$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: NZPsMGmWpll3anN9K7G5/B1QM9mvhRLpZRAe1TW/TY8= Subject key identifier: 5B:0C:0A:90:12:DF:F1:E3:AA:B8:5E:9B:BD:5C:1D:1D:3E:25:9E:F8 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0BDF Signing time: Mon 12 May 2025 18:39:41 +0000 Manifest this update: Mon 12 May 2025 18:39:40 +0000 Manifest next update: Mon 19 May 2025 18:39:40 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: Szlwp3S8fXYSpME4OYlHMrHxqvDNXzrtfPYHnD5EtU8=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: May 12 18:39:40 2025 GMT Not After : May 19 18:39:40 2025 GMT Subject: CN=6822406c-44bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:12:ca:94:5f:6e:ac:a4:d3:e1:52:72:48: 64:e5:59:7a:65:20:35:fd:90:64:ae:41:55:c7:66: c1:d6:a7:9c:f2:29:b8:b6:bc:bd:fb:e7:f5:d8:ce: 49:12:eb:10:c4:ad:ac:c4:7d:41:ae:48:6c:ff:ff: 4f:96:a9:be:04:fd:87:f9:2a:2b:b5:d5:15:26:7b: 9e:ba:a3:23:3d:b6:7b:2d:ed:04:a2:94:fa:ba:ba: 86:59:67:37:22:ec:0c:57:0f:63:1b:ca:b0:06:73: b6:b7:75:69:8d:76:91:77:ca:cd:79:b6:09:0a:34: 41:cf:5c:cf:d2:19:25:a2:ea:19:72:f5:ca:90:db: 5e:7b:76:58:17:fe:9f:28:74:74:ec:d8:8e:c0:5a: 40:f8:17:1d:22:2d:ae:6d:88:34:4f:01:ef:87:d4: f8:7b:0f:5f:ac:6c:ed:e6:db:db:02:b8:47:44:6b: e1:15:cd:82:5e:35:00:60:f6:f1:19:c2:cd:a3:bb: 9f:4f:c5:64:6b:99:15:e7:0a:1a:a3:11:d6:c6:af: bb:80:ed:f4:8d:8c:dd:bd:6e:13:8d:ac:bd:f1:d6: b0:88:d5:24:0f:56:a7:00:68:a6:d1:88:76:63:17: 08:36:3e:f7:1b:ce:8e:48:f3:a8:ae:96:b9:48:c3: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0C:0A:90:12:DF:F1:E3:AA:B8:5E:9B:BD:5C:1D:1D:3E:25:9E:F8 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:78:30:b4:ef:fd:d3:29:ea:bf:b1:2a:02:1c:8b:69:17:0d: 38:e9:b5:e4:9e:5c:dc:bd:5a:78:54:b7:3c:38:45:3c:5f:ed: 2e:28:65:47:7f:2e:2a:03:d9:87:db:39:60:83:ba:e7:2e:de: 78:e4:a7:ce:bf:a4:a1:14:71:8b:51:85:d7:c3:7d:ad:dc:3b: 29:6a:7b:17:7d:48:d8:49:04:d5:5a:1b:f5:7e:6d:af:24:f8: 78:ad:9c:e4:70:55:30:d8:b1:40:1f:e4:d3:f8:dc:d9:c3:63: 49:7b:c8:8b:2e:59:e3:55:21:36:ad:f3:12:98:98:9f:fc:95: 67:b6:ce:73:16:a3:03:a5:f9:9a:ba:47:c1:cd:1f:12:a0:f7: 09:89:a4:78:0f:1e:c3:1a:22:68:f9:13:cc:26:af:17:f1:6d: 71:23:7d:60:0b:9a:75:7a:6b:82:1a:21:40:1d:a5:34:7a:f3: 4e:3b:15:5c:b4:97:c3:b5:10:ba:b1:fb:93:45:a4:f0:10:1a: ec:58:60:ee:8b:70:c5:bb:7c:e6:05:c0:0e:05:f0:2d:94:ba: 71:fe:11:a8:e6:48:03:fb:5e:fd:0b:dd:45:f1:c6:6e:b7:c0: 70:6e:66:34:c6:ce:1a:ef:5d:42:e7:11:27:0d:92:82:17:9c: a4:58:15:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUwNTEyMTgzOTQwWhcNMjUwNTE5MTgzOTQwWjAYMRYwFAYD VQQDEw02ODIyNDA2Yy00NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGkSypRfbqyk0+FSckhk5Vl6ZSA1/ZBkrkFVx2bB1qec8im4try9++f12M5J EusQxK2sxH1Brkhs//9Plqm+BP2H+SortdUVJnueuqMjPbZ7Le0EopT6urqGWWc3 IuwMVw9jG8qwBnO2t3VpjXaRd8rNebYJCjRBz1zP0hklouoZcvXKkNtee3ZYF/6f KHR07NiOwFpA+BcdIi2ubYg0TwHvh9T4ew9frGzt5tvbArhHRGvhFc2CXjUAYPbx GcLNo7ufT8Vka5kV5woaoxHWxq+7gO30jYzdvW4Tjay98dawiNUkD1anAGim0Yh2 YxcINj73G86OSPOorpa5SMM2rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsMCpAS 3/Hjqrhem71cHR0+JZ74MB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOeDC07/3TKeq/sSoCHItpFw046bXknlzcvVp4VLc8OEU8X+0uKGVH fy4qA9mH2zlgg7rnLt545KfOv6ShFHGLUYXXw32t3DspansXfUjYSQTVWhv1fm2v JPh4rZzkcFUw2LFAH+TT+NzZw2NJe8iLLlnjVSE2rfMSmJif/JVnts5zFqMDpfma ukfBzR8SoPcJiaR4Dx7DGiJo+RPMJq8X8W1xI31gC5p1emuCGiFAHaU0evNOOxVc tJfDtRC6sfuTRaTwEBrsWGDui3DFu3zmBcAOBfAtlLpx/hGo5kgD+179C91F8cZu t8BwbmY0xs4a711C5xEnDZKCF5ykWBU7 -----END CERTIFICATE-----Generated at Wed May 14 04:58:27 2025 by rpki-client