$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: eHuFRsx7eHCsB6sySdZJf/2qCpnQJL0WBoWhEDtYrTU= Subject key identifier: 94:04:E9:AB:24:49:86:D1:7F:95:28:76:A3:B7:F3:56:6F:2E:5F:2D Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: 86 Signing time: Tue 13 May 2025 05:45:26 +0000 Manifest this update: Tue 13 May 2025 05:45:25 +0000 Manifest next update: Tue 20 May 2025 05:45:25 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: IZihV9ZJsDCPCHHUZCXH0gEMfdcl4DS30zDTWxLOVXM=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: May 13 05:45:25 2025 GMT Not After : May 20 05:45:25 2025 GMT Subject: CN=6822dc75-851c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:f4:05:5f:d5:22:70:f9:24:e9:f6:26:cd: f4:58:4a:1a:01:b5:bf:40:49:dc:46:5a:7c:9a:94: 52:b0:1c:50:b4:3b:b3:91:c1:16:ca:06:c4:b7:44: e3:e4:b1:71:87:89:e2:32:a2:68:a2:18:9f:a8:f1: dc:0e:e6:94:6c:af:03:c1:4f:bf:dd:a6:f3:11:a1: a7:27:ab:fb:c8:6d:26:86:0b:a0:56:84:87:77:f2: b5:cb:f0:35:b6:5f:26:c7:9d:51:d7:04:0e:c1:a6: 76:de:10:13:41:5f:17:a3:47:a2:ef:2a:4a:ce:56: f1:59:ac:ed:ca:a7:dd:d6:38:e7:0f:e2:bd:2d:fe: e2:48:41:73:ff:72:b1:b3:9e:c4:19:e6:91:66:5d: ae:bf:69:36:59:db:ee:8e:3c:56:1c:9e:da:8c:fe: 75:13:8e:1e:18:fd:9a:db:d8:de:68:83:87:f7:e8: 18:bd:68:78:62:40:95:8e:38:f2:b2:b5:ec:dd:72: 8a:85:2c:f3:47:eb:64:67:af:d1:96:1c:7b:b0:2d: 47:ac:a2:73:1b:8f:1a:fb:35:78:3a:10:d2:38:36: 0e:79:c9:30:c8:a7:fc:8f:5b:48:3d:74:29:e4:b3: eb:49:40:8a:38:75:62:6a:e5:da:41:99:18:15:cc: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:04:E9:AB:24:49:86:D1:7F:95:28:76:A3:B7:F3:56:6F:2E:5F:2D X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:be:b7:d6:c9:a1:28:82:9b:de:36:90:50:a2:8a:97:bc: 9e:1e:c5:57:b0:df:b3:38:22:0f:62:fd:9b:63:d4:19:10:aa: 22:93:e8:d1:bc:d4:15:14:db:7f:ef:36:23:d1:da:db:4e:6d: 8d:c7:16:80:49:6c:0a:44:b1:72:54:24:7f:72:44:40:32:3a: b1:45:0f:9c:5d:a4:76:e8:ab:c4:16:45:38:40:43:47:51:ca: 92:22:d9:e3:0d:47:7d:39:e0:0c:54:7f:4f:1b:55:df:c3:95: de:61:0a:84:c1:b8:d2:ab:3d:da:ea:5b:6f:94:8d:50:4d:a6: 5e:bf:c3:b8:64:76:ec:b2:73:fb:4d:9c:09:b4:79:a9:40:5e: 32:0b:e9:b7:cb:ef:08:d1:4f:92:52:35:9a:43:61:9d:60:e7: 41:e0:1d:30:53:13:fa:4c:c8:fb:ec:f3:06:1b:f1:31:d0:44: 05:eb:de:ad:a8:2b:ee:4d:37:9f:f0:2e:40:ac:6e:4b:30:93: 92:18:04:42:04:8f:d9:0d:3b:10:2e:0f:7f:52:d0:ff:19:f3: 70:eb:59:b1:08:4b:2b:9d:fc:14:af:e1:c4:01:02:aa:c2:7a: 07:1e:59:a6:60:39:bd:8e:ea:13:d4:ce:22:92:0c:7c:22:81: ef:08:27:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUwNTEzMDU0NTI1WhcNMjUwNTIwMDU0NTI1WjAYMRYwFAYD VQQDEw02ODIyZGM3NS04NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxP0BV/VInD5JOn2Js30WEoaAbW/QEncRlp8mpRSsBxQtDuzkcEWygbEt0Tj 5LFxh4niMqJoohifqPHcDuaUbK8DwU+/3abzEaGnJ6v7yG0mhgugVoSHd/K1y/A1 tl8mx51R1wQOwaZ23hATQV8Xo0ei7ypKzlbxWaztyqfd1jjnD+K9Lf7iSEFz/3Kx s57EGeaRZl2uv2k2WdvujjxWHJ7ajP51E44eGP2a29jeaIOH9+gYvWh4YkCVjjjy srXs3XKKhSzzR+tkZ6/Rlhx7sC1HrKJzG48a+zV4OhDSODYOeckwyKf8j1tIPXQp 5LPrSUCKOHViauXaQZkYFcy0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQE6ask SYbRf5UodqO381ZvLl8tMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdbL631smhKIKb3jaQUKKKl7yeHsVXsN+zOCIPYv2bY9QZEKoik+jR vNQVFNt/7zYj0drbTm2NxxaASWwKRLFyVCR/ckRAMjqxRQ+cXaR26KvEFkU4QENH UcqSItnjDUd9OeAMVH9PG1Xfw5XeYQqEwbjSqz3a6ltvlI1QTaZev8O4ZHbssnP7 TZwJtHmpQF4yC+m3y+8I0U+SUjWaQ2GdYOdB4B0wUxP6TMj77PMGG/Ex0EQF696t qCvuTTef8C5ArG5LMJOSGARCBI/ZDTsQLg9/UtD/GfNw61mxCEsrnfwUr+HEAQKq wnoHHlmmYDm9juoT1M4ikgx8IoHvCCcH -----END CERTIFICATE-----Generated at Wed May 14 04:39:01 2025 by rpki-client