$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: vuVoUsSpYvdERu0a1TrZgHv5IoCgCD0fbzGMaFCBMuI= Subject key identifier: 4A:DB:DD:11:2D:93:67:B5:98:7F:2F:7F:DF:E1:CB:43:92:DB:70:25 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 77 Signing time: Tue 13 May 2025 06:00:23 +0000 Manifest this update: Tue 13 May 2025 06:00:22 +0000 Manifest next update: Tue 20 May 2025 06:00:22 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: LFoSaEATF5SfHNmx714/UEZvrNBJuWWpVDcG0b/3s38=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: May 13 06:00:22 2025 GMT Not After : May 20 06:00:22 2025 GMT Subject: CN=6822dff7-c6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:8e:13:d3:7e:8c:81:48:05:00:76:de:7e: de:d0:ed:7c:e6:7e:49:3b:41:be:b1:d4:e7:fb:7b: 3d:13:8a:13:3f:06:ed:ae:e7:fa:37:8a:7e:fd:8e: e4:80:b4:31:59:1f:d4:42:03:cd:c0:fc:bd:50:ab: e6:6c:21:d7:8f:8a:29:5b:78:f8:e7:20:aa:c4:63: 8d:29:a4:bf:9e:44:b4:ca:44:b2:93:bf:a5:2f:12: d9:b1:ef:cc:f0:f3:72:5a:73:34:06:4a:ec:7b:cd: bb:61:7a:fb:28:20:95:01:d7:7a:48:ea:a4:ac:82: 41:03:2d:f2:80:5e:5c:4d:34:bb:47:5a:bf:f4:8d: a9:1e:fb:31:9e:85:33:35:d7:d9:1f:a1:6d:26:e7: cf:51:45:b6:c0:58:73:9c:25:94:30:3c:db:02:6a: 36:2e:38:e2:3a:79:17:ee:65:89:8e:6b:79:0c:d1: 49:58:35:92:e6:12:31:50:51:52:1b:3f:3a:e3:12: 18:3a:a4:39:ba:4e:34:c0:ee:b8:5e:9c:bf:6a:21: ce:52:d4:6b:68:df:11:de:de:3b:8c:71:91:27:a7: 5d:f4:9e:a0:f0:5e:b3:b3:2d:77:7f:96:ce:41:79: 06:02:e3:d4:e9:7b:80:79:d0:60:0f:1a:a8:40:3d: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DB:DD:11:2D:93:67:B5:98:7F:2F:7F:DF:E1:CB:43:92:DB:70:25 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e8:d5:80:fc:96:87:f2:a5:2e:e0:5e:67:11:1d:16:95:48: aa:ad:20:a1:0c:5f:9d:77:41:fe:7e:37:ed:28:8f:71:7d:e1: c1:ce:e6:60:25:6f:e7:b8:a1:f4:30:7e:81:3a:af:f7:83:2b: e2:27:69:d6:22:23:49:88:33:d0:f2:43:de:ea:da:c5:77:d8: 8b:58:82:e9:73:ac:35:7e:3e:42:d1:b7:37:e0:36:5d:d0:26: eb:13:7e:f7:a5:bf:7a:8a:ce:9e:95:c1:ab:d6:a3:d6:44:05: 2d:c4:63:e2:cb:d6:36:c2:43:ae:18:b6:2d:0f:b9:f1:41:4e: 20:9c:7c:e0:85:b6:b3:4e:1b:e6:96:aa:d2:27:36:50:eb:1f: 08:3c:3a:9a:ef:08:11:69:02:45:a0:26:33:8b:d8:4d:45:ff: 51:b8:1b:03:9a:5f:9e:a5:b0:66:09:36:d7:92:c2:68:9c:08: 41:a4:97:5e:77:1d:ff:68:18:51:e1:d7:af:86:8e:3b:42:19: 5e:88:93:c0:4f:7d:5f:bb:f1:b9:06:93:6b:04:f7:f4:a0:de: bb:9f:5a:3e:eb:2b:17:3b:f3:10:03:18:7b:e8:ca:d9:b7:00: f5:55:1e:84:a7:db:69:ef:62:f4:87:4b:15:d7:3f:c8:46:42: 26:ee:79:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzZGQTExMC8GA1UEBRMoNTUzM0E3QzU3QkY0REIxRTUzOEY5RTc3RTBCNDg2OEI4 RjkwQzU4MjAeFw0yNTA1MTMwNjAwMjJaFw0yNTA1MjAwNjAwMjJaMBgxFjAUBgNV BAMTDTY4MjJkZmY3LWM2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA9I4T036MgUgFAHbeft7Q7Xzmfkk7Qb6x1Of7ez0TihM/Bu2u5/o3in79juSA tDFZH9RCA83A/L1Qq+ZsIdePiilbePjnIKrEY40ppL+eRLTKRLKTv6UvEtmx78zw 83JaczQGSux7zbthevsoIJUB13pI6qSsgkEDLfKAXlxNNLtHWr/0jake+zGehTM1 19kfoW0m589RRbbAWHOcJZQwPNsCajYuOOI6eRfuZYmOa3kM0UlYNZLmEjFQUVIb PzrjEhg6pDm6TjTA7rhenL9qIc5S1Gto3xHe3juMcZEnp130nqDwXrOzLXd/ls5B eQYC49Tpe4B50GAPGqhAPQv5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUStvdES2T Z7WYfy9/3+HLQ5LbcCUwHwYDVR0jBBgwFoAUVTOnxXv02x5Tj5534LSGi4+QxYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NkZBLzlDNTJBN0U4ODRD OTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRPbnhYdjAyeDVUajU1MzRMU0dpNC1ReFlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NkZBLzlDNTJBN0U4ODRDOTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1 VGo1NTM0TFNHaTQtUXhZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABro1YD8lofypS7gXmcRHRaVSKqtIKEMX513Qf5+N+0oj3F94cHO5mAl b+e4ofQwfoE6r/eDK+InadYiI0mIM9DyQ97q2sV32ItYgulzrDV+PkLRtzfgNl3Q JusTfvelv3qKzp6VwavWo9ZEBS3EY+LL1jbCQ64Yti0PufFBTiCcfOCFtrNOG+aW qtInNlDrHwg8OprvCBFpAkWgJjOL2E1F/1G4GwOaX56lsGYJNteSwmicCEGkl153 Hf9oGFHh16+GjjtCGV6Ik8BPfV+78bkGk2sE9/Sg3rufWj7rKxc78xADGHvoytm3 APVVHoSn22nvYvSHSxXXP8hGQibueRI= -----END CERTIFICATE-----Generated at Tue May 13 18:53:08 2025 by rpki-client