$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json) Hash identifier: bVDwO1k9A9YLdT9IeE49c3G+x4YUGwgCVg4wNowDkzs= Subject key identifier: A7:2E:FE:B8:32:A3:1F:08:B6:6B:82:80:82:7D:75:81:5E:F7:2D:32 Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft Manifest number: 05DF Signing time: Wed 14 May 2025 23:04:42 +0000 Manifest this update: Wed 14 May 2025 23:04:41 +0000 Manifest next update: Wed 21 May 2025 23:04:41 +0000 Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: KKEF9QSakvTmGgNGOw4kway0e7v8QbYqgzXTN3+xapQ=) 2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=) 3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Validity Not Before: May 14 23:04:41 2025 GMT Not After : May 21 23:04:41 2025 GMT Subject: CN=68252189-07e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:bc:1e:b0:dc:fc:bd:dd:ca:df:ac:fe:a8: 4f:68:c0:f8:d8:b0:97:71:5b:5c:a6:da:41:56:60: df:e6:26:ad:10:f4:8c:ab:8a:18:f4:af:15:1d:e3: 61:1d:30:e2:5f:d6:81:d7:fe:df:25:7f:5a:45:86: e7:1d:0b:18:ed:95:e9:cc:d6:3a:58:f4:31:d8:69: 89:da:ef:71:39:c2:f0:5e:3b:cd:c4:9b:dc:38:b2: b6:09:e1:a8:3b:6c:2c:28:f5:21:4f:91:d7:81:7c: f8:40:75:28:07:13:da:03:d2:ee:a6:e9:02:8a:32: 7f:4e:20:eb:f9:59:a5:3e:dd:83:47:0a:71:6e:ee: ed:9f:04:c7:67:8c:ab:9c:af:f3:9f:81:a6:9d:f5: 84:3c:08:02:1c:77:b9:3d:ac:53:f0:4e:a8:6d:99: f6:21:10:60:1f:01:32:09:28:e2:7e:2b:1d:22:a5: 3d:72:23:9d:8a:9e:1e:4e:50:ae:c7:3d:38:c4:08: cd:56:86:ef:f0:ab:b9:75:20:e1:77:8e:25:9c:37: 20:3d:84:f7:2e:bb:c5:b0:fb:97:c5:aa:d5:aa:f4: 9e:c1:da:ed:06:c9:8f:6d:bc:af:3d:11:c7:33:6c: f2:ff:ab:a4:65:88:71:4f:d3:1d:47:47:b0:19:5e: 25:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:FE:B8:32:A3:1F:08:B6:6B:82:80:82:7D:75:81:5E:F7:2D:32 X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:93:51:cb:8d:3f:5d:15:84:7e:6d:3b:4d:28:44:5b:a3: e2:6d:cf:c5:a8:50:38:b1:73:bc:e1:12:90:c9:94:c4:9c:70: f6:1f:2d:54:04:8b:b5:0e:f0:3d:5c:42:fb:29:66:44:f2:0c: 89:dc:2e:24:70:28:4c:14:f2:4e:38:9f:f0:58:1c:79:b6:be: fe:fe:40:c5:db:1c:88:22:98:23:b2:77:86:fd:30:46:86:17: ea:76:50:2c:01:12:af:92:0e:54:42:24:69:ce:eb:ce:83:89: a1:40:89:67:8e:ab:68:cc:1c:50:7c:43:d8:07:3b:4f:8a:f3: 5e:a3:80:24:e4:98:5c:c6:96:95:0d:6a:1b:cf:fc:01:e9:1e: ed:8c:61:dc:3a:69:e2:95:0f:34:7d:aa:f0:bd:4b:89:29:38: af:b8:2e:f6:30:6d:77:8f:f5:41:c8:fc:b2:4f:32:b5:69:32: 3b:5d:18:aa:3a:8d:87:06:14:75:1b:36:9a:cb:5e:03:d9:71: d0:a8:6c:54:83:0c:9a:04:d1:ad:05:e6:10:2c:95:af:0f:fb: cc:93:16:be:82:ae:a0:d8:29:e7:d4:5d:9b:11:10:88:93:6a: 72:c3:ec:7d:bb:da:b2:31:94:96:72:7e:df:e2:29:db:37:cf: 12:d5:8b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjUwNTE0MjMwNDQxWhcNMjUwNTIxMjMwNDQxWjAYMRYwFAYD VQQDEw02ODI1MjE4OS0wN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtje8HrDc/L3dyt+s/qhPaMD42LCXcVtcptpBVmDf5iatEPSMq4oY9K8VHeNh HTDiX9aB1/7fJX9aRYbnHQsY7ZXpzNY6WPQx2GmJ2u9xOcLwXjvNxJvcOLK2CeGo O2wsKPUhT5HXgXz4QHUoBxPaA9LupukCijJ/TiDr+VmlPt2DRwpxbu7tnwTHZ4yr nK/zn4GmnfWEPAgCHHe5PaxT8E6obZn2IRBgHwEyCSjifisdIqU9ciOdip4eTlCu xz04xAjNVobv8Ku5dSDhd44lnDcgPYT3LrvFsPuXxarVqvSewdrtBsmPbbyvPRHH M2zy/6ukZYhxT9MdR0ewGV4lpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcu/rgy ox8ItmuCgIJ9dYFe9y0yMB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4 bnViVVdya0pEWWpWMnZOXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXJNRy40/XRWEfm07TShEW6Pibc/FqFA4sXO84RKQyZTEnHD2Hy1U BIu1DvA9XEL7KWZE8gyJ3C4kcChMFPJOOJ/wWBx5tr7+/kDF2xyIIpgjsneG/TBG hhfqdlAsARKvkg5UQiRpzuvOg4mhQIlnjqtozBxQfEPYBztPivNeo4Ak5JhcxpaV DWobz/wB6R7tjGHcOmnilQ80farwvUuJKTivuC72MG13j/VByPyyTzK1aTI7XRiq Oo2HBhR1Gzaay14D2XHQqGxUgwyaBNGtBeYQLJWvD/vMkxa+gq6g2Cnn1F2bERCI k2pyw+x9u9qyMZSWcn7f4inbN88S1Yva -----END CERTIFICATE-----Generated at Sat May 17 00:00:02 2025 by rpki-client