$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json) Hash identifier: /TQc09pzGCb7ZxD2rXU695eTaWcXMqmbwdCIVVdJ3Fw= Subject key identifier: 51:75:94:68:A8:E8:33:BA:DF:8F:07:E7:46:F5:B8:17:87:E2:8D:FF Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft Manifest number: 0A25 Signing time: Mon 12 May 2025 20:19:50 +0000 Manifest this update: Mon 12 May 2025 20:19:50 +0000 Manifest next update: Mon 19 May 2025 20:19:50 +0000 Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: UQAlAUq1pRvkb+pmn5+nbqpdBU9FSHbOrBhnPslhYp0=) 2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: C0N61U0YEOhXRTQRllW2NuUOi6qXdqTI0gAe9H3eVh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Validity Not Before: May 12 20:19:50 2025 GMT Not After : May 19 20:19:50 2025 GMT Subject: CN=682257e6-4478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:7b:f3:76:56:24:7c:1c:f7:ec:86:c1:ae: e7:ff:76:6a:3b:f7:b9:9b:a3:ac:d0:65:3e:6b:fc: 0f:ea:5b:cf:27:4c:13:3f:c6:17:c6:ee:cd:1a:27: 8d:cc:11:f0:bb:0b:a1:de:5d:d1:d6:37:e6:d8:57: c5:5c:5d:58:73:e5:79:b4:59:4a:46:7d:34:20:50: c4:35:5f:c1:5e:3a:e3:b9:08:06:ec:66:10:0c:43: 57:09:6a:2b:dc:ba:6e:85:a7:19:6d:76:8e:f5:67: 81:3f:6f:a3:ee:31:6c:99:e5:f8:30:52:95:1b:55: 0c:0d:9f:6c:e9:96:8e:5a:6a:25:b8:5d:0f:70:cf: 82:4f:ee:95:5b:90:40:a0:fc:23:84:0a:79:9c:4f: 2e:d7:cc:85:91:80:fa:36:00:43:33:84:4c:51:fa: 96:1d:58:f2:6e:61:14:51:f2:07:91:63:7e:78:5f: 5f:f7:73:c1:6f:ec:38:d3:17:2a:2d:19:ee:bd:f5: 80:d6:81:78:89:b0:49:ef:ae:4b:2e:ed:75:8d:8e: ca:7d:a3:5b:b9:6f:a8:bf:c0:77:bb:dd:50:4c:65: b3:96:a8:a1:92:25:ef:7d:d9:85:45:14:57:3f:4a: fc:08:2c:d2:27:6a:22:ca:cc:99:cd:e7:9d:df:d1: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:94:68:A8:E8:33:BA:DF:8F:07:E7:46:F5:B8:17:87:E2:8D:FF X509v3 Authority Key Identifier: keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:18:99:66:91:50:de:07:43:ce:39:85:fa:01:cd:af:a6:b5: ac:c7:13:9e:cf:51:af:31:3c:7a:b0:37:12:82:e0:3f:9c:d4: a3:7f:e2:00:28:35:a7:52:4d:e2:00:5e:60:9c:27:81:f5:85: e4:1c:3d:0c:7c:25:c9:f7:5a:0c:a9:0b:09:8e:b4:07:28:47: a5:d5:a1:49:0b:ff:cf:9d:ff:bc:8c:0d:d6:21:24:f9:49:b2: 2f:39:1f:df:38:80:b8:d2:8e:92:b4:cc:ff:ae:d3:52:78:50: 46:13:ce:9d:b4:1a:8f:7a:b7:09:08:29:7b:34:ee:f1:d1:88: 6f:cb:d7:e4:25:4d:17:2f:e7:48:7b:49:a8:75:74:60:f5:23: f5:df:1f:d9:a3:8a:25:05:ed:c9:d3:1a:8f:19:ef:0b:8b:f6: 52:5d:0d:18:8a:81:e7:a9:1c:36:2f:6b:13:0b:ac:b2:4a:9c: 18:f2:c3:4d:04:6b:2a:88:b6:43:ad:44:c3:9c:74:09:2e:91: 83:55:80:7b:8e:06:a9:ef:e9:0e:01:61:b8:7e:dc:2d:f7:4b: 9b:e5:ee:54:24:81:6b:ce:94:00:0b:1d:c2:67:1b:8d:e0:47: 16:f7:c9:30:f1:1a:33:0a:a4:31:21:94:d9:45:bf:11:22:59: 23:c6:a8:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTdFNjExMC8GA1UEBRMoQkQzN0YxRDQwNzQ3QkU2QzVGNUM2QkEzMzA3REY2NTYw QUI2ODFBMzAeFw0yNTA1MTIyMDE5NTBaFw0yNTA1MTkyMDE5NTBaMBgxFjAUBgNV BAMTDTY4MjI1N2U2LTQ0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw3XvzdlYkfBz37IbBruf/dmo797mbo6zQZT5r/A/qW88nTBM/xhfG7s0aJ43M EfC7C6HeXdHWN+bYV8VcXVhz5Xm0WUpGfTQgUMQ1X8FeOuO5CAbsZhAMQ1cJaivc um6Fpxltdo71Z4E/b6PuMWyZ5fgwUpUbVQwNn2zplo5aaiW4XQ9wz4JP7pVbkECg /COECnmcTy7XzIWRgPo2AEMzhExR+pYdWPJuYRRR8geRY354X1/3c8Fv7DjTFyot Ge699YDWgXiJsEnvrksu7XWNjsp9o1u5b6i/wHe73VBMZbOWqKGSJe992YVFFFc/ SvwILNInaiLKzJnN553f0XRpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUXWUaKjo M7rfjwfnRvW4F4fijf8wHwYDVR0jBBgwFoAUvTfx1AdHvmxfXGujMH32Vgq2gaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxN0U2LzU1NzQwRTcwQjNC MzExRUFCMTk4Q0UwREM0RjlBRTAyL3ZUZngxQWRIdm14ZlhHdWpNSDMyVmdxMmdh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlRmeDFBZEh2bXhmWEd1ak1IMzJWZ3EyZ2FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx N0U2LzU1NzQwRTcwQjNCMzExRUFCMTk4Q0UwREM0RjlBRTAyL3ZUZngxQWRIdm14 ZlhHdWpNSDMyVmdxMmdhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwYmWaRUN4HQ845hfoBza+mtazHE57PUa8xPHqwNxKC4D+c1KN/4gAo NadSTeIAXmCcJ4H1heQcPQx8Jcn3WgypCwmOtAcoR6XVoUkL/8+d/7yMDdYhJPlJ si85H984gLjSjpK0zP+u01J4UEYTzp20Go96twkIKXs07vHRiG/L1+QlTRcv50h7 Sah1dGD1I/XfH9mjiiUF7cnTGo8Z7wuL9lJdDRiKgeepHDYvaxMLrLJKnBjyw00E ayqItkOtRMOcdAkukYNVgHuOBqnv6Q4BYbh+3C33S5vl7lQkgWvOlAALHcJnG43g Rxb3yTDxGjMKpDEhlNlFvxEiWSPGqK4= -----END CERTIFICATE-----Generated at Wed May 14 14:30:49 2025 by rpki-client