$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft File: vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json) Hash identifier: ZbKZhgVnCs80HubxmIGYmddpRYzLQ7EDcRqqTomTMW8= Subject key identifier: 00:C3:35:31:68:A8:D4:1D:8D:BA:3B:EA:BD:1B:12:2A:56:8E:18:FC Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft Manifest number: 012E Signing time: Thu 03 Jul 2025 05:01:14 +0000 Manifest this update: Thu 03 Jul 2025 05:01:14 +0000 Manifest next update: Thu 10 Jul 2025 05:01:14 +0000 Files and hashes: 1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: GaK25SCs0+6Bd1WiDVCy8t8U6Gryu+vTcgd/U6UbPe8=) 2: 4E4D981252A211F080D4F60FC4F9AE02.roa (hash: Y5/3GPLqWbnAziLVKr6xR7S6qEKWMkhY6xcfQgxiK9k=) 3: EA0CC00254CD11F0902CC485C4F9AE02.roa (hash: 8AIRwy08mvaM21dUkcsyqG0ecVqcTkS8g15wAVG3r38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Validity Not Before: Jul 3 05:01:14 2025 GMT Not After : Jul 10 05:01:14 2025 GMT Subject: CN=68660e9a-671e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:95:76:3c:f4:05:87:51:ad:80:52:fd:72: 34:24:a2:95:2a:fd:0b:d3:fe:54:ac:f3:0b:3d:5a: 57:00:d3:a9:cb:e8:a9:a1:eb:2e:d1:a3:43:3a:f7: 4c:ee:0b:b6:6c:43:62:9c:3f:b5:a3:3c:37:e8:d2: 89:87:e9:46:79:d8:3c:b1:b6:46:13:82:65:ea:93: a1:d8:40:f7:3b:9f:be:a5:cc:10:e6:16:cb:11:d8: b9:ff:e3:34:c6:75:77:c6:64:00:bb:6e:4f:be:f8: c7:5f:48:20:88:96:dd:63:5c:1d:24:36:6a:82:ed: 50:60:88:ef:ae:8c:90:76:87:5e:b5:23:b5:e0:ff: 03:37:82:fc:e2:57:b6:8c:8b:85:0a:d6:cf:7d:09: 1b:fc:c0:9b:b1:09:b1:d5:c1:45:a5:f0:b8:9a:0c: a9:7d:46:2e:10:3f:7b:6e:d9:e3:c7:ef:a4:b0:eb: 0e:94:5a:1a:12:4b:f1:85:54:02:ef:12:e7:f7:be: a9:7a:b2:c0:52:3a:1f:83:5a:4c:8a:f4:f6:1e:17: db:b3:dc:89:41:1e:b2:89:f8:1c:59:d0:0b:94:72: c6:e6:54:02:2d:88:dc:a8:12:ac:5b:cc:7f:a3:a1: 13:6a:e6:70:69:e3:e8:b5:dc:e4:f7:a9:73:1f:31: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C3:35:31:68:A8:D4:1D:8D:BA:3B:EA:BD:1B:12:2A:56:8E:18:FC X509v3 Authority Key Identifier: keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6a:ff:59:37:b0:26:ac:b6:19:20:36:b9:c9:a9:f1:ce:fb: ed:81:82:f5:9e:09:4c:f6:5d:f0:6e:4e:c7:96:9d:f6:f2:ac: a9:6b:49:76:39:81:6b:3d:06:58:3c:b0:05:81:68:89:ea:ce: f3:51:6e:15:8b:2c:7d:b1:2f:e6:64:d7:b1:6a:ea:e8:b5:aa: 02:ea:5d:f4:ad:d4:e3:3b:db:16:8b:5a:77:31:08:8e:ff:38: 18:55:f9:ff:1d:1b:16:4c:51:f8:6f:b5:8f:ac:8b:8e:3a:86: 14:b5:a9:5f:b0:59:f1:15:c4:6a:eb:10:0a:6b:ee:6b:7f:32: bb:0b:b8:48:00:8e:74:20:f7:88:3c:36:31:cd:63:d9:db:ef: 10:0d:d4:45:66:ae:de:d7:ac:22:42:dc:c9:94:b8:e0:f4:99: 8c:40:a0:8b:26:90:af:e6:22:48:f2:fb:bd:77:3b:a1:a3:49: 14:af:4e:04:71:40:c5:9e:15:fa:a2:81:c8:b9:3c:82:e6:68: cf:89:1e:75:3f:72:7f:0a:40:89:f4:73:01:2e:04:30:13:67: 46:21:d2:ce:65:2e:53:3b:0e:94:64:6f:b4:bf:92:db:87:12: e4:aa:29:32:13:bc:0e:1b:9c:b6:bd:e4:74:39:be:85:0b:2e: 8b:41:42:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx MkE3MTMzMUUwHhcNMjUwNzAzMDUwMTE0WhcNMjUwNzEwMDUwMTE0WjAYMRYwFAYD VQQDEw02ODY2MGU5YS02NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXqVdjz0BYdRrYBS/XI0JKKVKv0L0/5UrPMLPVpXANOpy+ipoesu0aNDOvdM 7gu2bENinD+1ozw36NKJh+lGedg8sbZGE4Jl6pOh2ED3O5++pcwQ5hbLEdi5/+M0 xnV3xmQAu25PvvjHX0ggiJbdY1wdJDZqgu1QYIjvroyQdodetSO14P8DN4L84le2 jIuFCtbPfQkb/MCbsQmx1cFFpfC4mgypfUYuED97btnjx++ksOsOlFoaEkvxhVQC 7xLn976perLAUjofg1pMivT2Hhfbs9yJQR6yifgcWdALlHLG5lQCLYjcqBKsW8x/ o6ETauZwaePotdzk96lzHzGWAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADDNTFo qNQdjbo76r0bEipWjhj8MB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABav9ZN7AmrLYZIDa5yanxzvvtgYL1nglM9l3wbk7Hlp328qypa0l2 OYFrPQZYPLAFgWiJ6s7zUW4Viyx9sS/mZNexaurotaoC6l30rdTjO9sWi1p3MQiO /zgYVfn/HRsWTFH4b7WPrIuOOoYUtalfsFnxFcRq6xAKa+5rfzK7C7hIAI50IPeI PDYxzWPZ2+8QDdRFZq7e16wiQtzJlLjg9JmMQKCLJpCv5iJI8vu9dzuho0kUr04E cUDFnhX6ooHIuTyC5mjPiR51P3J/CkCJ9HMBLgQwE2dGIdLOZS5TOw6UZG+0v5Lb hxLkqikyE7wOG5y2veR0Ob6FCy6LQULQ -----END CERTIFICATE-----Generated at Thu Jul 3 15:19:52 2025 by rpki-client