$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: LEDfHg1AUx6GdgxRzdYd+8grHkqy6+H5dsP+10oE4/A= Subject key identifier: DF:EA:74:9E:11:AA:8E:25:78:84:19:33:30:47:0A:E1:A3:18:EE:A8 Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 0131 Signing time: Sun 11 May 2025 03:24:48 +0000 Manifest this update: Sun 11 May 2025 03:24:47 +0000 Manifest next update: Sun 18 May 2025 03:24:47 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: 1UWY4LE+3T+djsD99AyybBE1HyaYFSzpCiOxvYuLSVA=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: DaoJhbsGXkUC42pkhjpzJhDA/mxo+1TSGX1zlEEQkMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: May 11 03:24:47 2025 GMT Not After : May 18 03:24:47 2025 GMT Subject: CN=6820187f-3754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:57:eb:5e:3c:5a:b4:69:14:fb:d8:db:83: f8:a7:17:3f:65:4f:62:b6:90:3d:10:16:66:e9:2e: b0:07:d9:48:cf:57:71:14:0e:90:41:7b:f8:a5:08: e0:2b:ec:39:24:46:ac:32:ba:6c:a9:23:80:1c:17: 9e:ad:39:62:c2:1d:f0:d8:f8:b6:3e:b5:88:1f:fa: 8d:89:69:f5:d2:5d:39:57:a0:13:20:9a:2f:24:c7: 49:af:2c:35:45:2d:fb:7e:ac:31:23:72:a1:d5:bf: f9:86:ff:a9:1a:21:18:68:e7:87:29:dd:cd:fe:e2: 59:2a:4a:4c:b9:0d:da:b9:97:63:b3:68:a4:f2:de: 08:5c:27:76:27:46:b0:4c:95:c5:21:65:0d:04:ca: 4a:f3:db:a3:73:9b:90:c7:ab:52:f9:9d:fd:94:66: c4:b4:4c:bc:3f:b9:5a:47:48:27:be:18:85:c2:d9: 4a:2d:b9:c3:e7:e8:59:63:00:4c:34:21:b5:bf:2c: cf:6d:d7:fb:81:85:89:14:c3:c2:7d:6b:02:85:17: 5e:91:a4:26:33:17:b3:ca:61:23:1f:fe:92:ff:bc: 2d:d7:03:17:e3:8c:e6:df:46:f8:b6:72:76:47:f2: 18:22:17:72:a4:c0:9f:5f:89:9f:3d:a4:79:db:7a: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:74:9E:11:AA:8E:25:78:84:19:33:30:47:0A:E1:A3:18:EE:A8 X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:43:8d:0d:41:6e:bd:01:a5:8b:5c:47:66:30:b0:12:0e:53: 67:4d:60:63:45:b9:33:3c:a6:8d:95:07:00:68:f6:8c:68:41: 0e:38:25:0b:a7:e9:82:4a:16:c4:73:79:5e:32:33:b3:c0:c2: f1:6a:ef:dd:30:79:ae:1e:af:f8:9d:57:8a:e3:6c:79:83:8f: 12:e4:c5:62:fc:29:9d:8e:97:2e:31:1c:54:89:87:0a:61:9d: 91:f3:7b:ac:8d:41:1d:d0:4f:d3:f3:ea:59:b0:b9:b3:fd:0c: 06:d5:18:54:13:6e:4a:df:1e:b5:ac:8c:9e:3c:f1:9c:c3:15: 0c:4b:c7:71:69:3a:cb:37:b8:8a:40:59:2e:9c:96:88:d6:78: 14:05:fa:56:ab:c6:45:18:a6:91:ac:21:f1:5c:f8:b8:00:84: 93:b2:c7:92:6d:40:ff:f0:00:17:e5:2d:05:99:8a:f7:31:cd: 30:27:86:1a:ca:50:ec:7b:bc:3f:7b:f8:99:11:a7:eb:06:94: 10:09:d6:f5:63:f7:31:5c:93:a1:b5:47:58:70:9a:67:50:59: 0a:9e:2c:c7:10:26:9e:ed:28:bc:c0:46:fa:47:4f:1b:9f:ce: d6:46:eb:c9:bf:ed:a9:b5:a4:4a:82:9e:58:d8:1d:3d:c6:c1: 46:b6:68:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG MjJBOENGNUYwHhcNMjUwNTExMDMyNDQ3WhcNMjUwNTE4MDMyNDQ3WjAYMRYwFAYD VQQDEw02ODIwMTg3Zi0zNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TNX6148WrRpFPvY24P4pxc/ZU9itpA9EBZm6S6wB9lIz1dxFA6QQXv4pQjg K+w5JEasMrpsqSOAHBeerTliwh3w2Pi2PrWIH/qNiWn10l05V6ATIJovJMdJryw1 RS37fqwxI3Kh1b/5hv+pGiEYaOeHKd3N/uJZKkpMuQ3auZdjs2ik8t4IXCd2J0aw TJXFIWUNBMpK89ujc5uQx6tS+Z39lGbEtEy8P7laR0gnvhiFwtlKLbnD5+hZYwBM NCG1vyzPbdf7gYWJFMPCfWsChRdekaQmMxezymEjH/6S/7wt1wMX44zm30b4tnJ2 R/IYIhdypMCfX4mfPaR523pBDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/qdJ4R qo4leIQZMzBHCuGjGO6oMB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR MUpkdmJpbGhFN3J5S296MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQ40NQW69AaWLXEdmMLASDlNnTWBjRbkzPKaNlQcAaPaMaEEOOCUL p+mCShbEc3leMjOzwMLxau/dMHmuHq/4nVeK42x5g48S5MVi/CmdjpcuMRxUiYcK YZ2R83usjUEd0E/T8+pZsLmz/QwG1RhUE25K3x61rIyePPGcwxUMS8dxaTrLN7iK QFkunJaI1ngUBfpWq8ZFGKaRrCHxXPi4AISTsseSbUD/8AAX5S0FmYr3Mc0wJ4Ya ylDse7w/e/iZEafrBpQQCdb1Y/cxXJOhtUdYcJpnUFkKnizHECae7Si8wEb6R08b n87WRuvJv+2ptaRKgp5Y2B09xsFGtmhT -----END CERTIFICATE-----Generated at Mon May 12 21:40:46 2025 by rpki-client