$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: DcUY5HSqdduYkC3JHuyBRu44JO+67obcUB0zgcZjsI0= Subject key identifier: 69:E5:CD:AA:5D:C0:A2:22:D3:0F:F9:A8:21:9D:81:01:DF:D0:C6:94 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 3479 Signing time: Thu 08 May 2025 15:01:18 +0000 Manifest this update: Thu 08 May 2025 15:01:17 +0000 Manifest next update: Thu 15 May 2025 15:01:17 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: a9NsBIHD8eK9xMwkINboYxW4xuyEPYjnB1M3kQv9ND4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: May 8 15:01:17 2025 GMT Not After : May 15 15:01:17 2025 GMT Subject: CN=681cc73d-b6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:58:3b:84:eb:b5:1c:36:dd:fe:b4:fe:6a: 6f:f5:29:e9:c1:ec:52:f1:06:70:c5:65:fe:69:c9: 9f:5e:35:c2:7e:ed:6e:32:6d:ab:00:17:52:d3:b8: 04:4b:aa:d1:4c:27:e9:f6:33:c5:1d:da:87:f0:c2: 8c:dd:c7:70:70:df:58:12:d9:d2:24:1c:3e:29:f3: f0:33:b2:20:3a:1a:b4:16:68:92:f6:4c:9d:c1:df: 73:db:51:73:c5:2d:f4:4f:a8:98:5f:21:c7:a3:4d: 5c:67:dd:a4:98:f6:76:58:fb:b6:b1:7d:80:62:a8: 12:04:30:da:41:b7:ba:dc:dd:49:eb:3a:08:c2:11: 4d:fd:3b:46:49:54:3a:fd:18:18:c6:73:93:e4:45: 85:8d:c7:e9:e0:31:df:9a:70:e3:9f:8e:e6:71:96: d3:e0:52:96:2d:8f:f5:f4:c4:74:bf:f8:b2:bd:96: e3:93:7b:c4:e9:d6:f2:58:8c:b3:e8:90:b0:2d:71: c3:97:ca:8c:2e:d7:f0:b9:d9:9f:21:6b:d0:4f:45: 77:ed:bd:b3:16:9f:92:89:17:75:d0:e1:51:e5:06: b5:a8:a2:fb:78:a6:59:15:9d:8c:06:ce:63:ce:1e: aa:e6:8f:90:01:96:6e:70:14:28:e5:d7:d1:51:41: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:CD:AA:5D:C0:A2:22:D3:0F:F9:A8:21:9D:81:01:DF:D0:C6:94 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9c:a4:2c:85:67:4a:43:94:7f:57:37:59:5e:5c:f2:41:74: 5c:51:20:52:f2:29:00:85:2c:b7:de:06:58:70:7f:3c:53:51: 69:06:66:73:13:c1:dd:9f:05:3d:06:7f:d0:44:ae:6d:bf:00: 4a:c5:60:18:4a:27:bf:62:55:4b:c3:38:74:a6:df:87:d4:09: 0b:6b:3a:a1:e6:44:44:eb:90:da:2f:42:34:80:8b:ce:8b:6a: d5:2d:a8:27:0f:da:5d:a7:b4:31:d2:6b:f3:19:30:fa:56:60: 4b:91:e8:d1:36:40:9e:9b:74:b4:62:a8:b2:51:ea:d1:a9:cd: 1b:2f:a9:28:43:52:0a:fd:9d:1e:44:97:d2:9a:d9:bd:38:48: cc:13:52:e3:f4:3f:c6:7e:9c:5f:18:19:50:e1:68:ab:8d:04: 5b:04:63:46:02:b8:93:b9:63:44:46:c4:3b:ba:8c:e3:27:57: 89:3a:a9:04:c3:ed:b8:8e:88:3f:eb:1d:8d:16:d0:4f:83:a2: 1c:ee:d2:eb:12:d2:fc:8b:20:75:eb:a8:dd:d1:06:0c:e2:93: 6d:89:8f:a5:8e:5e:e0:3a:09:08:49:33:16:7b:f4:42:72:dd: c7:06:d5:b4:b8:86:60:51:9d:f6:de:f4:11:51:ec:84:15:6e: 2e:9f:9d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUwNTA4MTUwMTE3WhcNMjUwNTE1MTUwMTE3WjAYMRYwFAYD VQQDEw02ODFjYzczZC1iNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5JYO4TrtRw23f60/mpv9SnpwexS8QZwxWX+acmfXjXCfu1uMm2rABdS07gE S6rRTCfp9jPFHdqH8MKM3cdwcN9YEtnSJBw+KfPwM7IgOhq0FmiS9kydwd9z21Fz xS30T6iYXyHHo01cZ92kmPZ2WPu2sX2AYqgSBDDaQbe63N1J6zoIwhFN/TtGSVQ6 /RgYxnOT5EWFjcfp4DHfmnDjn47mcZbT4FKWLY/19MR0v/iyvZbjk3vE6dbyWIyz 6JCwLXHDl8qMLtfwudmfIWvQT0V37b2zFp+SiRd10OFR5Qa1qKL7eKZZFZ2MBs5j zh6q5o+QAZZucBQo5dfRUUGPoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnlzapd wKIi0w/5qCGdgQHf0MaUMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBenKQshWdKQ5R/VzdZXlzyQXRcUSBS8ikAhSy33gZYcH88U1FpBmZz E8HdnwU9Bn/QRK5tvwBKxWAYSie/YlVLwzh0pt+H1AkLazqh5kRE65DaL0I0gIvO i2rVLagnD9pdp7Qx0mvzGTD6VmBLkejRNkCem3S0YqiyUerRqc0bL6koQ1IK/Z0e RJfSmtm9OEjME1Lj9D/GfpxfGBlQ4WirjQRbBGNGAriTuWNERsQ7uozjJ1eJOqkE w+24jog/6x2NFtBPg6Ic7tLrEtL8iyB166jd0QYM4pNtiY+ljl7gOgkISTMWe/RC ct3HBtW0uIZgUZ323vQRUeyEFW4un539 -----END CERTIFICATE-----Generated at Fri May 9 23:47:43 2025 by rpki-client