX i/tr9ZmzyG6jn65cvdSNb4XyXYZamNWJy4kZsTMT18rCDnhEosIWuqBfBPjjEZYV J+mm2TDC0VnCIp+1aagowRNdwsR0wEPS -----END CERTIFICATE-----Generated at Sun May 4 12:08:20 2025 by rpki-client