$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft File: vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json) Hash identifier: D+4/xwjV7FogDn5KZayPRiI8dXCnIUXfShecSL9qUls= Subject key identifier: 28:6B:DC:76:96:96:CC:BE:19:49:68:36:61:40:E8:90:30:21:C8:25 Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft Manifest number: 0110 Signing time: Thu 15 May 2025 11:07:55 +0000 Manifest this update: Thu 15 May 2025 11:07:55 +0000 Manifest next update: Thu 22 May 2025 11:07:55 +0000 Files and hashes: 1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: 6zgbyrscLHldWM0xkMUgAfRLD8VMJoQ+9+uE3o17PT8=) 2: D73DA686317C11F08E805512C4F9AE02.roa (hash: DbYJJQdDW66ocZ5I2YhmT4KcxELfv9yl+f2RgLo7f8I=) 3: D7FFD940317C11F08E805512C4F9AE02.roa (hash: n1+AisRfY+Q9onjYv+v2Offfy+pNE3hrHBoiKSFueoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 11:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Validity Not Before: May 15 11:07:55 2025 GMT Not After : May 22 11:07:55 2025 GMT Subject: CN=6825cb0b-d4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:de:4a:bd:49:9b:d9:98:56:e4:3d:ea:5d: 40:b7:ff:8b:42:48:3d:d0:9b:91:69:bc:a2:ad:0e: 09:d5:b3:46:7e:f0:ca:0f:02:db:ff:39:25:4a:8f: 13:5b:3d:ef:15:e6:45:85:d3:e7:cb:85:5a:b4:8d: fd:1b:95:a0:ec:ee:c6:62:2e:7d:86:b9:23:bc:bf: 81:07:66:13:55:91:8e:7b:fa:f4:bc:ca:c4:7b:a9: 6d:bb:f0:6b:09:ff:e5:0b:a5:49:e2:7f:de:28:5e: 67:9b:34:bf:35:bc:6a:07:d1:f7:4d:d0:e5:1a:56: 05:f4:75:cb:27:78:16:7f:09:2f:6c:26:45:b3:b9: 30:fe:2f:43:f0:a6:fe:c5:77:4a:6d:40:4e:ef:3b: 9c:49:38:da:41:d7:33:22:d4:96:4c:29:a2:de:43: 22:ac:3a:27:c8:ae:00:54:e3:9a:98:9c:1d:da:96: 4b:e0:68:82:ec:2e:96:42:35:50:0e:17:54:64:ff: ab:98:19:e9:31:98:be:ba:ac:18:d7:f0:7d:dd:1a: 49:0e:ee:fe:75:3d:21:33:2d:9b:b8:2b:99:3f:61: ff:71:50:e0:74:7e:1d:8c:bb:6d:6f:43:d0:5a:65: 7c:70:d2:81:d8:53:b2:22:a7:02:f7:a9:df:4b:99: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:DC:76:96:96:CC:BE:19:49:68:36:61:40:E8:90:30:21:C8:25 X509v3 Authority Key Identifier: keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a6:e9:66:43:5d:0f:81:b7:34:be:c1:d4:66:7f:6a:39:9e: 93:e8:ca:57:b3:5f:e6:82:08:2b:e7:09:7a:e7:08:42:48:f0: 4d:63:5d:c5:1f:75:9a:48:07:12:01:ed:7e:9e:89:a8:0a:35: 14:89:0d:a6:f2:c9:92:85:b6:a6:d6:82:f5:4f:a4:64:0c:ce: cd:a9:c2:a1:f4:00:6b:c1:51:c1:34:dc:30:96:ee:fd:93:f8: 1f:43:50:36:a6:1d:27:25:13:a3:4a:e8:e0:83:df:2f:b8:93: d6:77:b1:75:f4:5f:5c:0e:2a:24:fc:14:68:b3:35:fe:19:51: 1c:08:ec:6a:c8:86:65:93:72:da:45:7c:6c:3b:8a:3f:da:ec: d7:8b:04:d2:59:99:f1:4d:fe:eb:19:f4:be:ed:35:b9:51:4e: 57:8d:cd:18:ef:b0:03:60:88:35:08:15:cf:90:f0:73:19:d7: 3f:0e:ec:61:ca:bd:04:6b:8b:03:fa:c0:83:79:a0:27:3a:2d: 18:6e:d5:5f:6e:96:97:d7:b8:2e:81:ad:d1:9f:e8:ec:be:1d: 9c:c0:ca:19:cc:dd:e0:92:3a:84:73:bf:ea:f2:db:57:09:8b: 81:25:c2:b6:10:97:a2:ac:ea:4f:9a:1f:d5:a8:08:0a:1e:ba: e5:aa:77:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx MkE3MTMzMUUwHhcNMjUwNTE1MTEwNzU1WhcNMjUwNTIyMTEwNzU1WjAYMRYwFAYD VQQDEw02ODI1Y2IwYi1kNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jreSr1Jm9mYVuQ96l1At/+LQkg90JuRabyirQ4J1bNGfvDKDwLb/zklSo8T Wz3vFeZFhdPny4VatI39G5Wg7O7GYi59hrkjvL+BB2YTVZGOe/r0vMrEe6ltu/Br Cf/lC6VJ4n/eKF5nmzS/NbxqB9H3TdDlGlYF9HXLJ3gWfwkvbCZFs7kw/i9D8Kb+ xXdKbUBO7zucSTjaQdczItSWTCmi3kMirDonyK4AVOOamJwd2pZL4GiC7C6WQjVQ DhdUZP+rmBnpMZi+uqwY1/B93RpJDu7+dT0hMy2buCuZP2H/cVDgdH4djLttb0PQ WmV8cNKB2FOyIqcC96nfS5kDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChr3HaW lsy+GUloNmFA6JAwIcglMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdpulmQ10Pgbc0vsHUZn9qOZ6T6MpXs1/mgggr5wl65whCSPBNY13F H3WaSAcSAe1+nomoCjUUiQ2m8smShbam1oL1T6RkDM7NqcKh9ABrwVHBNNwwlu79 k/gfQ1A2ph0nJROjSujgg98vuJPWd7F19F9cDiok/BRoszX+GVEcCOxqyIZlk3La RXxsO4o/2uzXiwTSWZnxTf7rGfS+7TW5UU5Xjc0Y77ADYIg1CBXPkPBzGdc/Duxh yr0Ea4sD+sCDeaAnOi0YbtVfbpaX17guga3Rn+jsvh2cwMoZzN3gkjqEc7/q8ttX CYuBJcK2EJeirOpPmh/VqAgKHrrlqndS -----END CERTIFICATE-----Generated at Fri May 16 17:58:25 2025 by rpki-client