$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: y8uORWzLxUbYaxbYMi7VlMo45fXwVFvtuZasaXn0o48= Subject key identifier: AF:21:22:FD:6B:DA:47:77:C4:1C:D2:5A:CB:45:FF:C9:72:BF:D1:F8 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B31 Signing time: Sun 04 May 2025 19:00:16 +0000 Manifest this update: Sun 04 May 2025 19:00:15 +0000 Manifest next update: Sun 11 May 2025 19:00:15 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: znM6Y/Y+9B53UBwDqSthCnJ5PUKNrtPecPPiLL32naI=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: srLpp+xocz4bwmTO830ebrOgQWtT6RHMkR4y8UuRo2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: May 4 19:00:15 2025 GMT Not After : May 11 19:00:15 2025 GMT Subject: CN=6817b940-6639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:c1:ab:13:17:90:f0:aa:54:77:42:03:98: eb:c3:01:af:69:e2:98:d2:00:ed:30:0d:ee:83:1e: 91:85:3a:a6:21:ee:df:02:c8:08:bb:4c:b7:ff:93: f6:97:04:8d:80:e9:bb:6d:33:be:8b:f5:f4:63:06: 18:dd:33:56:08:b0:84:0b:61:e8:b2:50:a0:b6:49: 9c:4d:b0:cf:91:3d:79:6c:d3:74:52:29:d2:8f:dd: 8b:f7:48:e0:06:fe:4d:df:21:18:8e:a9:73:72:16: 7e:d6:44:b1:22:e4:70:e7:92:b2:f9:cd:b0:fa:8d: cd:14:40:0f:96:48:d6:45:85:6a:be:ca:d0:e8:1d: 07:6d:3a:91:83:81:f0:38:2d:76:06:d3:16:84:84: d0:17:2b:a2:f7:e0:09:81:a1:e2:c0:a0:33:e8:c8: a8:c2:dd:7f:ec:9d:8e:26:a5:a1:95:73:cf:66:2d: 45:e2:cd:a5:87:c5:f8:54:46:b7:22:4b:bc:39:76: 31:6d:19:60:3b:3b:2e:20:fe:a2:6e:78:d6:35:fd: 50:ed:cb:76:64:bc:ef:f6:4a:54:7f:a5:0c:b7:32: e0:a4:3b:91:ce:af:7e:d2:6b:67:12:6f:4d:10:29: 33:b8:f4:07:63:aa:2f:11:60:cc:3f:f9:39:ab:b6: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:22:FD:6B:DA:47:77:C4:1C:D2:5A:CB:45:FF:C9:72:BF:D1:F8 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3b:ef:15:ce:76:c9:12:54:75:27:f6:96:c7:48:d3:25:f0: e6:30:a7:fe:93:9a:b6:62:b8:94:ee:2c:2a:3f:a4:95:60:fd: 69:b0:12:27:13:a2:77:ad:81:c0:85:61:57:36:58:6c:61:7c: 06:34:9d:c6:a4:cb:10:4a:d3:e7:eb:51:2c:8c:50:d8:00:8f: 31:e9:85:46:7e:4c:5e:50:3f:85:77:74:9e:60:92:cf:17:20: f9:da:99:cc:ad:57:91:be:16:6c:35:4a:79:0b:bf:00:4f:a6: 21:7d:05:eb:15:f4:30:48:06:3d:bf:5c:bd:96:57:8d:72:7c: 1f:cc:80:30:89:f6:34:3f:36:bb:ec:7c:63:ff:f1:9b:3b:96: c6:df:93:38:84:38:2e:a7:bc:93:15:09:5d:a0:af:d1:95:30: ab:29:21:9a:82:5a:68:7e:75:5b:03:fe:84:59:6f:4a:40:97: 58:e3:4a:73:31:e2:c1:ea:a3:49:72:cd:f9:1b:13:c3:96:a2: a7:ba:29:3f:a8:71:f8:77:2b:a6:0c:97:69:29:60:a3:6f:e1: ee:9b:61:46:8e:f7:39:2c:c8:ed:5e:29:44:06:df:a8:b0:7f: 38:01:3a:98:aa:0e:0a:36:a7:5e:bc:43:78:c6:21:6d:82:a4: 7b:31:2c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUwNTA0MTkwMDE1WhcNMjUwNTExMTkwMDE1WjAYMRYwFAYD VQQDEw02ODE3Yjk0MC02NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2HBqxMXkPCqVHdCA5jrwwGvaeKY0gDtMA3ugx6RhTqmIe7fAsgIu0y3/5P2 lwSNgOm7bTO+i/X0YwYY3TNWCLCEC2HoslCgtkmcTbDPkT15bNN0UinSj92L90jg Bv5N3yEYjqlzchZ+1kSxIuRw55Ky+c2w+o3NFEAPlkjWRYVqvsrQ6B0HbTqRg4Hw OC12BtMWhITQFyui9+AJgaHiwKAz6Miowt1/7J2OJqWhlXPPZi1F4s2lh8X4VEa3 Iku8OXYxbRlgOzsuIP6ibnjWNf1Q7ct2ZLzv9kpUf6UMtzLgpDuRzq9+0mtnEm9N ECkzuPQHY6ovEWDMP/k5q7Zh+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8hIv1r 2kd3xBzSWstF/8lyv9H4MB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuO+8VznbJElR1J/aWx0jTJfDmMKf+k5q2YriU7iwqP6SVYP1psBIn E6J3rYHAhWFXNlhsYXwGNJ3GpMsQStPn61EsjFDYAI8x6YVGfkxeUD+Fd3SeYJLP FyD52pnMrVeRvhZsNUp5C78AT6YhfQXrFfQwSAY9v1y9lleNcnwfzIAwifY0Pza7 7Hxj//GbO5bG35M4hDgup7yTFQldoK/RlTCrKSGaglpofnVbA/6EWW9KQJdY40pz MeLB6qNJcs35GxPDlqKnuik/qHH4dyumDJdpKWCjb+Hum2FGjvc5LMjtXilEBt+o sH84ATqYqg4KNqdevEN4xiFtgqR7MSwV -----END CERTIFICATE-----Generated at Mon May 5 02:57:21 2025 by rpki-client