$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: 1Ku0ZiPKnkZuAbVCaiHz4qbTJbBaElERDGwkKEH7XoM= Subject key identifier: E9:91:3A:9B:2A:EA:75:BD:1E:4A:0E:F7:46:23:4C:2F:AF:CD:14:C8 Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 04E5 Signing time: Sat 10 May 2025 23:20:08 +0000 Manifest this update: Sat 10 May 2025 23:20:08 +0000 Manifest next update: Sat 17 May 2025 23:20:08 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: RxCk/UGfyh44qsNa/ETb3vEA8erZls3Ery9nr1m9Yms=) 2: 9CC8124414FB11EC89900016C4F9AE02.roa (hash: gWhjyEMqWUAxPMY1zAfvuV7x9xBFM4K3zu0o2snNnwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: May 10 23:20:08 2025 GMT Not After : May 17 23:20:08 2025 GMT Subject: CN=681fdf28-2d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:b0:27:44:c2:f8:63:8e:b0:f4:89:bd:ae: 53:f8:5a:70:1b:84:75:dc:ce:28:29:46:38:6d:64: d9:72:e4:8d:5b:ae:30:c8:bf:f6:1d:12:91:6a:65: 2b:21:9b:35:8b:48:e9:14:5d:95:86:fa:aa:4e:df: 64:47:39:f2:5a:4d:65:e0:f7:21:65:9d:c0:12:e1: 0c:35:47:ed:f7:4d:94:7d:cf:cf:26:c4:1a:34:1e: cc:57:3f:42:15:b3:26:cf:b1:8d:d5:83:88:ad:e5: ce:c5:04:91:2e:f7:38:53:70:32:bc:e4:b6:69:fd: ec:76:53:42:49:fb:4d:bb:78:48:d6:9c:5c:2b:af: c8:3c:ed:e1:92:60:8f:af:a6:aa:76:6e:30:bc:f5: 81:6a:3b:f1:03:cb:eb:e4:c2:f7:0c:de:87:14:14: fb:88:29:5d:bd:f6:e4:8a:56:aa:78:44:ee:9a:43: 0d:94:e1:9b:65:ce:c1:98:4d:f0:1a:a1:7d:dd:42: 29:d7:fc:22:1c:e2:46:52:c1:68:3a:3b:a0:2a:13: b2:92:21:67:37:f2:0e:d1:dd:5e:c8:7d:43:53:64: 85:c6:40:96:f0:c6:0f:f4:04:eb:4e:71:03:ac:f8: 45:af:2e:76:6b:4c:38:9f:4d:5d:23:04:50:00:00: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:3A:9B:2A:EA:75:BD:1E:4A:0E:F7:46:23:4C:2F:AF:CD:14:C8 X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:39:e2:c7:dd:d7:f4:66:72:be:71:4f:ce:35:83:af:e1:12: 70:63:2c:ec:b1:0b:bf:07:25:33:4d:ac:30:6f:a8:d5:9b:3a: 39:7d:86:55:c9:a0:c7:4b:0f:d2:bb:1b:db:29:71:95:0a:da: a1:bb:8f:e9:65:cf:21:95:25:27:dc:24:84:11:e0:d3:62:4e: 3c:5a:e7:43:48:09:0d:6f:d7:6a:93:d1:26:e3:35:38:04:16: f9:22:5c:c6:42:da:da:34:35:d3:60:d3:78:10:8e:73:82:33: 62:69:0e:99:3b:1b:da:53:93:01:b9:fc:76:f3:79:41:0c:73: bf:53:34:13:0f:57:fe:e6:c0:c2:77:11:27:47:3b:8e:51:95: b4:c5:71:21:be:52:39:29:1d:37:a5:84:e6:96:4b:59:36:45: 57:98:8a:9f:60:75:72:31:c6:5e:ac:61:1a:2e:0d:36:ce:71: c2:06:83:d1:b0:ff:44:d5:08:b4:4f:7a:dd:49:b7:3e:94:3e: 24:51:e8:bd:0b:a8:be:2a:28:95:12:a9:7b:bd:3b:82:27:36: dd:87:5c:8a:da:c2:0d:59:9c:88:66:8e:57:4f:05:a4:8b:16: ef:28:33:29:e4:c0:42:d6:90:7d:bf:58:ee:58:e4:0f:26:87: 19:2a:aa:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjUwNTEwMjMyMDA4WhcNMjUwNTE3MjMyMDA4WjAYMRYwFAYD VQQDEw02ODFmZGYyOC0yZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pmwJ0TC+GOOsPSJva5T+FpwG4R13M4oKUY4bWTZcuSNW64wyL/2HRKRamUr IZs1i0jpFF2VhvqqTt9kRznyWk1l4PchZZ3AEuEMNUft902Ufc/PJsQaNB7MVz9C FbMmz7GN1YOIreXOxQSRLvc4U3AyvOS2af3sdlNCSftNu3hI1pxcK6/IPO3hkmCP r6aqdm4wvPWBajvxA8vr5ML3DN6HFBT7iCldvfbkilaqeETumkMNlOGbZc7BmE3w GqF93UIp1/wiHOJGUsFoOjugKhOykiFnN/IO0d1eyH1DU2SFxkCW8MYP9ATrTnED rPhFry52a0w4n01dIwRQAABjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmROpsq 6nW9HkoO90YjTC+vzRTIMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrOeLH3df0ZnK+cU/ONYOv4RJwYyzssQu/ByUzTawwb6jVmzo5fYZV yaDHSw/SuxvbKXGVCtqhu4/pZc8hlSUn3CSEEeDTYk48WudDSAkNb9dqk9Em4zU4 BBb5IlzGQtraNDXTYNN4EI5zgjNiaQ6ZOxvaU5MBufx283lBDHO/UzQTD1f+5sDC dxEnRzuOUZW0xXEhvlI5KR03pYTmlktZNkVXmIqfYHVyMcZerGEaLg02znHCBoPR sP9E1Qi0T3rdSbc+lD4kUei9C6i+KiiVEql7vTuCJzbdh1yK2sINWZyIZo5XTwWk ixbvKDMp5MBC1pB9v1juWOQPJocZKqr0 -----END CERTIFICATE-----Generated at Sun May 11 22:05:49 2025 by rpki-client