$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: 7ssRXaKIW18GvBIBG5/YZi+3b+DFKdnzvF+FUIj2pc8= Subject key identifier: FB:31:DA:70:7A:7A:51:4C:98:02:C3:8F:26:CF:60:79:D2:83:9A:7C Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: 015E Signing time: Fri 25 Apr 2025 03:07:49 +0000 Manifest this update: Fri 25 Apr 2025 03:07:49 +0000 Manifest next update: Fri 02 May 2025 03:07:49 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: snKiha5tnH8nubRQPuN0eMr+88w8mzWWpKsc4DHbf7E=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: Apr 25 03:07:49 2025 GMT Not After : May 2 03:07:49 2025 GMT Subject: CN=680afc85-14f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:fa:ee:51:04:ca:ef:15:5e:a0:75:93:ee: 44:29:38:be:04:40:e8:36:60:dc:14:60:cb:66:52: 8b:f2:10:cb:ec:52:ba:a0:28:cc:c5:36:3f:85:95: 1c:40:ba:b8:d2:40:f6:15:d8:ac:a6:d8:94:a6:60: 1a:bf:a2:c2:32:ef:6a:5d:10:04:cd:35:3b:3c:68: f7:0d:cf:f7:2d:04:47:06:7d:04:7b:4c:c0:56:af: 67:b4:a6:4e:d8:b4:85:36:32:04:ec:5d:d2:6f:ab: 36:80:31:f6:16:e6:30:b8:12:07:63:3d:af:36:28: 03:f6:e9:9e:2f:58:b9:60:3f:a2:99:0c:77:8b:5a: e8:fb:61:1b:62:95:e9:26:8d:d8:70:9e:32:3b:7f: 23:a9:3a:b5:94:d1:e5:d2:6d:96:a5:d2:6c:9a:45: ee:69:ff:68:63:c2:c2:93:26:dc:7f:1e:d2:05:e8: 00:c8:49:fb:15:09:6e:28:90:db:c4:69:02:c6:b8: c9:e4:c3:27:98:95:b5:4e:4b:3f:b1:be:b3:4a:73: 3d:80:58:f3:15:58:5e:61:68:71:cb:30:9f:c3:f5: 95:8c:51:86:c5:75:94:b8:53:5b:8d:74:59:38:8b: 5a:de:54:02:df:bc:38:a3:3e:d6:3b:d1:04:b3:f6: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:DA:70:7A:7A:51:4C:98:02:C3:8F:26:CF:60:79:D2:83:9A:7C X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:dd:6e:3c:4f:d3:aa:9e:a7:9c:7a:95:d4:a5:93:f5:f5:15: d9:25:03:40:fd:0c:e1:af:53:9b:11:8f:bf:a5:5c:91:82:d2: 23:da:1a:00:ba:5c:27:db:7e:f2:b5:80:63:27:e9:a8:a8:8f: bf:d9:41:80:a9:30:23:30:9b:ee:90:43:fc:02:b8:41:1e:fc: 64:08:fd:6e:cf:c1:7d:f6:76:47:8c:c5:c1:b0:1d:67:60:eb: ab:0b:43:55:3e:12:55:c9:c8:7d:cc:fc:a5:74:75:e2:36:6c: 6d:d2:2d:cc:23:72:6e:ff:f3:2e:0f:81:9b:12:f1:c6:e1:1e: 80:e2:fd:82:4b:36:70:ea:b8:7d:68:7f:e1:63:0a:d3:3b:ec: 56:8d:79:bd:a4:7c:a2:6b:b2:c5:bc:c3:16:22:8c:ca:8e:fb: aa:9c:80:0d:86:e3:c1:78:2d:ae:49:40:3b:45:f1:10:13:f9: 10:b1:2e:dc:f7:e3:06:89:72:57:78:c7:63:cc:d9:60:6e:71: 0c:aa:11:a9:56:d0:ab:ce:58:2c:b0:6a:93:41:b9:1a:33:5a: d9:39:11:97:f4:19:10:2f:ff:94:87:95:13:f9:a6:66:b8:6e: 20:0e:c4:c0:6d:f8:fb:56:0d:d2:5b:4a:6c:c2:e5:8a:7f:95: f7:e4:f0:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjUwNDI1MDMwNzQ5WhcNMjUwNTAyMDMwNzQ5WjAYMRYwFAYD VQQDEw02ODBhZmM4NS0xNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyz67lEEyu8VXqB1k+5EKTi+BEDoNmDcFGDLZlKL8hDL7FK6oCjMxTY/hZUc QLq40kD2FdisptiUpmAav6LCMu9qXRAEzTU7PGj3Dc/3LQRHBn0Ee0zAVq9ntKZO 2LSFNjIE7F3Sb6s2gDH2FuYwuBIHYz2vNigD9umeL1i5YD+imQx3i1ro+2EbYpXp Jo3YcJ4yO38jqTq1lNHl0m2WpdJsmkXuaf9oY8LCkybcfx7SBegAyEn7FQluKJDb xGkCxrjJ5MMnmJW1Tks/sb6zSnM9gFjzFVheYWhxyzCfw/WVjFGGxXWUuFNbjXRZ OIta3lQC37w4oz7WO9EEs/aVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsx2nB6 elFMmALDjybPYHnSg5p8MB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+3W48T9OqnqecepXUpZP19RXZJQNA/Qzhr1ObEY+/pVyRgtIj2hoA ulwn237ytYBjJ+moqI+/2UGAqTAjMJvukEP8ArhBHvxkCP1uz8F99nZHjMXBsB1n YOurC0NVPhJVych9zPyldHXiNmxt0i3MI3Ju//MuD4GbEvHG4R6A4v2CSzZw6rh9 aH/hYwrTO+xWjXm9pHyia7LFvMMWIozKjvuqnIANhuPBeC2uSUA7RfEQE/kQsS7c 9+MGiXJXeMdjzNlgbnEMqhGpVtCrzlgssGqTQbkaM1rZORGX9BkQL/+Uh5UT+aZm uG4gDsTAbfj7Vg3SW0pswuWKf5X35PCF -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:03 2025 by rpki-client