$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: z070e9OJz2UQTzlT6pbKzw6vxIrkEgi48CiJOx07fJs= Subject key identifier: E0:58:00:BC:73:46:FB:75:76:49:3E:45:BB:86:F3:62:B6:EE:C8:8A Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 34A1 Signing time: Sat 10 May 2025 14:36:44 +0000 Manifest this update: Sat 10 May 2025 14:36:44 +0000 Manifest next update: Sat 17 May 2025 14:36:44 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: bdgzPV09cMH7LzqX8vMVqCNrXpLxGkb+iVOvtQTOFeI=) 2: E0AFFE78218611EF8555476BC4F9AE02.roa (hash: cjt/jzLyIkh6PDpshMiImoc4eT6q581b7EMbqraXEP4=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: May 10 14:36:44 2025 GMT Not After : May 17 14:36:44 2025 GMT Subject: CN=681f647c-2214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:e2:32:0a:5d:dc:45:68:73:22:82:b7:fc: 01:94:df:5d:b8:66:4f:0c:28:8a:f5:b1:cf:e9:5f: 55:f7:fd:92:24:6f:18:81:16:d4:aa:e6:05:44:8c: 6a:21:38:59:bc:f3:c1:0d:ac:f0:94:8d:2e:b1:10: d1:67:67:12:e3:d4:87:fc:8b:dc:66:e5:8a:86:11: 25:f5:6e:c4:c1:e0:25:eb:f2:eb:fb:03:f3:e7:25: 17:17:96:e6:d9:a1:bd:95:d3:24:b6:b7:4b:c4:e7: 94:02:0e:6a:73:75:29:4e:43:fc:3d:65:60:85:a4: 2c:c7:00:9d:34:56:e3:6c:06:4a:b2:d8:5a:b7:13: 2e:0c:22:f9:d3:5b:d3:79:8d:2e:08:06:dd:db:c3: 36:c6:37:07:7c:18:50:5a:00:bb:49:3a:55:38:dd: 49:d3:62:e5:59:4a:dd:dd:2c:dc:5b:7a:61:a3:e4: 12:3d:ed:8c:64:21:f9:ee:76:f1:0c:a6:de:11:d5: 7e:22:9a:cf:9b:b1:6f:e4:04:06:cf:90:fb:7f:8e: 8e:d5:8d:62:01:0d:92:f8:1f:fb:08:f9:50:25:b9: d9:ee:51:41:43:d1:fe:d7:8b:93:55:f1:42:b6:ad: b6:5c:20:1e:dc:f5:0e:02:e6:5b:aa:90:64:ae:3b: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:58:00:BC:73:46:FB:75:76:49:3E:45:BB:86:F3:62:B6:EE:C8:8A X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:c2:62:75:b2:d1:f0:da:30:6e:44:07:c6:86:07:cc:71: cb:b4:e7:01:2c:a8:1f:8c:3c:76:21:35:5c:3c:b5:8b:2a:9a: ee:27:87:b9:6c:04:ed:e5:54:a1:b8:92:c3:8d:60:15:8d:4b: 36:5c:e5:de:f6:ff:85:fd:c1:cc:0a:65:cb:38:91:94:a3:cb: 9c:3f:8f:ef:7b:c5:3d:79:47:28:a2:58:5f:db:50:71:2b:09: 6a:09:6d:57:1c:fc:9e:3e:68:16:47:72:4b:42:63:27:89:f1: 17:57:db:d9:3e:f7:58:f6:a4:09:29:5e:41:e9:0b:ee:36:9b: 85:62:ea:04:06:a8:5e:4c:68:69:b0:98:f3:a3:32:d2:ee:a1: 75:76:4c:6b:6b:df:42:0f:c8:75:20:7d:f9:03:a5:c7:f1:b1: de:03:80:4c:85:7c:85:1b:02:12:fc:12:9a:90:03:75:8a:df: a7:81:f9:4c:79:28:86:a8:ca:2d:01:fe:27:99:4a:36:06:3b: 9a:dc:ca:e0:ea:5c:52:24:9d:36:2d:51:79:55:44:11:0e:09: e4:df:15:1e:61:d1:63:89:6d:94:27:00:66:d0:6d:ba:b5:a6: 36:a4:52:e4:90:71:4d:69:f8:85:f8:b3:8d:9a:6c:e8:06:27: 48:23:a5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNTEwMTQzNjQ0WhcNMjUwNTE3MTQzNjQ0WjAYMRYwFAYD VQQDEw02ODFmNjQ3Yy0yMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWziMgpd3EVocyKCt/wBlN9duGZPDCiK9bHP6V9V9/2SJG8YgRbUquYFRIxq IThZvPPBDazwlI0usRDRZ2cS49SH/IvcZuWKhhEl9W7EweAl6/Lr+wPz5yUXF5bm 2aG9ldMktrdLxOeUAg5qc3UpTkP8PWVghaQsxwCdNFbjbAZKsthatxMuDCL501vT eY0uCAbd28M2xjcHfBhQWgC7STpVON1J02LlWUrd3SzcW3pho+QSPe2MZCH57nbx DKbeEdV+IprPm7Fv5AQGz5D7f46O1Y1iAQ2S+B/7CPlQJbnZ7lFBQ9H+14uTVfFC tq22XCAe3PUOAuZbqpBkrjtTMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBYALxz Rvt1dkk+RbuG82K27siKMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUDMJidbLR8NowbkQHxoYHzHHLtOcBLKgfjDx2ITVcPLWLKpruJ4e5 bATt5VShuJLDjWAVjUs2XOXe9v+F/cHMCmXLOJGUo8ucP4/ve8U9eUcoolhf21Bx KwlqCW1XHPyePmgWR3JLQmMnifEXV9vZPvdY9qQJKV5B6QvuNpuFYuoEBqheTGhp sJjzozLS7qF1dkxra99CD8h1IH35A6XH8bHeA4BMhXyFGwIS/BKakAN1it+ngflM eSiGqMotAf4nmUo2Bjua3Mrg6lxSJJ02LVF5VUQRDgnk3xUeYdFjiW2UJwBm0G26 taY2pFLkkHFNafiF+LONmmzoBidII6Uu -----END CERTIFICATE-----Generated at Sun May 11 18:30:04 2025 by rpki-client