$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: SSAmt+BKkonUkBzcTMvQP98tDy4KQrEDHMT+JoGni6I= Subject key identifier: AB:C9:26:60:19:AB:59:91:84:21:F8:43:A9:9F:E9:B8:29:B9:A5:6A Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C05 Signing time: Mon 12 May 2025 18:34:37 +0000 Manifest this update: Mon 12 May 2025 18:34:37 +0000 Manifest next update: Mon 19 May 2025 18:34:37 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: I+bpY0CnQ6VV6RqQAmNGjFcLPz7IGMUN0dNvLtgRIcc=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: May 12 18:34:37 2025 GMT Not After : May 19 18:34:37 2025 GMT Subject: CN=68223f3d-c8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:38:22:c3:b2:60:04:43:ba:dc:66:e5:ae: 15:74:08:fb:35:6a:96:5b:6c:77:ee:09:2d:f8:e2: 67:71:ed:64:e0:59:7d:3d:90:cc:dc:66:25:92:ba: 71:8c:9c:63:fc:a8:00:3e:a3:23:8a:08:ce:81:bc: 6e:63:d4:44:f8:63:f6:60:e1:d5:52:31:e4:6f:34: dc:c3:af:6e:17:1d:31:f8:02:95:0b:32:b2:d3:26: 1e:dd:d1:5b:e2:a8:e1:17:4f:7d:74:d9:cb:61:7c: 45:1f:0e:f3:b7:84:9a:3b:1a:3e:9a:e2:ca:95:6b: f8:46:d4:ec:b6:6c:21:de:36:53:d2:60:9b:dd:77: 3e:11:4f:62:46:ea:f0:44:26:02:03:6e:73:10:e5: 4d:71:58:4f:49:45:ac:59:e1:5d:a3:af:48:87:80: 11:47:c0:56:42:3a:fc:55:9e:a9:9f:73:2c:02:e9: 3f:0c:48:00:93:7d:1d:32:b8:ce:a3:c9:40:0a:95: 88:21:be:ba:68:75:4e:4d:89:99:e3:c8:98:14:10: 82:17:56:22:03:f5:6e:b9:4c:1d:15:d5:a0:47:e6: 52:08:81:3f:8e:8e:63:6f:14:a4:d4:8f:66:7b:65: de:26:d3:57:3a:69:4c:78:81:1a:f8:4c:79:22:f9: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:26:60:19:AB:59:91:84:21:F8:43:A9:9F:E9:B8:29:B9:A5:6A X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:1b:f4:eb:0b:8f:02:b8:cc:c5:12:7c:9d:f7:40:e3:b5: cb:49:94:35:5a:0d:0c:56:9b:c7:b1:be:b4:e8:24:b3:92:a9: 45:17:9e:77:50:93:17:22:db:d6:a6:b4:55:6a:6b:a3:60:13: e1:74:b8:26:a4:de:ae:21:c8:01:86:e0:8d:be:14:ab:c3:03: 95:b3:81:eb:45:87:2c:f6:b5:3a:a0:24:67:ad:33:6a:49:7e: e2:df:dd:6e:a5:ca:1a:e2:6a:fd:36:03:98:45:83:75:41:1b: b8:08:ef:ac:e5:46:cd:3b:59:8d:99:f7:c3:4a:62:6c:eb:93: e8:9a:ec:66:27:ee:97:cf:38:cd:ad:21:30:1b:61:53:1d:45: 6d:55:13:53:e5:02:b7:53:d7:21:d0:02:8d:0b:4a:bf:b7:dd: 72:cb:0b:93:09:d6:37:31:23:a8:69:38:62:ac:9f:a6:97:3e: f0:b1:0f:bd:ea:7e:56:68:c5:a5:9e:70:da:a4:02:69:a9:ef: b1:a2:6c:60:1d:04:7e:19:e3:b0:79:6b:23:14:0f:53:a8:0d: 10:06:7a:47:7f:f2:5a:79:cb:37:7f:ce:2a:b8:51:55:27:54: 4f:28:5b:bf:6e:d2:31:51:77:3b:3d:1c:85:14:9f:bf:47:29: 25:21:a1:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUwNTEyMTgzNDM3WhcNMjUwNTE5MTgzNDM3WjAYMRYwFAYD VQQDEw02ODIyM2YzZC1jOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMU4IsOyYARDutxm5a4VdAj7NWqWW2x37gkt+OJnce1k4Fl9PZDM3GYlkrpx jJxj/KgAPqMjigjOgbxuY9RE+GP2YOHVUjHkbzTcw69uFx0x+AKVCzKy0yYe3dFb 4qjhF099dNnLYXxFHw7zt4SaOxo+muLKlWv4RtTstmwh3jZT0mCb3Xc+EU9iRurw RCYCA25zEOVNcVhPSUWsWeFdo69Ih4ARR8BWQjr8VZ6pn3MsAuk/DEgAk30dMrjO o8lACpWIIb66aHVOTYmZ48iYFBCCF1YiA/VuuUwdFdWgR+ZSCIE/jo5jbxSk1I9m e2XeJtNXOmlMeIEa+Ex5IvnEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvJJmAZ q1mRhCH4Q6mf6bgpuaVqMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8mhv06wuPArjMxRJ8nfdA47XLSZQ1Wg0MVpvHsb606CSzkqlFF553 UJMXItvWprRVamujYBPhdLgmpN6uIcgBhuCNvhSrwwOVs4HrRYcs9rU6oCRnrTNq SX7i391upcoa4mr9NgOYRYN1QRu4CO+s5UbNO1mNmffDSmJs65PomuxmJ+6XzzjN rSEwG2FTHUVtVRNT5QK3U9ch0AKNC0q/t91yywuTCdY3MSOoaThirJ+mlz7wsQ+9 6n5WaMWlnnDapAJpqe+xomxgHQR+GeOweWsjFA9TqA0QBnpHf/Jaecs3f84quFFV J1RPKFu/btIxUXc7PRyFFJ+/RyklIaF/ -----END CERTIFICATE-----Generated at Tue May 13 12:58:04 2025 by rpki-client