$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: MO98fU+ZRpnWcRkYY9mxM8mgpAsZ888kfFUg2TRrOn8= Subject key identifier: 41:42:81:DE:5E:76:01:74:41:00:68:2C:64:8D:8C:1C:87:98:6F:84 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C32 Signing time: Sat 10 May 2025 18:17:46 +0000 Manifest this update: Sat 10 May 2025 18:17:44 +0000 Manifest next update: Sat 17 May 2025 18:17:44 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 12obSm5ExsY4IgpB2vgTRVmOk6OfK40kp/WGX+fPt+Q=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: May 10 18:17:44 2025 GMT Not After : May 17 18:17:44 2025 GMT Subject: CN=681f9849-8c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:23:5d:ed:7d:89:22:71:cf:9a:a6:7f:8d: 8a:14:4f:0f:94:78:62:30:86:1a:aa:f5:4c:5e:90: d1:0a:21:94:7c:4e:e4:af:b3:d1:27:93:86:c1:c6: 1f:2d:e5:37:f5:47:84:ad:1b:6a:68:ca:a1:e3:8e: 58:a9:bd:fc:6c:7b:d3:5d:c0:b3:e8:8a:2b:5c:a5: 66:95:e5:e5:7c:40:9a:e0:cc:ed:9c:4d:30:e1:f1: fc:f3:2f:74:38:5b:ae:aa:55:15:9d:c7:c9:37:c7: fa:29:dd:d7:ec:a7:c9:89:27:0d:3d:a8:b5:ad:02: 87:ae:01:51:7a:78:95:9b:6d:ed:5e:a1:a1:03:a4: af:bc:d6:5f:4f:bc:5d:dd:d8:9e:f1:ab:96:10:d4: 42:2c:93:d2:42:14:a3:5b:19:e7:23:81:f6:41:a9: 3b:05:06:68:62:fa:95:32:06:a7:cb:cf:fd:f8:a5: a4:6d:04:d9:24:4b:16:cb:5b:76:ec:90:eb:8e:4a: 46:b7:49:e2:69:54:b0:d7:82:98:20:55:f9:09:db: e1:38:88:cf:51:32:0f:6f:e1:ca:37:b7:0d:47:2a: 4f:84:38:43:f0:73:2f:4c:0e:d8:3c:36:33:5d:5e: 85:69:b6:56:99:ed:b6:03:73:d1:83:22:57:c9:8e: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:81:DE:5E:76:01:74:41:00:68:2C:64:8D:8C:1C:87:98:6F:84 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:62:36:58:e8:3b:54:e0:92:21:83:64:20:6c:80:a9:7c: 81:c1:2f:fc:16:ad:36:d6:6a:5a:8d:be:80:4e:94:5a:08:8e: e8:d4:b3:30:05:9f:6b:44:99:65:b3:39:40:6e:16:bd:6f:e2: 37:dc:6e:a0:5d:33:ca:c4:18:b1:28:27:8a:9f:d0:93:ce:8f: a1:fd:b8:73:6e:ec:08:9f:19:a4:9e:77:43:19:84:db:9b:af: 07:f6:6c:5e:f3:b9:9a:b5:49:6f:3b:85:ca:29:d9:34:4e:ee: be:4f:6e:a7:c4:08:cf:80:24:0b:bf:c9:70:43:8f:eb:18:01: a3:55:81:86:c4:c5:42:18:9f:75:72:c1:54:0f:86:d6:f7:e5: f7:7f:5d:99:56:ff:e2:aa:29:ed:03:9b:f7:53:15:67:23:30: 75:10:77:26:dc:f6:13:92:fe:a0:11:d6:d7:f6:f1:02:45:dd: f1:9d:92:c5:18:86:af:e8:be:cb:73:76:10:da:74:f5:3c:f7: 15:85:3b:89:74:5a:df:b5:9c:87:42:64:ef:2b:78:16:47:09: 8b:51:a2:d5:1d:02:ae:0e:9a:bc:a7:99:17:7a:c7:a3:6c:98: 16:91:fb:82:ef:78:6e:7f:51:5f:68:0e:7b:8c:2b:e5:1c:29: 1f:91:91:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwNTEwMTgxNzQ0WhcNMjUwNTE3MTgxNzQ0WjAYMRYwFAYD VQQDEw02ODFmOTg0OS04YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA104jXe19iSJxz5qmf42KFE8PlHhiMIYaqvVMXpDRCiGUfE7kr7PRJ5OGwcYf LeU39UeErRtqaMqh445Yqb38bHvTXcCz6IorXKVmleXlfECa4MztnE0w4fH88y90 OFuuqlUVncfJN8f6Kd3X7KfJiScNPai1rQKHrgFReniVm23tXqGhA6SvvNZfT7xd 3die8auWENRCLJPSQhSjWxnnI4H2Qak7BQZoYvqVMgany8/9+KWkbQTZJEsWy1t2 7JDrjkpGt0niaVSw14KYIFX5CdvhOIjPUTIPb+HKN7cNRypPhDhD8HMvTA7YPDYz XV6FabZWme22A3PRgyJXyY7bwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFCgd5e dgF0QQBoLGSNjByHmG+EMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzfWI2WOg7VOCSIYNkIGyAqXyBwS/8Fq021mpajb6ATpRaCI7o1LMw BZ9rRJllszlAbha9b+I33G6gXTPKxBixKCeKn9CTzo+h/bhzbuwInxmknndDGYTb m68H9mxe87matUlvO4XKKdk0Tu6+T26nxAjPgCQLv8lwQ4/rGAGjVYGGxMVCGJ91 csFUD4bW9+X3f12ZVv/iqintA5v3UxVnIzB1EHcm3PYTkv6gEdbX9vECRd3xnZLF GIav6L7Lc3YQ2nT1PPcVhTuJdFrftZyHQmTvK3gWRwmLUaLVHQKuDpq8p5kXesej bJgWkfuC73huf1FfaA57jCvlHCkfkZEr -----END CERTIFICATE-----Generated at Mon May 12 04:20:17 2025 by rpki-client