$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: DwzoNFiMOPsBmttD4XNbCHJL+ekdyeqBEilWaZEsFTQ= Subject key identifier: 7C:10:E9:80:6B:4F:80:F1:43:FE:6D:42:CA:65:ED:47:56:57:A9:52 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 0287 Signing time: Fri 25 Apr 2025 01:20:15 +0000 Manifest this update: Fri 25 Apr 2025 01:20:15 +0000 Manifest next update: Fri 02 May 2025 01:20:15 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: E8rTfCLdDVe8Nkbvym7OKyG2u7xPT7yKzBOkQX3QBdE=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Apr 25 01:20:15 2025 GMT Not After : May 2 01:20:15 2025 GMT Subject: CN=680ae34f-a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:90:b0:7f:cf:50:fd:04:78:d9:71:d8:01: 25:8a:1d:c2:dc:e5:9b:29:a3:a4:cf:ff:f3:a3:f2: aa:3d:a1:07:ea:ef:92:07:2f:9d:21:f7:2c:b0:d4: 01:4c:31:1c:98:2c:41:7c:c7:80:34:54:34:03:d8: 75:61:33:42:8b:49:d0:71:17:aa:c9:a6:53:e5:45: 0f:4c:fe:bc:ac:ff:fc:33:fa:e7:82:07:d4:19:46: 8a:ec:ce:e7:9f:cc:47:6f:91:f9:d3:31:41:94:e0: 4b:5d:eb:a2:3d:a1:6b:e7:0e:1a:7e:96:09:6a:4d: 33:32:f7:b6:7b:c8:c4:ac:4b:fb:a3:35:c7:dc:1e: 42:75:57:03:52:c2:f8:f7:62:fe:62:be:77:25:63: 3a:4e:47:18:db:ef:08:3e:34:ba:b8:48:36:d8:4f: db:7d:9b:2b:90:3f:2d:ff:f9:33:f6:a7:dd:23:71: 32:91:fd:3d:65:6c:1d:ed:e8:1a:0b:4d:0a:cc:99: 42:99:4b:e1:3f:ac:da:1e:ac:f7:ba:37:8c:d6:81: 8b:c9:17:1b:35:c7:8f:ad:b1:61:d1:fc:d5:27:61: e9:fc:f2:2c:78:e5:aa:49:69:ef:5e:d1:05:7a:b1: ae:2d:20:13:41:fd:f5:c8:04:81:48:38:ab:d5:27: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:E9:80:6B:4F:80:F1:43:FE:6D:42:CA:65:ED:47:56:57:A9:52 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b8:2a:09:a1:2c:37:18:17:8b:89:1c:f9:c7:41:af:5e:b6: 0f:82:54:1d:24:fb:73:6a:1d:aa:f0:b3:24:8e:5f:f2:41:29: ea:3f:5d:35:ee:66:4b:80:d8:8b:76:31:3b:99:c3:05:ac:50: 7e:b2:db:f3:68:96:b0:a5:03:d9:06:23:d6:a4:2f:5d:c0:da: d2:0f:4b:44:2e:58:94:0e:37:a9:e3:47:f3:92:37:ec:9c:74: 51:3e:68:89:fa:a5:5a:46:fe:9f:27:c2:3e:93:51:c9:db:69: d3:18:4a:15:67:c6:d3:5e:14:06:d4:e8:c2:6f:82:b9:cf:5f: b6:48:35:59:66:c0:17:d0:85:1a:6c:9b:48:98:d5:b4:45:1f: 62:15:ed:8d:99:ea:03:5f:21:7e:43:c4:6a:d7:7d:89:ed:4c: 46:f1:a8:e0:34:b9:f5:a7:6a:bb:98:eb:21:a8:94:3a:17:ca: 5d:42:2d:22:84:54:9e:87:d1:5c:00:7a:a3:d5:d2:a0:7d:b5: 24:86:14:c7:a3:e8:57:79:79:21:2a:84:69:c0:a8:86:00:cd: 5c:d6:71:8e:94:55:26:bb:25:24:c6:a6:de:f0:2b:1f:96:7c: b3:cd:00:d9:f5:43:1e:2b:7a:4d:73:35:a5:1a:bb:4a:d3:8b: b1:af:d3:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUwNDI1MDEyMDE1WhcNMjUwNTAyMDEyMDE1WjAYMRYwFAYD VQQDEw02ODBhZTM0Zi1hOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZqQsH/PUP0EeNlx2AElih3C3OWbKaOkz//zo/KqPaEH6u+SBy+dIfcssNQB TDEcmCxBfMeANFQ0A9h1YTNCi0nQcReqyaZT5UUPTP68rP/8M/rnggfUGUaK7M7n n8xHb5H50zFBlOBLXeuiPaFr5w4afpYJak0zMve2e8jErEv7ozXH3B5CdVcDUsL4 92L+Yr53JWM6TkcY2+8IPjS6uEg22E/bfZsrkD8t//kz9qfdI3Eykf09ZWwd7ega C00KzJlCmUvhP6zaHqz3ujeM1oGLyRcbNcePrbFh0fzVJ2Hp/PIseOWqSWnvXtEF erGuLSATQf31yASBSDir1SdH5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwQ6YBr T4DxQ/5tQspl7UdWV6lSMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfuCoJoSw3GBeLiRz5x0GvXrYPglQdJPtzah2q8LMkjl/yQSnqP101 7mZLgNiLdjE7mcMFrFB+stvzaJawpQPZBiPWpC9dwNrSD0tELliUDjep40fzkjfs nHRRPmiJ+qVaRv6fJ8I+k1HJ22nTGEoVZ8bTXhQG1OjCb4K5z1+2SDVZZsAX0IUa bJtImNW0RR9iFe2NmeoDXyF+Q8Rq132J7UxG8ajgNLn1p2q7mOshqJQ6F8pdQi0i hFSeh9FcAHqj1dKgfbUkhhTHo+hXeXkhKoRpwKiGAM1c1nGOlFUmuyUkxqbe8Csf lnyzzQDZ9UMeK3pNczWlGrtK04uxr9O6 -----END CERTIFICATE-----Generated at Sat Apr 26 05:03:27 2025 by rpki-client