$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: ziU9GXy1hwf9UswsB1mjk/0EMY+yZOp6+tjT4gDOKJc= Subject key identifier: 93:58:96:B5:45:35:4F:10:E3:AF:3C:B0:F4:5C:6D:F7:A5:43:35:BE Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 014E Signing time: Thu 15 May 2025 03:38:22 +0000 Manifest this update: Thu 15 May 2025 03:38:22 +0000 Manifest next update: Thu 22 May 2025 03:38:22 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: N1BH3cG+/4PyeVEWh/4EXqQQ6AOmQXHhTOJ37HALXpc=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: May 15 03:38:22 2025 GMT Not After : May 22 03:38:22 2025 GMT Subject: CN=682561ae-b68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:b4:78:3c:eb:4f:11:af:1c:19:8e:4c:20: 4b:66:d6:c8:d3:df:d2:98:12:18:8b:9b:7d:70:8a: 2c:39:82:19:6d:fa:5d:26:d8:db:4c:3c:ce:46:c0: 3f:b3:d1:92:68:6a:7a:00:00:d0:fc:1d:2f:69:6f: 15:d6:63:e8:00:3c:9d:15:a1:93:61:08:77:f6:a0: 2e:b8:98:6c:c0:8d:4f:36:c7:27:c8:ee:39:d0:49: 6c:75:5b:e5:45:4f:8b:89:60:46:1f:75:4f:15:b2: 83:ec:1e:19:56:fe:7d:89:6f:60:5c:ec:b6:19:58: 05:25:34:b0:5a:2b:0c:f8:4f:c0:de:6d:3d:1d:c1: 7a:eb:da:17:b6:b3:3d:e0:3e:74:71:23:2e:59:e8: 66:21:9b:c1:a4:d3:e4:2d:1f:7d:4e:6c:9d:f3:37: 8f:92:78:e0:d7:8e:6b:8a:45:61:7a:81:3c:26:aa: a0:e1:11:ca:5d:a9:35:0d:0e:9e:0e:0c:08:a4:f9: 66:3f:e4:ee:fc:19:91:d5:69:56:cd:dc:05:dd:8f: 71:1c:94:c4:f1:75:e8:d5:47:72:9c:b4:fd:29:a1: 75:5b:1c:ff:6b:8a:a5:17:3e:23:77:d2:0f:a6:51: dd:88:ac:55:40:8a:33:6a:b8:5c:34:2c:da:1b:7f: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:96:B5:45:35:4F:10:E3:AF:3C:B0:F4:5C:6D:F7:A5:43:35:BE X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:80:30:c2:fa:90:df:27:70:54:06:12:de:f0:ac:63:40:28: d0:c7:d8:1f:d6:b1:af:c4:ea:e6:37:92:57:23:50:1a:35:81: c3:41:61:0d:2f:c6:e1:04:d9:65:3c:3c:bb:8f:8f:d3:90:4c: 56:af:2f:b7:93:c4:42:e5:e3:a0:a7:31:4c:e5:ce:3d:a9:87: 58:a4:49:1b:ca:a7:3e:70:4f:fa:0c:64:eb:22:41:20:4c:bb: 17:c4:e6:4d:2e:49:e2:a3:26:a1:57:bb:e9:8f:d6:13:82:99: b5:1d:0d:86:91:b2:a9:99:b3:bc:a0:ab:37:21:ba:51:5b:c5: 74:16:d6:c2:a2:52:4f:c0:6d:dd:72:35:1d:00:07:e4:a0:19: cf:57:6d:cc:09:38:28:2a:4f:de:06:7b:93:5a:ca:a1:df:12: cd:cc:38:f5:f2:3d:1e:58:28:e1:55:a9:14:0a:50:d6:8e:25: 5c:65:ce:08:36:5e:97:df:cb:78:48:2f:29:a9:f3:b3:6e:bf: 64:f1:15:17:fc:62:75:a3:ec:0d:d1:f1:43:b2:fe:f3:d2:bc: 1e:ce:54:19:e3:b0:6b:26:46:43:0c:03:f9:a1:0d:46:81:7f: 7c:2c:5c:67:16:a1:e3:7c:78:61:5b:ef:fb:82:cf:19:38:3c: 5f:e6:95:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwNTE1MDMzODIyWhcNMjUwNTIyMDMzODIyWjAYMRYwFAYD VQQDEw02ODI1NjFhZS1iNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rO0eDzrTxGvHBmOTCBLZtbI09/SmBIYi5t9cIosOYIZbfpdJtjbTDzORsA/ s9GSaGp6AADQ/B0vaW8V1mPoADydFaGTYQh39qAuuJhswI1PNscnyO450ElsdVvl RU+LiWBGH3VPFbKD7B4ZVv59iW9gXOy2GVgFJTSwWisM+E/A3m09HcF669oXtrM9 4D50cSMuWehmIZvBpNPkLR99Tmyd8zePknjg145rikVheoE8Jqqg4RHKXak1DQ6e DgwIpPlmP+Tu/BmR1WlWzdwF3Y9xHJTE8XXo1UdynLT9KaF1Wxz/a4qlFz4jd9IP plHdiKxVQIozarhcNCzaG38JiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNYlrVF NU8Q4688sPRcbfelQzW+MB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPgDDC+pDfJ3BUBhLe8KxjQCjQx9gf1rGvxOrmN5JXI1AaNYHDQWEN L8bhBNllPDy7j4/TkExWry+3k8RC5eOgpzFM5c49qYdYpEkbyqc+cE/6DGTrIkEg TLsXxOZNLknioyahV7vpj9YTgpm1HQ2GkbKpmbO8oKs3IbpRW8V0FtbColJPwG3d cjUdAAfkoBnPV23MCTgoKk/eBnuTWsqh3xLNzDj18j0eWCjhVakUClDWjiVcZc4I Nl6X38t4SC8pqfOzbr9k8RUX/GJ1o+wN0fFDsv7z0rwezlQZ47BrJkZDDAP5oQ1G gX98LFxnFqHjfHhhW+/7gs8ZODxf5pWJ -----END CERTIFICATE-----Generated at Thu May 15 17:59:22 2025 by rpki-client