$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: l/WoxCkpRuVHObGvD9L7cp5LuNnH1jKndpeYsx7H3aE= Subject key identifier: 65:D7:32:C4:04:C7:6C:13:2B:C1:FF:14:31:E9:96:5D:FB:B7:1A:A3 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C2A Signing time: Thu 24 Apr 2025 18:25:56 +0000 Manifest this update: Thu 24 Apr 2025 18:25:55 +0000 Manifest next update: Thu 01 May 2025 18:25:55 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: nUAVPXtyxdP/9KPnMw34RJnq3mtfrjPCHinOMDY3ZRw=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Apr 24 18:25:55 2025 GMT Not After : May 1 18:25:55 2025 GMT Subject: CN=680a8234-81d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:29:ed:8c:5b:45:02:ae:ca:63:29:cd:2c: d2:6f:79:6b:ed:59:39:84:e2:b5:a1:6c:7e:8b:af: 23:e3:ac:07:d1:d0:74:3e:b0:30:00:d0:e3:60:ae: 17:cc:45:41:01:53:a0:fe:c6:8d:e1:64:74:fd:a3: fb:42:0b:0a:33:77:18:51:fa:13:6a:87:e5:19:b6: 21:6a:47:5d:76:35:5f:8c:c2:44:49:5d:3c:14:e4: 40:2b:49:65:e9:24:08:7d:01:cd:a4:e4:4c:a2:66: 47:a3:58:60:27:68:f9:d5:9a:f7:0f:63:2d:b6:c6: 81:0f:07:97:d4:6e:e6:6d:8a:91:d2:9c:41:00:b5: 89:98:c3:be:c2:73:e2:c7:17:b2:4a:7a:28:b4:e8: da:49:85:22:b3:22:3b:f8:1f:03:36:a7:fb:51:d2: e2:c9:aa:76:c1:11:da:e4:12:e0:22:c5:63:bd:7f: 5c:65:13:f2:c0:6e:02:dd:3a:42:71:db:23:9d:ca: de:ee:85:4f:c0:b0:15:85:1b:17:ca:60:0d:51:b9: 4c:b9:9f:bb:e0:f8:df:47:6a:ad:b3:14:25:a4:ff: 49:62:0e:6e:b9:35:57:9e:0a:d7:a5:cd:bb:f6:07: f7:7b:26:00:b3:18:64:81:61:e1:8e:3b:d9:8e:81: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:32:C4:04:C7:6C:13:2B:C1:FF:14:31:E9:96:5D:FB:B7:1A:A3 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:5d:23:6e:57:ff:35:69:9e:c4:b5:06:82:71:33:f0:1f:ed: 9b:d3:a8:f0:e1:e8:ee:3f:41:8b:e9:fb:e3:83:dd:40:a9:c5: 98:6e:9c:32:96:38:0b:e1:f3:b0:f1:05:01:f0:3e:ca:7b:d0: 32:a9:4c:03:3a:9d:65:ba:82:53:ef:47:58:ff:79:62:df:70: e5:51:af:34:3a:4b:91:61:fe:0f:57:3d:a2:93:b6:38:ab:70: ee:b2:b4:8c:4b:5b:3f:72:22:92:47:80:71:f0:81:12:b8:aa: 30:77:15:68:f5:75:6b:3d:a8:4a:c7:d7:c0:ac:05:e0:60:9b: 26:f1:71:81:6d:85:af:fa:7c:a6:e0:ce:68:71:0c:0f:bf:2e: a8:76:fd:83:4d:dc:a7:36:3b:aa:a8:74:52:ee:f1:e8:1c:fc: 1c:fc:da:fa:7d:9b:3c:13:fd:d1:d1:60:87:50:ca:7b:1f:e3: 52:f4:2e:85:c9:b2:84:59:b2:b9:bf:84:9f:05:67:f7:5a:de: 83:94:77:1b:31:ce:fc:65:e8:f0:59:e1:01:3e:69:5b:db:b2: fa:30:72:68:bc:6c:51:31:af:2b:5d:4b:04:d1:41:fa:9b:76: 83:aa:8b:d3:31:1f:65:da:5a:b9:7b:90:fe:eb:5d:4f:7b:1d: ec:7e:d4:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwNDI0MTgyNTU1WhcNMjUwNTAxMTgyNTU1WjAYMRYwFAYD VQQDEw02ODBhODIzNC04MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sUp7YxbRQKuymMpzSzSb3lr7Vk5hOK1oWx+i68j46wH0dB0PrAwANDjYK4X zEVBAVOg/saN4WR0/aP7QgsKM3cYUfoTaoflGbYhakdddjVfjMJESV08FORAK0ll 6SQIfQHNpORMomZHo1hgJ2j51Zr3D2MttsaBDweX1G7mbYqR0pxBALWJmMO+wnPi xxeySnootOjaSYUisyI7+B8DNqf7UdLiyap2wRHa5BLgIsVjvX9cZRPywG4C3TpC cdsjncre7oVPwLAVhRsXymANUblMuZ+74PjfR2qtsxQlpP9JYg5uuTVXngrXpc27 9gf3eyYAsxhkgWHhjjvZjoF0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXXMsQE x2wTK8H/FDHpll37txqjMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqXSNuV/81aZ7EtQaCcTPwH+2b06jw4ejuP0GL6fvjg91AqcWYbpwy ljgL4fOw8QUB8D7Ke9AyqUwDOp1luoJT70dY/3li33DlUa80OkuRYf4PVz2ik7Y4 q3DusrSMS1s/ciKSR4Bx8IESuKowdxVo9XVrPahKx9fArAXgYJsm8XGBbYWv+nym 4M5ocQwPvy6odv2DTdynNjuqqHRS7vHoHPwc/Nr6fZs8E/3R0WCHUMp7H+NS9C6F ybKEWbK5v4SfBWf3Wt6DlHcbMc78ZejwWeEBPmlb27L6MHJovGxRMa8rXUsE0UH6 m3aDqovTMR9l2lq5e5D+611Pex3sftTH -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:39 2025 by rpki-client