$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: q81IA7o9s0eZ2B9QGjuJwGGheGUxR12oRHX9DoPkiOg= Subject key identifier: 0C:6F:C1:36:65:15:03:05:39:68:11:BB:58:14:26:9E:D0:D8:DD:35 Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: F3 Signing time: Sun 11 May 2025 04:08:14 +0000 Manifest this update: Sun 11 May 2025 04:08:14 +0000 Manifest next update: Sun 18 May 2025 04:08:14 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: iYIJ/e5bhw2z46TJn2eRwQtQKGdciltpN/AOCxeQWYs=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: May 11 04:08:14 2025 GMT Not After : May 18 04:08:14 2025 GMT Subject: CN=682022ae-067f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:26:f3:72:c6:33:76:45:10:51:6d:3f:5f: d6:ae:44:f6:4c:ee:41:15:bb:92:3d:8d:07:37:66: 92:80:5d:2e:73:24:5f:e3:fc:ed:d3:65:f6:5c:32: 5d:8f:32:72:84:03:08:cf:79:3a:de:8d:04:56:93: 80:76:f7:bf:ac:40:6a:ee:a9:e5:45:9d:e4:1f:4f: 48:f2:81:e3:49:44:e1:8e:9f:8d:b3:ad:fc:b2:d2: ce:fe:93:f1:1f:7c:12:d8:6a:d6:70:94:6d:7f:5d: 73:fb:50:7b:fa:8d:b2:2f:23:6f:b6:22:52:2b:10: 17:18:f2:45:4a:ff:68:3f:1b:b0:c7:33:79:15:44: 63:88:f2:41:bd:7a:32:80:4a:1c:52:62:fc:91:9c: 64:0f:c5:1e:5b:f0:fe:22:64:54:44:de:e2:26:e0: 16:1a:ef:9c:2f:cc:7d:9f:0a:c4:d4:84:c8:54:47: 9b:34:f4:a5:5a:3c:8d:7b:38:8b:2e:0b:56:3f:64: 36:a7:ed:c9:0e:b4:7a:2e:e4:ba:7f:45:87:a7:b0: 4c:b8:77:7d:5c:bd:34:aa:4c:24:62:75:1d:3c:1e: 6f:85:9b:f4:7e:9d:3a:b8:42:98:81:2b:d0:12:6c: 3b:38:c9:39:2c:80:c3:48:ae:39:08:6a:59:09:a0: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:C1:36:65:15:03:05:39:68:11:BB:58:14:26:9E:D0:D8:DD:35 X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d9:53:93:ed:44:d2:a4:e7:1b:fd:60:3a:97:91:de:46:c1: 3b:a1:b1:85:eb:34:6a:19:c4:6c:20:f7:21:3a:4b:89:20:1e: 4b:59:4a:36:40:90:a2:e0:58:90:0f:e3:ab:5b:21:50:8e:be: 98:47:54:8a:71:c8:fb:76:3c:b1:63:38:55:16:7e:eb:e2:a4: a7:fc:c7:b5:51:29:53:73:28:34:60:1f:89:a9:8d:89:ab:02: 01:39:0d:37:f4:25:9a:37:77:0f:04:67:05:aa:0d:f6:e2:68: f9:23:12:a8:f2:d7:30:8b:17:9d:03:52:cb:d5:f9:e3:8a:0d: 73:b7:cc:ce:ee:4c:3a:fb:f9:9a:28:6e:d6:2b:c5:1b:88:49: 20:c2:2b:2c:e3:e8:17:94:b7:d6:70:dc:6d:3c:79:58:3c:0b: ac:68:01:ee:62:ad:c1:a3:13:64:fc:74:d4:3d:28:89:b6:d9: c4:a9:6b:5b:2d:cd:c6:c4:7d:fe:62:ba:3e:1b:18:d0:d6:50: 64:a3:73:fa:b9:6c:2a:6a:03:18:b5:ab:3f:1a:f8:ba:d0:db: 9c:97:00:f1:ca:58:90:a0:54:07:fd:0a:2e:8b:c9:6f:fd:a0: e0:db:75:44:96:80:ad:9d:02:67:e7:72:17:29:2f:2e:3d:f9: 67:09:4a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2 MkUzN0E4Q0QwHhcNMjUwNTExMDQwODE0WhcNMjUwNTE4MDQwODE0WjAYMRYwFAYD VQQDEw02ODIwMjJhZS0wNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9sm83LGM3ZFEFFtP1/WrkT2TO5BFbuSPY0HN2aSgF0ucyRf4/zt02X2XDJd jzJyhAMIz3k63o0EVpOAdve/rEBq7qnlRZ3kH09I8oHjSUThjp+Ns638stLO/pPx H3wS2GrWcJRtf11z+1B7+o2yLyNvtiJSKxAXGPJFSv9oPxuwxzN5FURjiPJBvXoy gEocUmL8kZxkD8UeW/D+ImRURN7iJuAWGu+cL8x9nwrE1ITIVEebNPSlWjyNeziL LgtWP2Q2p+3JDrR6LuS6f0WHp7BMuHd9XL00qkwkYnUdPB5vhZv0fp06uEKYgSvQ Emw7OMk5LIDDSK45CGpZCaAq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxvwTZl FQMFOWgRu1gUJp7Q2N01MB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL WDZrdnhPdGRMdDVpNDNxTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA82VOT7UTSpOcb/WA6l5HeRsE7obGF6zRqGcRsIPchOkuJIB5LWUo2 QJCi4FiQD+OrWyFQjr6YR1SKccj7djyxYzhVFn7r4qSn/Me1USlTcyg0YB+JqY2J qwIBOQ039CWaN3cPBGcFqg324mj5IxKo8tcwixedA1LL1fnjig1zt8zO7kw6+/ma KG7WK8UbiEkgwiss4+gXlLfWcNxtPHlYPAusaAHuYq3BoxNk/HTUPSiJttnEqWtb Lc3GxH3+Yro+GxjQ1lBko3P6uWwqagMYtas/Gvi60NuclwDxyliQoFQH/Qoui8lv /aDg23VEloCtnQJn53IXKS8uPflnCUo+ -----END CERTIFICATE-----Generated at Sun May 11 09:28:27 2025 by rpki-client