$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: 2tWwRgkL+J4FgL5kq0DIWSOF1QqsqR9i+ltLFeu1wLo= Subject key identifier: AD:BB:C8:86:5F:11:50:12:D6:8A:6B:E5:9A:FE:50:E6:11:96:AE:AC Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DBD Signing time: Mon 12 May 2025 17:48:42 +0000 Manifest this update: Mon 12 May 2025 17:48:42 +0000 Manifest next update: Mon 19 May 2025 17:48:42 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 0opBF36v+vMEymbtO6J0BtA8u0X0+NnwJuC5UWeBITo=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: May 12 17:48:42 2025 GMT Not After : May 19 17:48:42 2025 GMT Subject: CN=6822347a-d03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:44:c0:76:62:66:b7:a2:b9:e7:95:64:f9: 24:81:e7:04:db:b9:03:05:33:8c:4c:d0:12:79:40: d3:30:d1:db:48:df:49:4a:3a:ce:e3:07:87:5e:72: 4f:28:9f:e3:c6:0c:de:56:bd:6f:10:33:e3:b4:ff: d1:d8:f7:7a:46:b6:b2:e3:8f:9f:8e:37:10:31:7d: 62:d7:5e:1e:f5:41:e2:ad:11:cf:5b:f2:66:41:ce: 39:29:4e:75:6b:77:d6:aa:22:21:81:82:4a:3b:27: b4:07:99:cf:cd:85:7e:26:3c:d9:05:73:eb:6b:fb: 7c:84:7e:df:15:e8:9d:36:db:7b:58:e5:c4:ab:0b: 08:74:3e:60:d9:f6:3d:e6:70:2f:a4:6b:b5:19:3f: a6:cf:a9:79:bc:7d:e2:17:64:11:37:96:79:a1:99: 88:11:b3:ef:d0:f1:1c:f1:31:aa:39:3a:95:38:7b: e9:16:0e:4c:fa:f4:56:6a:8d:44:75:54:06:33:e2: c6:de:fb:e5:12:6c:a8:aa:cd:dc:51:86:03:43:b5: cf:94:af:0e:a5:60:8f:84:10:d6:1b:0b:39:41:26: 4a:4f:89:2d:29:47:f5:20:1f:4d:3d:e2:07:ef:9f: 32:0e:12:b7:b5:0f:4c:d4:33:9e:77:a1:7c:5a:89: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:C8:86:5F:11:50:12:D6:8A:6B:E5:9A:FE:50:E6:11:96:AE:AC X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:6e:e0:b9:ed:af:a4:bd:46:de:e7:9b:e0:af:42:80:8e: 08:1f:dc:b4:fa:2e:38:5e:4f:51:19:ee:c4:95:aa:4b:e8:8c: 2a:dc:6a:02:90:44:31:7d:b3:ce:ef:9e:70:d9:fb:48:28:cb: f8:46:98:c5:e7:65:1c:74:04:ba:2c:b4:3c:41:9f:cb:22:b7: 27:50:cf:37:30:5b:9c:0d:35:10:c1:1a:9b:74:99:07:b5:3e: 9b:62:a4:9e:7d:a1:db:63:d8:b1:c0:46:86:87:7d:0b:9c:e8: 35:15:99:b6:54:ea:3c:5e:41:0a:da:cd:84:f1:30:11:ad:7f: c0:bb:7c:3d:f1:8e:2b:3f:0d:ac:69:40:16:17:48:1b:55:b6: e6:f3:d8:15:87:8c:52:c1:6f:0f:56:61:7c:c6:ce:fa:e2:75: 7b:83:93:8c:d5:f7:0a:cb:d3:1d:28:05:d9:bd:c7:e8:22:4c: 10:82:36:60:96:0b:de:4b:31:fd:8f:ed:08:24:80:2f:10:12: 41:3b:36:6a:24:27:74:d7:f7:70:66:8d:f7:d8:12:d4:ce:84: a7:fc:0a:23:8b:6f:c7:d6:2a:d1:cd:5d:dd:29:49:6c:76:f1: 5e:40:64:72:a7:8a:24:a3:30:ff:41:a4:4b:97:7c:f3:90:be: 07:6a:47:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNTEyMTc0ODQyWhcNMjUwNTE5MTc0ODQyWjAYMRYwFAYD VQQDEw02ODIyMzQ3YS1kMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH9EwHZiZreiueeVZPkkgecE27kDBTOMTNASeUDTMNHbSN9JSjrO4weHXnJP KJ/jxgzeVr1vEDPjtP/R2Pd6Rray44+fjjcQMX1i114e9UHirRHPW/JmQc45KU51 a3fWqiIhgYJKOye0B5nPzYV+JjzZBXPra/t8hH7fFeidNtt7WOXEqwsIdD5g2fY9 5nAvpGu1GT+mz6l5vH3iF2QRN5Z5oZmIEbPv0PEc8TGqOTqVOHvpFg5M+vRWao1E dVQGM+LG3vvlEmyoqs3cUYYDQ7XPlK8OpWCPhBDWGws5QSZKT4ktKUf1IB9NPeIH 758yDhK3tQ9M1DOed6F8WolgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK27yIZf EVAS1opr5Zr+UOYRlq6sMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJHm7gue2vpL1G3ueb4K9CgI4IH9y0+i44Xk9RGe7ElapL6Iwq3GoC kEQxfbPO755w2ftIKMv4RpjF52UcdAS6LLQ8QZ/LIrcnUM83MFucDTUQwRqbdJkH tT6bYqSefaHbY9ixwEaGh30LnOg1FZm2VOo8XkEK2s2E8TARrX/Au3w98Y4rPw2s aUAWF0gbVbbm89gVh4xSwW8PVmF8xs764nV7g5OM1fcKy9MdKAXZvcfoIkwQgjZg lgveSzH9j+0IJIAvEBJBOzZqJCd01/dwZo332BLUzoSn/Aoji2/H1irRzV3dKUls dvFeQGRyp4okozD/QaRLl3zzkL4Hakck -----END CERTIFICATE-----Generated at Tue May 13 16:02:48 2025 by rpki-client