$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: /jGzCuIpH4fe3kp+HJSDhVmE8PXFZMOntoGbksZlYwU= Subject key identifier: 05:30:FB:E6:C6:29:37:92:BF:A0:AA:B0:42:18:D0:94:1B:CA:F3:90 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 02A6 Signing time: Tue 13 May 2025 01:18:33 +0000 Manifest this update: Tue 13 May 2025 01:18:33 +0000 Manifest next update: Tue 20 May 2025 01:18:33 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: wKm60B8URcec+zYW3RJUTZQj81yaGvE5NaUd5mFO7rU=) 2: 6FE49AFE8F6E11EF8CE37D0FC4F9AE02.roa (hash: cQYcptVUdqg4RQhUU70P0qYWcn62DA0vSq8TBncoINY=) 3: B4B5BF16907F11EF824E2340C4F9AE02.roa (hash: 3cjuGP2NkUpzwp+CuoNdIlymZnKHR1pKawYbEQT3I3U=) 4: B588D018907F11EF824E2340C4F9AE02.roa (hash: /kcY+NtEqZhcbJZ1YFUIs/mD1vWwcYLdov89hkEo5QI=) 5: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (hash: fh/nPQv/nYQcKywo8IbkfJ3ertJ4PhkZqi8lqFawXaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: May 13 01:18:33 2025 GMT Not After : May 20 01:18:33 2025 GMT Subject: CN=68229de9-f132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:58:d1:7d:ef:45:23:18:fa:9c:39:44:17: 8b:23:03:a3:a9:37:69:5a:82:b1:4c:a3:3c:cb:ff: 58:4a:b2:42:4d:f3:5d:f6:c6:e0:a8:ee:5f:b7:30: 70:8f:72:bd:e4:48:ad:1d:b0:03:48:53:82:78:32: fd:30:49:7a:96:4a:04:23:1a:18:8d:a0:f8:bf:04: 22:14:c4:8d:4f:44:a7:6a:63:89:de:1b:e7:d3:c2: e8:cb:fb:d6:bc:2e:db:e4:f6:85:13:e1:ce:24:60: 5e:9b:51:d8:29:fd:66:63:c7:09:30:e3:95:bb:19: b4:a2:8b:dc:90:96:57:a4:29:f4:a3:18:62:34:4b: f4:1c:0f:a8:39:d8:54:d0:3a:9d:e3:6a:2c:39:da: 77:9f:d7:b9:29:2e:db:a1:36:74:07:70:df:9e:e1: 74:ac:bc:ef:c4:de:70:c8:f2:97:21:88:10:dd:e8: cc:f8:0f:e9:af:89:0e:76:3a:13:90:da:70:d9:f4: cb:aa:0f:1d:95:3f:6b:f7:8e:7e:d1:16:0f:a2:c7: c8:ae:19:9b:16:5d:79:bd:1b:55:8d:b3:5e:10:f8: 7f:49:80:04:3a:d0:c7:3a:23:0c:a2:1a:a4:e7:f2: ef:32:c6:a2:c3:f5:9f:76:bc:6e:ff:d0:16:5f:69: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:FB:E6:C6:29:37:92:BF:A0:AA:B0:42:18:D0:94:1B:CA:F3:90 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ee:8b:c9:2c:b3:ef:ae:99:c4:60:06:a4:20:47:20:45:29: 1c:22:2d:61:40:5e:10:b5:a7:cf:54:c6:ec:c1:ef:20:b8:a2: df:5b:2b:ee:69:2e:a9:8a:fc:9c:c0:67:1f:01:79:97:0f:08: d8:43:f5:56:e2:2a:4f:16:e0:fe:2e:e8:06:d4:66:02:d4:38: d8:4d:06:20:12:37:4f:ed:0d:e8:18:41:ff:6c:55:c8:a0:3d: c3:3a:39:c5:b6:3f:14:e3:fb:47:46:04:0a:da:3a:83:2f:2a: a2:62:bc:5e:eb:5c:cb:79:21:aa:0b:16:30:54:2c:a5:cd:85: 1e:7f:a7:29:8b:cb:b0:60:f0:86:b7:2d:49:cc:a6:3e:4c:0a: 83:fe:58:10:c4:33:51:d6:14:0f:98:56:4d:e8:cb:42:2f:b4: d0:bf:b8:4b:85:4d:f8:92:c6:99:a0:32:e2:74:20:89:d4:8d: ec:bc:4c:be:b7:05:6b:b9:b6:8a:13:6c:b7:75:2b:4a:4f:15: e8:9d:75:9c:fb:d1:3d:e1:09:a4:6d:da:57:a8:83:84:30:31: c4:9d:79:9d:dc:5b:47:9f:78:4e:ca:c2:93:e9:b8:6f:27:b0: 41:b6:76:2b:24:5c:fe:bc:ed:5d:d3:00:03:3b:ea:67:24:bb: a4:23:b7:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwNTEzMDExODMzWhcNMjUwNTIwMDExODMzWjAYMRYwFAYD VQQDEw02ODIyOWRlOS1mMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhtY0X3vRSMY+pw5RBeLIwOjqTdpWoKxTKM8y/9YSrJCTfNd9sbgqO5ftzBw j3K95EitHbADSFOCeDL9MEl6lkoEIxoYjaD4vwQiFMSNT0SnamOJ3hvn08Loy/vW vC7b5PaFE+HOJGBem1HYKf1mY8cJMOOVuxm0oovckJZXpCn0oxhiNEv0HA+oOdhU 0Dqd42osOdp3n9e5KS7boTZ0B3DfnuF0rLzvxN5wyPKXIYgQ3ejM+A/pr4kOdjoT kNpw2fTLqg8dlT9r945+0RYPosfIrhmbFl15vRtVjbNeEPh/SYAEOtDHOiMMohqk 5/LvMsaiw/Wfdrxu/9AWX2mE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUw++bG KTeSv6CqsEIY0JQbyvOQMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD7ovJLLPvrpnEYAakIEcgRSkcIi1hQF4QtafPVMbswe8guKLfWyvu aS6pivycwGcfAXmXDwjYQ/VW4ipPFuD+LugG1GYC1DjYTQYgEjdP7Q3oGEH/bFXI oD3DOjnFtj8U4/tHRgQK2jqDLyqiYrxe61zLeSGqCxYwVCylzYUef6cpi8uwYPCG ty1JzKY+TAqD/lgQxDNR1hQPmFZN6MtCL7TQv7hLhU34ksaZoDLidCCJ1I3svEy+ twVrubaKE2y3dStKTxXonXWc+9E94QmkbdpXqIOEMDHEnXmd3FtHn3hOysKT6bhv J7BBtnYrJFz+vO1d0wADO+pnJLukI7ci -----END CERTIFICATE-----Generated at Wed May 14 09:16:34 2025 by rpki-client