$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: ZSVp6irlAldnE+2YFv8Hmp375MTmLPls26ZoeqjJRuM= Subject key identifier: 01:08:D8:D7:3E:D6:91:A8:29:F8:1C:96:C9:33:8C:50:28:47:C6:21 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 0115 Signing time: Fri 25 Apr 2025 03:56:43 +0000 Manifest this update: Fri 25 Apr 2025 03:56:42 +0000 Manifest next update: Fri 02 May 2025 03:56:42 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: Pj4uv27jAudahpVDQ247ybJtKywplmrzTeF0pKP1/Z4=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Apr 25 03:56:42 2025 GMT Not After : May 2 03:56:42 2025 GMT Subject: CN=680b07fb-ef38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:8e:9c:cc:a4:b1:40:4c:4a:12:92:17:28: 80:37:83:5e:06:c7:c3:e1:54:6b:54:ec:d3:d8:a9: 39:ca:40:15:de:2f:a5:77:4e:90:8b:07:f4:32:f4: c4:24:b0:2d:44:5c:35:a8:08:38:7c:76:1a:73:32: 05:7c:87:07:e0:35:79:1f:65:4b:7a:1a:c4:74:9a: 16:f1:be:c9:5f:d1:bb:0a:e2:d6:68:51:d6:55:e1: c8:ed:d6:4a:92:9d:d9:87:d4:a9:d4:e5:fa:84:b4: c9:9e:5c:94:91:ed:a6:f1:b2:67:56:84:2c:24:89: 6e:2b:14:98:08:4c:ff:0b:70:c8:e9:1a:a8:21:cc: 36:b1:b7:27:97:47:51:b7:1e:bf:c5:c4:d6:69:ff: 7c:cd:06:a7:35:fe:dc:0c:b2:68:66:ef:e6:10:41: ef:db:ce:e8:5c:27:00:72:b6:e6:e9:26:7e:b9:58: 95:90:fc:04:3c:f2:cd:f9:c9:64:3c:c4:0c:97:5b: fb:f4:33:00:85:90:a9:b2:47:19:a5:b4:6e:38:b4: 65:02:b7:4f:28:49:b4:44:e1:a7:d4:e4:ce:6e:4d: 82:10:00:72:a9:f2:0a:6a:5c:fb:50:97:0c:4c:f6: 4f:7e:60:16:32:50:34:f2:23:06:52:2b:19:5b:8c: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:D8:D7:3E:D6:91:A8:29:F8:1C:96:C9:33:8C:50:28:47:C6:21 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:95:44:e1:c5:47:62:39:67:b4:df:4c:f5:5c:e4:64:9a:cb: 37:e2:90:8a:1b:ad:54:ff:3f:bd:fd:f2:8c:ce:5b:4a:fc:79: 23:ec:dc:15:2f:fb:4e:00:3a:aa:ec:d9:09:9f:ef:f9:a5:35: ef:97:10:4f:a5:d3:74:4d:f0:1c:4a:da:08:87:53:ba:be:55: a5:87:08:36:05:9e:b8:5c:4d:f0:56:97:45:e9:da:c3:3a:e3: 2b:a2:fa:5a:5d:f1:7f:f3:da:8e:0c:22:e7:48:d5:d8:04:b5: c4:ec:1c:56:fe:16:f6:e0:4b:63:14:32:28:2b:b2:3b:d3:9c: 74:a2:f3:00:c2:24:9e:19:48:6d:0f:61:e9:dd:33:f4:13:cc: 65:b1:6b:05:14:b1:1e:ca:83:79:31:a9:3c:b8:fa:cf:97:dc: 12:6a:d4:8e:65:bc:e2:9e:5a:2b:9e:f0:2c:d8:21:ff:71:31: 49:92:a3:61:0b:90:af:1d:50:65:4a:85:8f:b6:94:5a:6e:9e: f7:8f:dd:7d:0c:e2:81:6a:fb:21:7d:19:1d:b1:f2:4a:d0:f8: e2:df:40:76:4d:3e:fe:d5:03:45:d7:14:ff:0e:3d:6e:ee:84: b3:3d:98:b6:59:47:e4:65:b2:9b:a8:38:e3:17:5b:af:fa:f5: a3:73:0b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNDI1MDM1NjQyWhcNMjUwNTAyMDM1NjQyWjAYMRYwFAYD VQQDEw02ODBiMDdmYi1lZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnGOnMyksUBMShKSFyiAN4NeBsfD4VRrVOzT2Kk5ykAV3i+ld06Qiwf0MvTE JLAtRFw1qAg4fHYaczIFfIcH4DV5H2VLehrEdJoW8b7JX9G7CuLWaFHWVeHI7dZK kp3Zh9Sp1OX6hLTJnlyUke2m8bJnVoQsJIluKxSYCEz/C3DI6RqoIcw2sbcnl0dR tx6/xcTWaf98zQanNf7cDLJoZu/mEEHv287oXCcAcrbm6SZ+uViVkPwEPPLN+clk PMQMl1v79DMAhZCpskcZpbRuOLRlArdPKEm0ROGn1OTObk2CEAByqfIKalz7UJcM TPZPfmAWMlA08iMGUisZW4xW6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEI2Nc+ 1pGoKfgclskzjFAoR8YhMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/lUThxUdiOWe030z1XORkmss34pCKG61U/z+9/fKMzltK/Hkj7NwV L/tOADqq7NkJn+/5pTXvlxBPpdN0TfAcStoIh1O6vlWlhwg2BZ64XE3wVpdF6drD OuMrovpaXfF/89qODCLnSNXYBLXE7BxW/hb24EtjFDIoK7I705x0ovMAwiSeGUht D2Hp3TP0E8xlsWsFFLEeyoN5Mak8uPrPl9wSatSOZbzinlornvAs2CH/cTFJkqNh C5CvHVBlSoWPtpRabp73j919DOKBavshfRkdsfJK0Pji30B2TT7+1QNF1xT/Dj1u 7oSzPZi2WUfkZbKbqDjjF1uv+vWjcws1 -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:52 2025 by rpki-client