$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: 9CoiavZvSNy2cxoUuTYVgzTHdYuMKA5cFJujeprO91c= Subject key identifier: AF:5E:0D:3B:9B:F2:59:8B:50:F5:0B:5A:C3:E4:48:C3:28:50:70:89 Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: 93 Signing time: Tue 13 May 2025 05:34:10 +0000 Manifest this update: Tue 13 May 2025 05:34:10 +0000 Manifest next update: Tue 20 May 2025 05:34:10 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: ZlsW3mUJ9QgQi5qTrDK7gt56UklRBXuFnp+KIIVu1do=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: May 13 05:34:10 2025 GMT Not After : May 20 05:34:10 2025 GMT Subject: CN=6822d9d2-5a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:57:9f:75:bd:f6:ac:a7:85:37:e1:99:0c: 44:39:cf:e5:21:99:22:65:54:56:df:7a:20:81:cd: 2e:c7:4b:c9:85:26:a6:7e:fc:9e:6a:91:3b:79:78: af:d9:51:f1:6d:25:21:d4:3b:5a:d3:35:b8:e3:ea: bf:cc:a5:a4:41:8e:34:ff:27:2d:60:ae:e1:26:e6: 7e:96:29:3d:8d:27:e4:5b:20:36:ea:01:9c:de:2e: 5c:89:71:bd:49:04:b3:83:f9:8c:5f:41:25:55:e8: 82:ae:ba:19:7c:20:66:a7:7d:8f:38:9f:ac:28:4f: 93:38:f4:bf:8c:5f:01:03:84:76:0d:be:e7:31:cc: cb:28:98:96:0c:94:2f:29:18:6a:6c:fe:63:d8:2f: 44:e5:53:06:d5:a9:af:6f:f1:12:e4:f7:56:93:57: 57:d6:6a:24:91:5e:34:ad:f6:d8:96:cf:96:ae:83: 9a:9f:d0:85:fe:b1:61:65:18:bf:54:6a:8b:2b:16: d5:51:3a:3a:f8:33:ab:47:01:fe:76:27:a0:73:c5: a6:b3:20:9c:52:bb:de:2d:2d:34:16:2c:20:a3:ed: cc:3f:3d:43:10:65:33:f1:4b:3c:e3:a5:34:c4:3c: f6:e1:97:66:22:05:0d:04:10:c6:97:72:4e:42:10: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5E:0D:3B:9B:F2:59:8B:50:F5:0B:5A:C3:E4:48:C3:28:50:70:89 X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:82:96:f5:c4:6c:b6:09:9b:91:47:4f:00:0d:46:78:63: ce:b0:73:ad:7a:a0:a3:10:9e:13:38:68:2f:d0:1e:ce:48:a5: 22:69:5e:99:f1:96:b2:4d:16:c9:cd:2c:77:68:df:27:b3:8b: 7b:f8:08:06:ad:a2:8e:0b:dd:9a:f7:57:d2:cc:23:72:6a:90: 2c:65:c6:0c:18:89:4f:94:2e:65:6b:c6:87:33:82:a5:c5:4f: 71:5d:c8:f2:40:f3:fd:ed:4a:3c:39:9a:1f:77:59:c3:99:77: e1:d8:91:60:98:0d:38:8c:06:9b:ab:55:d4:5f:78:e1:99:6b: f9:53:15:85:62:4f:ef:9f:81:a5:ef:fa:f6:bf:03:44:25:62: 19:12:93:c9:72:d2:61:50:e1:f6:cc:77:fc:5c:97:2f:5a:46: fd:c2:b9:c9:29:50:8b:81:ac:db:53:7f:b8:43:89:27:53:01: 2d:8a:8b:f6:88:b1:a7:49:d7:ff:be:ea:5b:52:79:74:bd:d9: 03:1c:27:32:fd:c2:d0:d6:6f:7f:50:9a:25:6a:33:89:6c:dd: 2a:55:28:31:8c:4c:bc:ad:53:41:1b:1b:4f:d4:d1:c5:96:c3: ff:ce:d1:cd:8a:e6:d0:7f:67:24:be:ae:60:48:55:35:b2:99: 85:8f:2e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNTEzMDUzNDEwWhcNMjUwNTIwMDUzNDEwWjAYMRYwFAYD VQQDEw02ODIyZDlkMi01YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbFXn3W99qynhTfhmQxEOc/lIZkiZVRW33oggc0ux0vJhSamfvyeapE7eXiv 2VHxbSUh1Dta0zW44+q/zKWkQY40/yctYK7hJuZ+lik9jSfkWyA26gGc3i5ciXG9 SQSzg/mMX0ElVeiCrroZfCBmp32POJ+sKE+TOPS/jF8BA4R2Db7nMczLKJiWDJQv KRhqbP5j2C9E5VMG1amvb/ES5PdWk1dX1mokkV40rfbYls+WroOan9CF/rFhZRi/ VGqLKxbVUTo6+DOrRwH+diegc8WmsyCcUrveLS00Fiwgo+3MPz1DEGUz8Us846U0 xDz24ZdmIgUNBBDGl3JOQhC4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9eDTub 8lmLUPULWsPkSMMoUHCJMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd2IKW9cRstgmbkUdPAA1GeGPOsHOteqCjEJ4TOGgv0B7OSKUiaV6Z 8ZayTRbJzSx3aN8ns4t7+AgGraKOC92a91fSzCNyapAsZcYMGIlPlC5la8aHM4Kl xU9xXcjyQPP97Uo8OZofd1nDmXfh2JFgmA04jAabq1XUX3jhmWv5UxWFYk/vn4Gl 7/r2vwNEJWIZEpPJctJhUOH2zHf8XJcvWkb9wrnJKVCLgazbU3+4Q4knUwEtiov2 iLGnSdf/vupbUnl0vdkDHCcy/cLQ1m9/UJolajOJbN0qVSgxjEy8rVNBGxtP1NHF lsP/ztHNiubQf2ckvq5gSFU1spmFjy5y -----END CERTIFICATE-----Generated at Wed May 14 13:25:56 2025 by rpki-client