$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: Nqu3q2DesZ9SntHzatsC91ThjhNfoJlZfmhWCAoGL1c= Subject key identifier: 51:54:87:07:CD:1A:32:15:EA:BD:73:6E:3E:B7:75:E4:C4:29:CD:75 Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0413 Signing time: Sun 11 May 2025 00:00:01 +0000 Manifest this update: Sun 11 May 2025 00:00:00 +0000 Manifest next update: Sun 18 May 2025 00:00:00 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: f08ZiN+hTe41KHl0WP0Da9h3Dlbe1XqUfU6uC7bv+j8=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: May 11 00:00:00 2025 GMT Not After : May 18 00:00:00 2025 GMT Subject: CN=681fe881-b797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:09:71:71:41:b2:f9:ef:e0:0b:ab:21:f6: 4c:6c:a1:03:dd:28:73:95:71:58:4d:77:b3:39:03: 30:8a:f8:93:98:eb:df:99:86:a3:76:9e:6d:5e:26: df:77:14:db:8f:84:84:0d:da:7b:bf:66:7d:24:13: a9:46:5f:6c:48:19:e6:3b:aa:66:34:dc:26:5d:61: e8:70:79:a8:a7:16:04:df:9c:24:6e:96:78:59:55: 9a:74:07:50:74:8e:a8:7a:d4:60:3c:30:54:24:fc: 35:88:42:d2:42:60:c4:e2:7a:fd:94:31:a6:93:f3: a6:ed:87:6e:c0:06:84:1c:a0:56:55:1b:e1:f4:8d: cb:2e:b8:0d:cb:10:aa:25:5a:97:79:23:59:82:f2: 48:f5:b3:fd:db:5e:0e:56:d4:0e:7e:af:63:dc:d5: 51:87:d7:3c:6c:56:20:44:59:6d:d9:63:fa:2c:50: 39:6f:73:aa:b0:b2:9f:48:55:2e:39:74:02:7c:58: 46:67:21:21:00:2b:e8:9e:f0:5f:c2:8c:33:78:f7: b2:49:44:f9:1c:a0:2e:79:1b:8a:9e:2e:be:b2:cd: ac:20:e4:e9:2f:e0:b4:0b:2c:8e:19:42:cb:43:96: 64:14:14:28:01:1e:f9:a5:50:34:53:5e:17:36:13: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:87:07:CD:1A:32:15:EA:BD:73:6E:3E:B7:75:E4:C4:29:CD:75 X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:8c:57:39:d3:01:15:50:82:1d:47:82:6f:d0:9b:6e:70:1b: 48:f0:20:b5:36:a9:9a:8f:2d:ca:2b:58:8d:ca:5f:18:de:d4: 6b:33:e8:ca:f3:53:3c:bc:83:5d:ef:66:ea:59:65:82:91:cd: f0:da:16:0d:b2:11:40:f6:23:51:35:b9:39:37:10:6c:da:41: 5f:85:86:29:d7:1e:71:c5:bd:cd:99:a2:4d:ef:1e:56:a4:4f: a0:cc:74:72:5d:d2:6f:1c:0e:81:32:97:bb:c7:34:b9:e4:9a: d4:1c:5d:50:ea:65:98:a0:fa:88:58:41:9e:49:11:df:bc:f8: d9:b8:41:fc:40:36:f9:32:46:fd:ec:c9:2f:58:78:66:95:7f: 80:19:ee:a5:81:65:b4:2c:3f:88:c7:03:a0:bf:56:db:46:f7: a2:20:ac:3e:97:88:22:67:94:30:28:0c:96:e8:61:b1:5e:fb: 36:00:4f:c7:19:ec:7a:3a:b9:86:17:08:ba:1f:2f:44:78:fe: 07:e1:34:36:4f:ef:bf:43:b6:77:20:18:6d:a4:2c:68:a5:35: e7:d2:35:48:db:66:89:61:9f:f7:bc:e0:f4:bd:4d:96:e2:80: ba:99:ec:21:20:1c:5a:9d:46:20:37:89:31:8d:f4:9f:51:ce: e7:c4:48:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwNTExMDAwMDAwWhcNMjUwNTE4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmZTg4MS1iNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WcJcXFBsvnv4AurIfZMbKED3ShzlXFYTXezOQMwiviTmOvfmYajdp5tXibf dxTbj4SEDdp7v2Z9JBOpRl9sSBnmO6pmNNwmXWHocHmopxYE35wkbpZ4WVWadAdQ dI6oetRgPDBUJPw1iELSQmDE4nr9lDGmk/Om7YduwAaEHKBWVRvh9I3LLrgNyxCq JVqXeSNZgvJI9bP9214OVtQOfq9j3NVRh9c8bFYgRFlt2WP6LFA5b3OqsLKfSFUu OXQCfFhGZyEhACvonvBfwowzePeySUT5HKAueRuKni6+ss2sIOTpL+C0CyyOGULL Q5ZkFBQoAR75pVA0U14XNhMF/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFUhwfN GjIV6r1zbj63deTEKc11MB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIjFc50wEVUIIdR4Jv0JtucBtI8CC1Nqmajy3KK1iNyl8Y3tRrM+jK 81M8vINd72bqWWWCkc3w2hYNshFA9iNRNbk5NxBs2kFfhYYp1x5xxb3NmaJN7x5W pE+gzHRyXdJvHA6BMpe7xzS55JrUHF1Q6mWYoPqIWEGeSRHfvPjZuEH8QDb5Mkb9 7MkvWHhmlX+AGe6lgWW0LD+IxwOgv1bbRveiIKw+l4giZ5QwKAyW6GGxXvs2AE/H Gex6OrmGFwi6Hy9EeP4H4TQ2T++/Q7Z3IBhtpCxopTXn0jVI22aJYZ/3vOD0vU2W 4oC6mewhIBxanUYgN4kxjfSfUc7nxEjA -----END CERTIFICATE-----Generated at Sun May 11 04:37:16 2025 by rpki-client