$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: 5PyEfC84hAo5gEH/XM6kenWPxRmteL2ftZswdiLrS1E= Subject key identifier: 68:8D:81:4A:9E:03:2F:1F:6F:99:87:97:EE:88:37:4B:70:AC:A1:C9 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 011E Signing time: Tue 13 May 2025 03:57:37 +0000 Manifest this update: Tue 13 May 2025 03:57:37 +0000 Manifest next update: Tue 20 May 2025 03:57:37 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: mJ3FLmFX0P7a55KH5oHlT0cO2NILcHNS8Osa03rUl4Y=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: May 13 03:57:37 2025 GMT Not After : May 20 03:57:37 2025 GMT Subject: CN=6822c331-8199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b8:f8:31:38:33:31:18:54:59:c6:46:cd:da: ec:08:5f:c8:65:e0:96:a4:cd:6b:bb:5c:28:ca:cb: da:13:05:7c:d1:6a:8d:c8:bb:83:14:e2:52:ef:50: 1e:4d:82:59:ce:96:cf:f7:8a:2b:9d:2d:3c:e7:9f: 75:1e:17:a5:c6:81:a5:86:0a:85:d4:d8:b6:98:4f: 27:a2:9e:88:80:ed:b3:e1:c4:aa:f2:3f:d3:06:cc: ed:ec:11:b4:ad:54:78:6b:90:61:60:21:be:ce:b3: 27:ed:f0:f1:26:73:2a:14:f0:74:4c:e5:7e:8e:0e: ee:01:db:83:dd:97:86:e1:48:cc:ac:02:e6:c1:08: 29:8d:ac:c7:b3:3a:25:81:6d:5b:61:a7:ed:a0:ba: d1:6e:8f:bd:bd:a4:cb:a2:b8:42:dc:41:67:f2:c7: 93:79:a7:53:d1:bc:ff:e9:6a:a4:21:4c:fe:d5:3d: 58:b0:c8:60:b0:1b:59:57:09:e0:73:99:b9:1d:d2: 66:bb:21:1c:84:d8:ce:d1:49:7b:b5:07:b6:38:a2: ec:2a:3f:7d:b5:c1:ed:cb:91:6a:29:04:c4:aa:c5: ce:42:57:0a:c2:a6:7c:7d:f0:59:bb:08:47:27:5e: 48:d3:cc:e5:a9:d3:82:32:9c:59:f0:f5:9f:d7:a5: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:81:4A:9E:03:2F:1F:6F:99:87:97:EE:88:37:4B:70:AC:A1:C9 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:50:54:c6:1d:1b:ce:19:e7:40:f2:f2:3b:9a:9a:de:28:fd: c4:16:9b:78:03:3b:df:57:ab:e9:b7:d7:7f:95:7e:3a:fb:fb: 66:d4:57:d8:88:7b:a7:a9:3d:18:1b:88:af:cc:ed:30:6b:9c: c7:54:c6:55:7f:ee:57:35:1f:89:4d:aa:a2:30:2a:c6:fe:ff: d4:60:43:90:37:53:4b:5e:a0:3a:40:ee:33:93:68:fb:79:6b: 6e:c1:68:7d:5c:86:cf:2e:19:c3:3e:76:5d:65:6f:4e:04:4a: 33:ae:0e:7b:05:65:7a:af:dc:d1:32:67:f3:43:48:fd:d5:94: 60:d8:92:8c:00:ca:4d:49:e6:d6:68:60:17:83:7c:62:75:dd: ef:f8:0e:3d:67:e8:05:af:50:66:e9:b0:93:57:09:ea:31:ac: 58:7b:4c:fa:b5:e4:26:71:e6:82:81:ca:6c:c9:84:bd:de:8e: 3c:29:f2:3f:bf:bf:e9:32:4c:0a:43:ac:65:81:8f:b8:e7:4d: d8:eb:1f:7a:1d:09:05:48:70:d5:8d:9d:42:66:5c:75:75:d5: bb:c0:4d:ee:83:b6:cc:fa:dd:cd:c9:60:d0:61:75:16:13:94: 2a:69:15:13:71:12:15:e6:d3:b5:d6:00:15:74:9f:58:e3:6e: 06:e8:7b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNTEzMDM1NzM3WhcNMjUwNTIwMDM1NzM3WjAYMRYwFAYD VQQDEw02ODIyYzMzMS04MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLj4MTgzMRhUWcZGzdrsCF/IZeCWpM1ru1woysvaEwV80WqNyLuDFOJS71Ae TYJZzpbP94ornS085591HhelxoGlhgqF1Ni2mE8nop6IgO2z4cSq8j/TBszt7BG0 rVR4a5BhYCG+zrMn7fDxJnMqFPB0TOV+jg7uAduD3ZeG4UjMrALmwQgpjazHszol gW1bYaftoLrRbo+9vaTLorhC3EFn8seTeadT0bz/6WqkIUz+1T1YsMhgsBtZVwng c5m5HdJmuyEchNjO0Ul7tQe2OKLsKj99tcHty5FqKQTEqsXOQlcKwqZ8ffBZuwhH J15I08zlqdOCMpxZ8PWf16WbaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiNgUqe Ay8fb5mHl+6IN0twrKHJMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUFTGHRvOGedA8vI7mpreKP3EFpt4AzvfV6vpt9d/lX46+/tm1FfY iHunqT0YG4ivzO0wa5zHVMZVf+5XNR+JTaqiMCrG/v/UYEOQN1NLXqA6QO4zk2j7 eWtuwWh9XIbPLhnDPnZdZW9OBEozrg57BWV6r9zRMmfzQ0j91ZRg2JKMAMpNSebW aGAXg3xidd3v+A49Z+gFr1Bm6bCTVwnqMaxYe0z6teQmceaCgcpsyYS93o48KfI/ v7/pMkwKQ6xlgY+4503Y6x96HQkFSHDVjZ1CZlx1ddW7wE3ug7bM+t3NyWDQYXUW E5QqaRUTcRIV5tO11gAVdJ9Y424G6HsD -----END CERTIFICATE-----Generated at Tue May 13 19:07:51 2025 by rpki-client