$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: 9AnwnMliy0GZDjdSvoKDLOXFGLQtFt9fshNyVTs1O3Y= Subject key identifier: F7:DD:5D:65:21:C2:83:8F:54:CA:D5:73:29:2B:B6:36:12:F9:92:B5 Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:46:10 +0000 Manifest this update: Fri 25 Apr 2025 04:46:09 +0000 Manifest next update: Fri 02 May 2025 04:46:09 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: gmDRH07WVXVkMe+Pi7TS64o5CADcWuS8StLKg+penCE=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: ygDdUhDKlEYCgdYnkaYBpEgiP+SGTZxYs8Pi7efBQ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: Apr 25 04:46:09 2025 GMT Not After : May 2 04:46:09 2025 GMT Subject: CN=680b1391-69ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:aa:36:16:f5:a7:16:ca:04:db:25:c4:9d: c6:5c:87:70:d9:af:ad:03:eb:f8:e9:85:29:70:90: b2:d6:12:64:83:2a:13:6c:96:73:96:47:ee:e4:14: f6:78:fa:d2:cd:94:09:26:95:fd:67:a0:14:90:84: d2:de:80:4d:fc:c2:93:e3:53:81:50:69:0f:c0:f8: f0:0c:7c:e7:5b:16:ff:9d:96:85:3c:b8:de:bc:4c: 43:fa:3d:40:18:90:48:a6:13:aa:40:2e:9b:e8:c3: 9c:5e:88:60:59:8f:53:42:78:7b:a1:13:5e:78:4d: 29:45:40:ab:93:da:1d:9b:8d:c5:3a:2b:c9:9d:67: 94:d5:b9:b7:48:16:f3:e8:61:86:c2:8f:61:b0:db: 64:56:9d:7b:27:44:4a:a5:1e:d9:52:a6:18:1d:72: ae:71:ab:99:fc:59:6d:36:e8:a6:4d:5b:19:29:68: a7:d3:db:bc:c6:c5:e7:90:08:bb:a5:41:2a:9a:eb: 20:b0:a8:b2:23:2d:e8:eb:74:c0:d1:4b:92:ab:87: ef:f7:af:49:10:f0:5f:11:ad:52:35:95:fc:07:2a: 79:63:df:bc:00:53:67:ff:0b:17:6a:0d:df:26:32: af:36:ac:1e:ee:c7:fc:73:40:16:4c:ee:11:91:0b: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:5D:65:21:C2:83:8F:54:CA:D5:73:29:2B:B6:36:12:F9:92:B5 X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:af:fa:8e:f7:49:33:47:e3:0a:7b:1b:d7:a0:cf:3c:d1: 93:6a:ee:68:25:13:95:08:32:59:ad:30:d8:31:55:1a:36:6b: cb:14:47:ae:63:96:55:03:bd:18:f2:13:1c:ab:b2:77:38:e6: 19:b5:84:10:a0:67:77:82:37:fe:fb:dd:eb:fe:2e:5f:72:dc: 57:b6:e1:50:7b:01:99:5a:f9:dd:96:10:e5:63:58:40:96:e1: 14:e8:b6:c6:75:51:2c:8d:4e:7f:c3:38:21:05:8e:58:f6:aa: bf:86:87:9c:1e:b1:15:ad:e4:83:8b:ea:70:b4:7d:0b:07:aa: b7:db:43:7f:1b:f9:fe:32:2c:bc:a5:8d:d1:cc:f5:e9:57:ed: b4:d5:ed:ff:0a:e1:1c:ce:48:e6:91:51:c5:33:6d:a2:a0:9f: 90:bf:4f:89:b2:db:ea:3a:d2:f3:20:7a:b4:e8:37:05:a2:29: b0:1e:d4:cb:21:f8:f0:64:ef:de:a8:33:ad:25:75:37:73:67: f0:b5:52:54:d8:cb:fc:ea:21:6e:f5:06:bb:2d:a3:34:e5:92: e8:65:f9:5e:d1:49:d5:e4:71:43:79:8c:ce:14:fc:21:92:d2: 1d:77:0f:e2:71:08:22:fe:a3:43:a8:9d:91:fa:b8:cf:4d:d6: 59:34:a7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCNTExMTAvBgNVBAUTKDU2MkZCMzAyQTg3Njc4M0EwODQxNTgwMzhCRDQ5RUY3 MDUxQTYwM0MwHhcNMjUwNDI1MDQ0NjA5WhcNMjUwNTAyMDQ0NjA5WjAYMRYwFAYD VQQDEw02ODBiMTM5MS02OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d6qNhb1pxbKBNslxJ3GXIdw2a+tA+v46YUpcJCy1hJkgyoTbJZzlkfu5BT2 ePrSzZQJJpX9Z6AUkITS3oBN/MKT41OBUGkPwPjwDHznWxb/nZaFPLjevExD+j1A GJBIphOqQC6b6MOcXohgWY9TQnh7oRNeeE0pRUCrk9odm43FOivJnWeU1bm3SBbz 6GGGwo9hsNtkVp17J0RKpR7ZUqYYHXKucauZ/FltNuimTVsZKWin09u8xsXnkAi7 pUEqmusgsKiyIy3o63TA0UuSq4fv969JEPBfEa1SNZX8Byp5Y9+8AFNn/wsXag3f JjKvNqwe7sf8c0AWTO4RkQuqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfdXWUh woOPVMrVcykrtjYS+ZK1MB8GA1UdIwQYMBaAFFYvswKodng6CEFYA4vUnvcFGmA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUI1MS8zN0E1MzRCOEVB ODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVEb0lRVmdEaTlTZTl3VWFZ RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUI1MS8zN0E1MzRCOEVBODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVE b0lRVmdEaTlTZTl3VWFZRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOua/6jvdJM0fjCnsb16DPPNGTau5oJROVCDJZrTDYMVUaNmvLFEeu Y5ZVA70Y8hMcq7J3OOYZtYQQoGd3gjf++93r/i5fctxXtuFQewGZWvndlhDlY1hA luEU6LbGdVEsjU5/wzghBY5Y9qq/hoecHrEVreSDi+pwtH0LB6q320N/G/n+Miy8 pY3RzPXpV+201e3/CuEczkjmkVHFM22ioJ+Qv0+JstvqOtLzIHq06DcFoimwHtTL IfjwZO/eqDOtJXU3c2fwtVJU2Mv86iFu9Qa7LaM05ZLoZfle0UnV5HFDeYzOFPwh ktIddw/icQgi/qNDqJ2R+rjPTdZZNKcn -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:46 2025 by rpki-client