$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft File: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json) Hash identifier: /chj4209lFYmCxJA3i5ezOL77Z8sCFegpgmtatFBmT4= Subject key identifier: 2A:C5:D2:9F:B4:F7:13:86:5B:40:9C:52:0A:0A:EB:FF:76:A6:8C:7D Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft Manifest number: 8E Signing time: Sun 11 May 2025 05:23:09 +0000 Manifest this update: Sun 11 May 2025 05:23:08 +0000 Manifest next update: Sun 18 May 2025 05:23:08 +0000 Files and hashes: 1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: 1DC6eAyyOJGrcvtHULA+EjgO18jdVnfVnWoIUuJQORs=) 2: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: A3vIJwUMYtfFutVYOqaUZlkIJqgqL/aJPc4cakn1uMQ=) 3: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: uWOdhRYcncT/3w5J6lEkhO72ABKA151UX0ndXBDbx3E=) 4: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: bBT8gdGhlwg5r06wlUXlbf1qWwPVmNNVH6Tp4yfxfVE=) 5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: LB+IcduN6puMn/RBrX77+95EeodFJyL3pQbIzRhkuAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Validity Not Before: May 11 05:23:08 2025 GMT Not After : May 18 05:23:08 2025 GMT Subject: CN=6820343c-839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:89:8b:7f:9f:02:69:03:0d:43:87:95:da: 9a:2d:45:52:5c:80:e0:92:b5:a5:f9:27:a8:e0:67: 8e:ec:7e:d3:f6:4b:ee:3c:b0:5e:08:be:95:c3:b4: cc:71:d0:d3:1d:b9:6f:55:3c:ee:0c:8b:a8:3c:f9: 7a:a7:ab:6d:68:68:47:33:93:f3:11:dc:2e:83:97: 30:ef:8a:1a:13:54:8c:77:c0:e5:73:f2:02:28:44: 9c:5d:25:23:c6:5e:ae:2b:39:c9:91:a3:74:99:28: 61:48:18:69:3a:74:38:d1:36:c8:b9:8c:56:4c:3a: 4e:8f:98:24:43:da:5b:e0:5d:54:16:45:0e:ab:c9: 2d:40:8f:11:4d:28:b8:6e:ab:5a:9a:28:e3:14:67: 20:95:c4:4d:82:63:2e:59:77:c1:c6:e7:80:c0:bc: b8:f2:2b:d9:7e:03:51:52:7b:28:b1:32:77:a4:32: 27:1c:53:97:8d:ba:f5:ab:02:da:74:87:d8:ab:02: 08:a9:56:fe:09:b1:1f:0d:ea:cd:3f:96:53:00:5d: 0f:ec:cf:b0:3f:9f:75:e9:56:6a:a4:d3:bf:dc:a6: 32:69:d8:eb:91:d6:5b:98:9d:7a:36:fd:c6:a5:40: fd:e3:01:aa:ad:57:ca:2f:02:fc:23:1b:f6:d4:9c: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:D2:9F:B4:F7:13:86:5B:40:9C:52:0A:0A:EB:FF:76:A6:8C:7D X509v3 Authority Key Identifier: keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:06:9c:ff:84:c3:85:4e:3c:89:01:cd:dc:30:74:d7:37: cc:5b:ff:e6:05:44:3d:cf:41:b5:65:d4:a6:c2:a7:eb:53:6a: 1e:8a:7a:76:10:2b:8e:f2:de:7d:64:0c:59:a0:dd:78:56:54: 63:1f:36:49:4e:76:29:b7:c8:7a:92:56:90:70:44:ff:9c:e8: af:8b:d4:fd:93:33:0c:0d:92:a0:ba:58:79:94:34:88:99:03: d2:d9:89:b4:16:70:ef:4a:ed:8f:f2:7b:44:12:c2:90:b2:b1: e1:96:b7:b1:28:f5:30:eb:29:45:f1:78:55:7b:c1:b6:02:84: dd:a7:4c:6c:ea:da:f3:d4:8d:83:4d:e4:76:4e:e7:fc:41:d3: b9:a7:03:19:da:01:97:09:ec:24:34:be:b9:fa:17:c0:fe:b4: ea:ca:0e:16:5b:41:28:c7:9c:84:8a:d9:ff:3c:f7:e9:bb:93: ac:3c:93:b2:d8:28:a9:f9:66:a1:66:a6:d1:77:df:48:7a:73: 0c:9b:f3:43:7c:ef:c5:d7:ba:a3:3a:73:16:b2:6c:72:fb:e7: 92:7f:64:39:d1:88:4d:4c:63:7b:b5:82:81:51:b8:2b:9d:d3: 11:2d:53:cf:c2:03:0f:43:bd:fc:5b:12:d9:d0:bd:a6:e1:98: 7d:57:c5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExRUIxMTAvBgNVBAUTKEJFM0Y4MTNCMjAyRkZCMEEzODJGNzM3OTY4RUUxNjY1 OThFMEU4QUIwHhcNMjUwNTExMDUyMzA4WhcNMjUwNTE4MDUyMzA4WjAYMRYwFAYD VQQDEw02ODIwMzQzYy04MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXmJi3+fAmkDDUOHldqaLUVSXIDgkrWl+Seo4GeO7H7T9kvuPLBeCL6Vw7TM cdDTHblvVTzuDIuoPPl6p6ttaGhHM5PzEdwug5cw74oaE1SMd8Dlc/ICKEScXSUj xl6uKznJkaN0mShhSBhpOnQ40TbIuYxWTDpOj5gkQ9pb4F1UFkUOq8ktQI8RTSi4 bqtamijjFGcglcRNgmMuWXfBxueAwLy48ivZfgNRUnsosTJ3pDInHFOXjbr1qwLa dIfYqwIIqVb+CbEfDerNP5ZTAF0P7M+wP5916VZqpNO/3KYyadjrkdZbmJ16Nv3G pUD94wGqrVfKLwL8Ixv21Jy3gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrF0p+0 9xOGW0CcUgoK6/92pox9MB8GA1UdIwQYMBaAFL4/gTsgL/sKOC9zeWjuFmWY4Oir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTFFQi9FREE5NzJCMjY5 QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi92ai1CT3lBdi13bzRMM041YU80V1paamc2 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqLUJPeUF2LXdvNEwzTjVhTzRXWlpqZzZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTFFQi9FREE5NzJCMjY5QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi92ai1CT3lBdi13 bzRMM041YU80V1paamc2S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfiwac/4TDhU48iQHN3DB01zfMW//mBUQ9z0G1ZdSmwqfrU2oeinp2 ECuO8t59ZAxZoN14VlRjHzZJTnYpt8h6klaQcET/nOivi9T9kzMMDZKgulh5lDSI mQPS2Ym0FnDvSu2P8ntEEsKQsrHhlrexKPUw6ylF8XhVe8G2AoTdp0xs6trz1I2D TeR2Tuf8QdO5pwMZ2gGXCewkNL65+hfA/rTqyg4WW0Eox5yEitn/PPfpu5OsPJOy 2Cip+WahZqbRd99IenMMm/NDfO/F17qjOnMWsmxy++eSf2Q50YhNTGN7tYKBUbgr ndMRLVPPwgMPQ738WxLZ0L2m4Zh9V8XI -----END CERTIFICATE-----Generated at Mon May 12 18:53:07 2025 by rpki-client