$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: bWUR5MYYMlQRKKZHzZx8+FnfuQPP9yOe72TgHS01uI8= Subject key identifier: A9:49:87:C3:3F:69:22:07:28:A4:11:BB:A1:0A:E1:4F:6F:DF:D6:C7 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 0346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 0341 Signing time: Fri 25 Apr 2025 00:48:30 +0000 Manifest this update: Fri 25 Apr 2025 00:48:29 +0000 Manifest next update: Fri 02 May 2025 00:48:29 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: 7q9q1tsWtRM2O5UPH/m/MW7Pzr/n8h+/RZAsvSx9a2I=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Apr 25 00:48:29 2025 GMT Not After : May 2 00:48:29 2025 GMT Subject: CN=680adbde-2278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0b:71:78:b1:85:bb:0c:2c:89:1b:f4:f4:bc: 34:02:2f:e3:49:69:b9:5b:6b:09:6b:32:81:40:16: 69:1b:71:4c:89:83:06:5b:19:2b:27:e7:48:d6:d0: 69:33:8b:38:e0:cd:14:48:a9:3c:5a:b9:6a:79:c5: a7:62:78:6a:27:14:52:93:24:b5:c8:0e:42:00:93: 2e:b2:02:ed:82:30:db:8b:1d:c5:53:f4:1a:b1:77: 5a:67:33:9c:26:71:02:78:b3:06:2b:cc:1b:d3:f8: 5f:a4:c5:9d:df:07:6e:7c:68:8f:52:0c:93:f4:df: 76:1c:61:e8:7d:b7:a9:5c:32:b9:2f:c2:0e:1c:63: bd:35:37:a7:fe:8f:f0:64:5d:ce:85:cb:54:72:4d: 57:b7:3d:27:25:6b:b8:3b:17:78:76:9a:78:cf:57: db:b0:10:88:6f:99:4c:ee:23:11:84:63:3e:92:4f: ff:e9:c0:65:ea:b6:a9:c2:8a:ca:6a:88:32:c1:88: 4c:d4:4f:4b:ce:4b:af:69:e4:df:58:86:df:da:53: 3d:e4:8c:16:84:e6:83:26:e7:ce:86:71:b4:b4:2b: 3d:dd:55:5a:10:eb:fd:98:26:dd:61:dc:89:76:88: b7:4d:15:b3:ff:b6:06:fd:31:93:70:2f:82:c8:b9: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:49:87:C3:3F:69:22:07:28:A4:11:BB:A1:0A:E1:4F:6F:DF:D6:C7 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:31:67:68:70:5b:95:d8:59:c1:07:93:50:82:ec:e3:13:fb: fd:60:8a:07:c7:6a:d4:2a:ac:da:2f:df:f5:c2:e4:08:91:9f: d3:fc:3c:e6:42:41:0b:4e:86:b0:b8:af:be:81:bc:13:83:54: 4f:f0:13:84:0b:a1:6e:0b:9d:9c:e4:5e:1f:0d:0a:70:63:34: 3d:52:6c:59:3d:d3:04:ce:49:87:eb:00:1b:6e:31:5f:26:50: fc:c5:58:3a:27:59:74:80:70:cc:82:a3:fe:ee:74:a6:a4:ba: a9:61:7a:64:23:bf:2c:8d:90:50:da:97:9a:b6:d7:0b:16:50: 1e:d1:0f:70:06:70:82:1a:c3:04:d0:3a:32:4f:5a:e0:f0:c1: b3:46:6f:18:a6:5b:c0:8c:28:ef:da:08:eb:b9:fe:3f:ed:b1: 23:ff:04:79:87:21:c2:82:96:be:18:a9:29:df:94:a4:81:61: 14:13:33:32:18:b4:ef:9f:e0:ea:8a:8d:44:c2:44:72:10:85: a9:bd:ab:d6:1f:20:b3:12:f1:98:0a:d4:68:4f:c0:f9:6c:49: 25:c3:31:8e:ef:c6:b0:da:9f:27:4e:25:96:8f:5e:f8:0a:31: cd:9c:87:f4:56:a2:79:c7:95:61:37:6c:4b:cd:7d:92:05:6a: fb:fa:f6:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwNDI1MDA0ODI5WhcNMjUwNTAyMDA0ODI5WjAYMRYwFAYD VQQDEw02ODBhZGJkZS0yMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QtxeLGFuwwsiRv09Lw0Ai/jSWm5W2sJazKBQBZpG3FMiYMGWxkrJ+dI1tBp M4s44M0USKk8WrlqecWnYnhqJxRSkyS1yA5CAJMusgLtgjDbix3FU/QasXdaZzOc JnECeLMGK8wb0/hfpMWd3wdufGiPUgyT9N92HGHofbepXDK5L8IOHGO9NTen/o/w ZF3OhctUck1Xtz0nJWu4Oxd4dpp4z1fbsBCIb5lM7iMRhGM+kk//6cBl6rapworK aogywYhM1E9LzkuvaeTfWIbf2lM95IwWhOaDJufOhnG0tCs93VVaEOv9mCbdYdyJ doi3TRWz/7YG/TGTcC+CyLkR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlJh8M/ aSIHKKQRu6EK4U9v39bHMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAMWdocFuV2FnBB5NQguzjE/v9YIoHx2rUKqzaL9/1wuQIkZ/T/Dzm QkELToawuK++gbwTg1RP8BOEC6FuC52c5F4fDQpwYzQ9UmxZPdMEzkmH6wAbbjFf JlD8xVg6J1l0gHDMgqP+7nSmpLqpYXpkI78sjZBQ2peattcLFlAe0Q9wBnCCGsME 0DoyT1rg8MGzRm8YplvAjCjv2gjruf4/7bEj/wR5hyHCgpa+GKkp35SkgWEUEzMy GLTvn+Dqio1EwkRyEIWpvavWHyCzEvGYCtRoT8D5bEklwzGO78aw2p8nTiWWj174 CjHNnIf0VqJ5x5VhN2xLzX2SBWr7+va9 -----END CERTIFICATE-----Generated at Sat Apr 26 05:49:18 2025 by rpki-client