$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: ULT8kSsrS1V3dWhUeVP+M2ba88NRArSZkUBUv+ay10o= Subject key identifier: 32:5F:E7:80:25:77:80:7E:08:0F:01:79:76:36:C3:DA:9D:0C:EE:DF Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 05ED Signing time: Sat 10 May 2025 22:32:09 +0000 Manifest this update: Sat 10 May 2025 22:32:09 +0000 Manifest next update: Sat 17 May 2025 22:32:09 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: kgdjwnvKl6rYvr1kVwipa2Cb75BCQyt5xRnIcpFDy08=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: May 10 22:32:09 2025 GMT Not After : May 17 22:32:09 2025 GMT Subject: CN=681fd3e9-079c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:57:39:8a:e4:cf:34:83:7e:95:98:f5:59: cd:7d:bb:1f:2d:4b:0e:4a:42:2a:b6:2a:51:3f:73: ee:f4:40:7d:6b:99:a1:b1:d9:f1:73:68:3d:79:9e: 04:f3:62:28:ad:83:59:3c:59:78:14:3c:2e:be:9c: 47:76:fa:55:21:bb:5d:da:a4:46:3e:5a:36:1a:52: f5:3e:89:d2:f3:58:4d:6b:51:9f:0e:fa:4e:6a:9c: 14:8a:82:a0:c1:7f:fd:30:bd:ef:9b:fd:dc:f9:e9: 30:dc:69:bb:5a:cd:aa:49:2c:0c:b9:46:0b:42:37: 8b:df:20:fb:08:ff:91:a0:b7:fa:e5:9a:9a:ee:b6: 25:32:60:a9:d7:47:0c:39:d4:09:c5:43:46:30:28: ab:68:59:0e:a0:ed:df:b3:b4:b4:92:c3:5e:cc:c0: 4a:cc:5a:50:4d:53:86:56:23:8b:0f:b0:9c:b9:66: 34:57:04:8e:44:3b:12:97:66:04:71:28:3b:e9:3e: d6:7d:50:27:6d:2e:4d:73:d7:34:ae:85:79:06:06: c2:5d:cd:32:bb:70:a9:0d:28:08:cc:3f:57:8c:ff: 4e:aa:7d:eb:4d:4d:2d:32:42:b5:3e:d2:78:95:1e: bb:f6:a5:9c:83:6f:7b:07:ae:48:10:de:40:b6:1b: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:E7:80:25:77:80:7E:08:0F:01:79:76:36:C3:DA:9D:0C:EE:DF X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:65:ed:7b:b9:f4:30:66:38:6e:ff:e4:f2:c4:2b:89:45: 25:31:6f:ed:9c:60:da:03:54:b7:f2:26:55:12:78:03:f2:e0: e4:c9:0c:5b:03:bb:de:60:5e:fd:2c:ef:1c:a8:fe:37:c8:d5: a0:14:3c:b4:44:1c:fa:07:6a:78:dd:a4:ce:48:5a:d8:69:bc: cf:59:55:40:01:db:f0:02:e9:d6:f8:d2:75:d3:1f:3a:ac:a1: e6:48:83:8c:95:6d:d6:5a:1d:17:b7:67:b3:96:e2:8a:c0:e3: e2:7e:d6:19:b3:e9:c1:ad:95:da:e2:a0:1d:64:c4:b9:af:44: 01:87:9d:3f:87:85:d3:06:41:a6:55:f3:0a:5e:9c:ba:b7:90: 1d:a7:4a:c5:82:2a:44:fc:12:b1:5f:c5:15:aa:64:83:ef:d1: 5a:1c:18:9b:ae:a0:e3:c7:38:1e:e2:63:7d:f6:72:4b:99:89: b8:10:ab:0e:5a:aa:a6:3b:14:13:7b:a7:87:9a:e3:e4:f5:ea: fc:6c:0b:bf:f7:22:d6:a8:54:32:d0:aa:7f:fa:6f:fa:23:91: be:f3:4d:be:88:38:e9:37:16:54:c8:a1:94:4a:ed:f7:02:20: 35:a1:6a:39:61:4b:32:3f:b2:46:b5:25:54:c1:ec:c0:37:dd: 6d:69:7f:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNTEwMjIzMjA5WhcNMjUwNTE3MjIzMjA5WjAYMRYwFAYD VQQDEw02ODFmZDNlOS0wNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LFXOYrkzzSDfpWY9VnNfbsfLUsOSkIqtipRP3Pu9EB9a5mhsdnxc2g9eZ4E 82IorYNZPFl4FDwuvpxHdvpVIbtd2qRGPlo2GlL1PonS81hNa1GfDvpOapwUioKg wX/9ML3vm/3c+ekw3Gm7Ws2qSSwMuUYLQjeL3yD7CP+RoLf65Zqa7rYlMmCp10cM OdQJxUNGMCiraFkOoO3fs7S0ksNezMBKzFpQTVOGViOLD7CcuWY0VwSORDsSl2YE cSg76T7WfVAnbS5Nc9c0roV5BgbCXc0yu3CpDSgIzD9XjP9Oqn3rTU0tMkK1PtJ4 lR679qWcg297B65IEN5Aths5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJf54Al d4B+CA8BeXY2w9qdDO7fMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb1mXte7n0MGY4bv/k8sQriUUlMW/tnGDaA1S38iZVEngD8uDkyQxb A7veYF79LO8cqP43yNWgFDy0RBz6B2p43aTOSFrYabzPWVVAAdvwAunW+NJ10x86 rKHmSIOMlW3WWh0Xt2ezluKKwOPiftYZs+nBrZXa4qAdZMS5r0QBh50/h4XTBkGm VfMKXpy6t5Adp0rFgipE/BKxX8UVqmSD79FaHBibrqDjxzge4mN99nJLmYm4EKsO WqqmOxQTe6eHmuPk9er8bAu/9yLWqFQy0Kp/+m/6I5G+802+iDjpNxZUyKGUSu33 AiA1oWo5YUsyP7JGtSVUwezAN91taX+Q -----END CERTIFICATE-----Generated at Mon May 12 17:27:03 2025 by rpki-client