$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: G8282jrS4IORqK0hS/SzkpHHqf5CHUfHjB/z1L6aqco= Subject key identifier: 02:4F:AD:66:EB:E3:DE:11:5E:A6:27:03:FE:FC:89:9D:D2:FC:36:E6 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 0404 Signing time: Thu 15 May 2025 00:29:05 +0000 Manifest this update: Thu 15 May 2025 00:29:04 +0000 Manifest next update: Thu 22 May 2025 00:29:04 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: nufweZiceRjRx38q40srFKSNsAzw+JecEWGsdo87wX8=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: May 15 00:29:04 2025 GMT Not After : May 22 00:29:04 2025 GMT Subject: CN=68253551-c954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:d8:7c:0f:4e:2e:09:a8:38:17:3f:3e:cc: e0:45:a7:6c:8f:c8:bd:8e:2e:90:9c:6d:43:a4:05: 7a:07:02:37:79:b3:8e:11:4a:7a:64:63:2b:42:a9: 01:16:03:af:19:b7:6e:94:8a:b8:0f:b7:50:b8:2e: cd:8f:18:f8:19:cc:8b:dc:53:a8:e3:56:fd:b4:f5: 52:e7:e9:3d:a2:09:78:86:1a:26:d5:e6:c5:f3:3c: a0:c3:03:7f:2f:b7:68:15:05:5d:61:46:89:39:57: 12:55:00:53:a0:43:d6:0b:50:a5:1b:b2:0e:09:ed: eb:6f:05:10:82:73:24:8f:25:dc:14:e4:35:57:d1: ce:e1:d9:d8:42:fe:22:78:3d:2c:71:be:c0:69:6c: f8:72:70:7d:01:23:79:02:54:08:9f:e4:a5:b2:95: 8d:f0:be:ba:c5:8f:7d:dd:aa:02:91:b1:27:15:e9: 51:39:8f:54:36:08:af:30:e0:ef:67:72:b6:c3:b7: 20:a1:78:3c:41:e1:ad:78:d1:9c:5f:a7:40:93:f2: b1:8a:88:8f:2b:e1:4b:5e:9b:1d:5d:62:b5:81:14: 64:56:93:ad:23:d3:84:86:a3:79:78:bd:ec:95:80: fd:7e:3b:c6:ac:b6:04:e0:c5:a2:15:a1:02:30:ff: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:AD:66:EB:E3:DE:11:5E:A6:27:03:FE:FC:89:9D:D2:FC:36:E6 X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e2:04:b0:8f:18:9e:a4:e8:43:c1:ef:01:d7:53:28:41:df: 45:6a:f3:4d:81:84:3a:cf:03:e2:7a:5f:86:74:74:b9:69:2f: 9c:8e:32:78:56:47:f0:4a:79:c4:b6:ad:b1:e8:14:33:35:5c: 5c:ef:14:6c:be:c4:19:a4:63:b2:0c:ef:18:2f:68:3d:25:6f: 9b:e4:82:bb:8e:c8:42:93:f5:3a:aa:38:74:22:bf:e7:cc:a7: e3:6c:a1:de:17:ba:7e:24:89:a4:80:c7:1d:66:b3:92:04:9b: 95:ae:94:03:69:8e:b7:a8:6f:1c:d5:4b:ea:4c:e0:8d:a4:28: 37:a2:e2:fe:9a:d3:e0:31:ad:b8:49:09:e8:de:e7:78:33:1d: 19:e8:e8:d1:b9:93:77:b5:1b:d6:36:91:44:47:48:2c:06:ba: 48:3e:9f:1c:83:2d:3e:fe:b9:69:f8:d5:f0:0d:52:49:86:23: 27:59:e5:91:ec:be:a2:e3:74:e6:87:b0:16:d0:07:98:8f:0f: 0b:7a:0d:2d:29:3d:ab:c8:b6:de:ea:6d:2a:b3:f2:e4:2f:8b: 61:53:4e:b4:e0:52:eb:88:9a:e9:85:9a:05:36:51:e8:dd:da: 69:2e:f0:5c:30:9a:a0:30:e5:f0:ee:7a:87:0e:1a:dd:9b:6c: 0c:c9:71:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUwNTE1MDAyOTA0WhcNMjUwNTIyMDAyOTA0WjAYMRYwFAYD VQQDEw02ODI1MzU1MS1jOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0nYfA9OLgmoOBc/PszgRadsj8i9ji6QnG1DpAV6BwI3ebOOEUp6ZGMrQqkB FgOvGbdulIq4D7dQuC7Njxj4GcyL3FOo41b9tPVS5+k9ogl4hhom1ebF8zygwwN/ L7doFQVdYUaJOVcSVQBToEPWC1ClG7IOCe3rbwUQgnMkjyXcFOQ1V9HO4dnYQv4i eD0scb7AaWz4cnB9ASN5AlQIn+SlspWN8L66xY993aoCkbEnFelROY9UNgivMODv Z3K2w7cgoXg8QeGteNGcX6dAk/KxioiPK+FLXpsdXWK1gRRkVpOtI9OEhqN5eL3s lYD9fjvGrLYE4MWiFaECMP/hTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJPrWbr 494RXqYnA/78iZ3S/DbmMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB24gSwjxiepOhDwe8B11MoQd9FavNNgYQ6zwPiel+GdHS5aS+cjjJ4 VkfwSnnEtq2x6BQzNVxc7xRsvsQZpGOyDO8YL2g9JW+b5IK7jshCk/U6qjh0Ir/n zKfjbKHeF7p+JImkgMcdZrOSBJuVrpQDaY63qG8c1UvqTOCNpCg3ouL+mtPgMa24 SQno3ud4Mx0Z6OjRuZN3tRvWNpFER0gsBrpIPp8cgy0+/rlp+NXwDVJJhiMnWeWR 7L6i43Tmh7AW0AeYjw8Leg0tKT2ryLbe6m0qs/LkL4thU0604FLriJrphZoFNlHo 3dppLvBcMJqgMOXw7nqHDhrdm2wMyXEm -----END CERTIFICATE-----Generated at Sat May 17 01:56:45 2025 by rpki-client