$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: UtYqtQo9uDl9wvaSshSkf1YugVSH679VBHBLXVTb5ZU= Subject key identifier: 05:45:95:DA:BB:29:35:E3:B5:F7:3E:5D:22:C1:1D:84:D0:F5:D5:C1 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F3D Signing time: Thu 24 Apr 2025 17:35:19 +0000 Manifest this update: Thu 24 Apr 2025 17:35:18 +0000 Manifest next update: Thu 01 May 2025 17:35:18 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: PhSjZtTjmrky0LnfJCJ7jlc7JrLFV2mmAftMWMQ7VbE=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3912 (0xf48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Apr 24 17:35:18 2025 GMT Not After : May 1 17:35:18 2025 GMT Subject: CN=680a7656-5f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:8f:81:e0:63:40:c5:d7:2f:94:63:37:58: 50:c1:16:db:fc:ee:03:a8:a0:27:91:91:34:ac:f1: fb:70:f6:b6:cc:d8:92:3a:7a:b6:45:a3:ba:d4:0c: 42:e9:e1:b9:ce:8a:51:a9:7a:8e:1d:5b:dd:5e:36: 90:74:83:45:e4:ca:8b:32:81:a5:76:ee:a8:65:d8: 13:b6:15:dd:bf:32:ff:17:e6:da:e0:1c:6d:c4:7b: af:2a:91:0f:75:57:c3:81:8a:ef:6a:cf:27:67:f2: 27:55:08:8e:36:dc:fe:c3:3f:2f:02:f0:bc:0e:06: 66:3e:19:46:5a:32:89:42:93:62:00:39:35:ce:7f: 88:af:2d:bd:f7:da:22:d7:e6:1a:21:d2:55:6e:dc: c7:a3:69:be:80:74:cf:8f:2c:da:89:18:1c:ee:f9: 15:ad:af:47:4c:9c:3d:83:d7:ae:90:c1:e9:8f:a1: c0:40:26:4b:7c:cb:2f:2e:71:76:81:68:c7:77:20: d5:08:38:0c:83:fe:3f:2c:c9:9c:46:00:7e:92:00: 96:bf:2b:58:26:88:07:dc:00:2f:15:7c:40:2e:cf: 7e:21:72:57:92:29:0f:5b:2e:61:94:51:69:62:cc: 8d:2b:9c:11:4c:c6:fb:17:a1:24:0b:8e:75:cb:f8: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:45:95:DA:BB:29:35:E3:B5:F7:3E:5D:22:C1:1D:84:D0:F5:D5:C1 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:cf:89:fa:df:f9:02:9e:ad:47:b6:60:90:69:8b:bc:ac:b6: 2d:a0:29:ea:a7:fe:de:49:49:10:77:fa:61:d2:5c:67:f8:1e: b4:62:6d:c4:db:7c:07:78:ff:77:2e:59:c6:50:9d:77:44:ce: 87:1a:13:51:42:7e:08:fd:61:a2:81:8a:3f:d8:eb:02:73:0b: e5:f2:2f:1d:11:d2:b5:fe:28:eb:64:3e:34:89:34:f3:3a:be: 4d:11:49:66:92:fd:24:e0:68:30:7b:b1:4a:5a:0c:45:90:a1: 05:0c:44:e8:3c:89:7d:95:64:4c:fa:ea:66:8c:ec:65:4e:e7: 99:39:38:c1:a2:e2:de:7e:79:b9:b4:04:6d:11:6d:ef:38:6b: 7f:a3:67:17:00:c0:49:5b:eb:22:f7:ba:20:2a:99:d1:f7:41: be:d2:9a:ac:ad:29:9d:3c:95:a9:f1:d5:e4:b6:34:b2:9d:7b: 90:89:3f:4c:ca:e6:af:d5:fa:76:cd:a7:64:b0:2d:ca:be:6e: 5d:35:bb:83:b2:7e:79:95:13:14:a1:7f:d0:f5:a3:da:c8:9b: a7:07:91:a4:14:a8:7a:58:99:4a:ae:b3:80:d6:ba:4b:df:6a: 0f:13:37:17:18:e5:ab:b5:22:ef:e9:85:5f:4b:e8:dc:c2:e0: fd:1d:31:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwNDI0MTczNTE4WhcNMjUwNTAxMTczNTE4WjAYMRYwFAYD VQQDEw02ODBhNzY1Ni01ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL6PgeBjQMXXL5RjN1hQwRbb/O4DqKAnkZE0rPH7cPa2zNiSOnq2RaO61AxC 6eG5zopRqXqOHVvdXjaQdINF5MqLMoGldu6oZdgTthXdvzL/F+ba4BxtxHuvKpEP dVfDgYrvas8nZ/InVQiONtz+wz8vAvC8DgZmPhlGWjKJQpNiADk1zn+Iry2999oi 1+YaIdJVbtzHo2m+gHTPjyzaiRgc7vkVra9HTJw9g9eukMHpj6HAQCZLfMsvLnF2 gWjHdyDVCDgMg/4/LMmcRgB+kgCWvytYJogH3AAvFXxALs9+IXJXkikPWy5hlFFp YsyNK5wRTMb7F6EkC451y/iKDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVFldq7 KTXjtfc+XSLBHYTQ9dXBMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+z4n63/kCnq1HtmCQaYu8rLYtoCnqp/7eSUkQd/ph0lxn+B60Ym3E 23wHeP93LlnGUJ13RM6HGhNRQn4I/WGigYo/2OsCcwvl8i8dEdK1/ijrZD40iTTz Or5NEUlmkv0k4Ggwe7FKWgxFkKEFDEToPIl9lWRM+upmjOxlTueZOTjBouLefnm5 tARtEW3vOGt/o2cXAMBJW+si97ogKpnR90G+0pqsrSmdPJWp8dXktjSynXuQiT9M yuav1fp2zadksC3Kvm5dNbuDsn55lRMUoX/Q9aPayJunB5GkFKh6WJlKrrOA1rpL 32oPEzcXGOWrtSLv6YVfS+jcwuD9HTGI -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:39 2025 by rpki-client