$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: FLaSDMntjYRQUFun80hwqUuufln/rR/qSqeBbd3n9Q4= Subject key identifier: D5:66:44:85:16:7D:AB:96:25:F5:DA:CA:52:F0:49:A7:3B:53:15:8A Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: F7 Signing time: Fri 25 Apr 2025 04:16:40 +0000 Manifest this update: Fri 25 Apr 2025 04:16:39 +0000 Manifest next update: Fri 02 May 2025 04:16:39 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: 2tjZsLFTv3d8dbzfCF/QNzTDApmUhPgwRrGO/SnVsbs=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Apr 25 04:16:39 2025 GMT Not After : May 2 04:16:39 2025 GMT Subject: CN=680b0ca7-baa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:21:ca:3e:22:59:00:ba:49:0d:47:2a:2c: 8c:c3:1c:4c:27:36:5e:08:93:a6:1c:56:77:ce:b6: 15:1a:86:e6:f7:09:75:ca:92:33:06:6f:53:85:c5: 5d:b0:c0:ac:b6:4a:2c:4e:77:32:2a:9b:ce:9c:c1: b5:06:93:d4:e6:5d:da:fa:e1:cd:29:c1:82:1c:77: 61:fc:4b:be:37:79:90:1d:4b:53:76:d0:d9:08:5e: e5:77:a0:96:91:f0:7c:1b:d8:cc:e3:4e:a9:75:79: e2:62:c5:04:13:6b:a8:87:ab:9c:cb:01:6a:99:c8: d6:26:62:cb:ab:ff:0b:51:55:a8:5c:93:74:1d:39: 49:0e:68:c7:65:88:fc:59:6a:db:18:d1:db:aa:53: e2:df:a1:50:4c:36:62:b7:3f:e3:67:7d:57:ad:f8: f0:f0:5f:61:62:f5:c7:4f:4b:8b:e7:98:24:69:23: f8:ab:f7:19:77:b1:51:d2:c5:71:e5:59:15:5e:5e: 6b:fb:e3:58:16:21:bf:15:0c:68:d8:2c:81:3e:3a: c8:0b:e3:1f:fe:e0:7e:10:d0:56:3a:e4:5b:b9:58: 25:55:d7:5d:8e:01:67:ff:97:3a:74:76:b0:e0:33: a2:27:58:da:00:a6:44:82:af:7a:e1:f3:8c:ae:e1: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:44:85:16:7D:AB:96:25:F5:DA:CA:52:F0:49:A7:3B:53:15:8A X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2b:16:f6:78:de:35:36:46:49:c2:9d:89:b9:49:98:45:cf: 25:66:ce:78:d3:2c:d5:82:37:38:62:7c:77:15:ce:d4:b3:da: 1d:4d:d3:ff:4f:79:27:de:0e:c6:ce:fe:ed:9c:e1:b0:d6:d5: 19:dd:13:88:c2:68:02:19:47:6d:c4:3b:d0:70:17:f6:22:8d: 94:cb:aa:a0:3b:4e:1b:71:de:5e:4d:78:00:a2:c2:26:fe:63: 07:5d:e2:67:44:68:a8:de:d7:47:98:a2:0b:de:e9:55:39:71: a0:b4:48:bf:e8:16:0e:28:4e:56:47:56:48:0d:df:34:d1:69: 66:78:6b:65:2e:d4:c0:7b:36:70:c2:06:02:91:df:61:89:b2: 34:90:3b:aa:e3:1d:98:e4:36:ba:74:1e:51:f4:57:6c:a2:6e: 69:43:62:36:0f:f2:e0:03:8c:71:47:3b:db:c9:d4:b6:81:9c: 6c:d3:e3:98:a8:cf:03:9d:c9:49:be:3d:31:be:72:e6:4e:07: 05:2d:70:9e:62:7a:c5:65:c5:c8:86:bc:3f:bb:83:44:5b:e4: 5a:79:d9:b2:3b:ad:fb:da:1e:a8:7f:a5:9a:49:76:b5:dc:02: b3:4c:76:b2:ef:ab:36:8c:ee:51:de:28:a8:94:d8:73:b9:4b: cb:b9:23:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNDI1MDQxNjM5WhcNMjUwNTAyMDQxNjM5WjAYMRYwFAYD VQQDEw02ODBiMGNhNy1iYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0G4hyj4iWQC6SQ1HKiyMwxxMJzZeCJOmHFZ3zrYVGobm9wl1ypIzBm9ThcVd sMCstkosTncyKpvOnMG1BpPU5l3a+uHNKcGCHHdh/Eu+N3mQHUtTdtDZCF7ld6CW kfB8G9jM406pdXniYsUEE2uoh6ucywFqmcjWJmLLq/8LUVWoXJN0HTlJDmjHZYj8 WWrbGNHbqlPi36FQTDZitz/jZ31Xrfjw8F9hYvXHT0uL55gkaSP4q/cZd7FR0sVx 5VkVXl5r++NYFiG/FQxo2CyBPjrIC+Mf/uB+ENBWOuRbuVglVdddjgFn/5c6dHaw 4DOiJ1jaAKZEgq964fOMruGebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVmRIUW fauWJfXaylLwSac7UxWKMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHKxb2eN41NkZJwp2JuUmYRc8lZs540yzVgjc4Ynx3Fc7Us9odTdP/ T3kn3g7Gzv7tnOGw1tUZ3ROIwmgCGUdtxDvQcBf2Io2Uy6qgO04bcd5eTXgAosIm /mMHXeJnRGio3tdHmKIL3ulVOXGgtEi/6BYOKE5WR1ZIDd800WlmeGtlLtTAezZw wgYCkd9hibI0kDuq4x2Y5Da6dB5R9Fdsom5pQ2I2D/LgA4xxRzvbydS2gZxs0+OY qM8DnclJvj0xvnLmTgcFLXCeYnrFZcXIhrw/u4NEW+RaedmyO6372h6of6WaSXa1 3AKzTHay76s2jO5R3iiolNhzuUvLuSNm -----END CERTIFICATE-----Generated at Sat Apr 26 14:19:01 2025 by rpki-client