$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json) Hash identifier: fn4GL7hvK1cntLMiVT0Cab5prdYw+mAJK3HRyM7ejrk= Subject key identifier: CC:D3:40:A0:18:E5:BA:C3:A2:F0:3E:25:24:78:0A:C4:9E:C6:22:71 Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft Manifest number: D7 Signing time: Tue 13 May 2025 04:59:55 +0000 Manifest this update: Tue 13 May 2025 04:59:55 +0000 Manifest next update: Tue 20 May 2025 04:59:55 +0000 Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: uLNrLbo1wbi4428d0hA/QQ0pSRavnRRKhBGd4r8gV0s=) 2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=) 3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=) 4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: May 13 04:59:55 2025 GMT Not After : May 20 04:59:55 2025 GMT Subject: CN=6822d1cb-357b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:28:3f:e0:f0:ea:d7:64:6b:1e:fb:60:df: 7c:88:51:de:dc:6c:a2:47:a3:0d:a9:54:f1:92:08: 3a:7c:91:29:f5:dc:81:88:12:ef:e7:15:a4:b0:33: f0:95:ec:76:67:ca:18:90:85:26:de:a9:9d:68:44: 36:4c:8f:7e:7b:3e:73:a8:85:8d:5e:4f:b1:b5:0d: 06:3a:a7:22:74:3c:4f:8e:1d:d5:e6:32:a0:3e:81: a9:ab:ed:e3:e5:c6:8e:e8:c5:a0:3c:73:a6:e4:37: 99:5e:a8:0f:ef:fe:b6:a1:ed:73:2b:80:fa:2c:fd: 5d:c2:b4:6f:6c:17:5e:65:60:cf:a2:a9:8a:72:d3: b9:99:a4:bd:41:71:b9:6d:78:7f:42:92:4f:a4:68: c5:71:d1:c5:b1:e1:79:78:fe:9f:4f:24:02:7a:0e: 2d:7b:42:bb:ab:fd:bc:68:a4:e0:31:9e:bd:e3:bb: 0c:35:c9:bd:c0:0e:b7:28:15:b9:b7:bb:ee:c4:ee: 4d:81:b9:95:af:d0:50:dd:a3:f2:b6:f3:2a:90:34: ac:97:82:de:3b:06:7c:12:61:20:41:f8:e0:eb:5f: f5:c3:5e:66:7c:dc:f3:fe:75:01:19:f8:0f:01:6c: 43:b3:67:3d:70:64:78:14:dc:ad:d2:2c:00:06:59: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D3:40:A0:18:E5:BA:C3:A2:F0:3E:25:24:78:0A:C4:9E:C6:22:71 X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:dc:8f:29:88:f5:7b:e2:19:71:4f:cc:22:03:0b:77:4e:12: 29:63:a8:4d:f0:44:24:7a:27:18:0b:46:0c:f5:e1:39:2c:69: ae:11:e5:ac:5d:5a:20:e9:f0:04:2a:0c:b6:ae:44:80:da:ce: 89:c5:3d:3c:71:f0:99:17:90:9f:21:4d:21:8f:fc:7e:c8:a4: 3e:98:4d:94:34:b2:62:bd:71:20:45:06:53:11:cd:28:10:0f: 85:75:e1:e8:32:77:6a:4c:a0:aa:f8:d5:2d:54:88:65:b5:2e: ea:d4:79:4d:71:9b:d3:f2:f4:36:31:7e:0b:56:6f:2d:f7:fb: d4:7b:18:25:e5:42:56:61:05:b8:cc:35:1a:07:46:d3:21:43: 50:54:35:49:13:1b:48:ad:60:db:f0:ea:13:b0:29:59:f0:61: d0:58:6b:f4:cb:92:c1:a8:23:16:9e:37:64:00:73:62:69:c1: 05:05:37:3e:58:20:bc:57:ed:e6:5a:98:92:1c:f8:b0:f1:4a: cf:51:eb:a8:da:3b:77:f4:5c:4c:fe:79:94:73:e0:f5:b2:2c: 6a:10:33:d0:e8:82:4b:6a:26:d4:e9:b6:64:17:5e:55:d7:3d: cf:47:f7:06:dd:15:20:d1:f6:99:fb:ee:23:49:79:95:5f:b6: 5a:1c:a3:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjUwNTEzMDQ1OTU1WhcNMjUwNTIwMDQ1OTU1WjAYMRYwFAYD VQQDEw02ODIyZDFjYi0zNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlj0oP+Dw6tdkax77YN98iFHe3GyiR6MNqVTxkgg6fJEp9dyBiBLv5xWksDPw lex2Z8oYkIUm3qmdaEQ2TI9+ez5zqIWNXk+xtQ0GOqcidDxPjh3V5jKgPoGpq+3j 5caO6MWgPHOm5DeZXqgP7/62oe1zK4D6LP1dwrRvbBdeZWDPoqmKctO5maS9QXG5 bXh/QpJPpGjFcdHFseF5eP6fTyQCeg4te0K7q/28aKTgMZ6947sMNcm9wA63KBW5 t7vuxO5NgbmVr9BQ3aPytvMqkDSsl4LeOwZ8EmEgQfjg61/1w15mfNzz/nUBGfgP AWxDs2c9cGR4FNyt0iwABllKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzTQKAY 5brDovA+JSR4CsSexiJxMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFE ZEM4cUNCSkNjSTU1bk9HMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS3I8piPV74hlxT8wiAwt3ThIpY6hN8EQkeicYC0YM9eE5LGmuEeWs XVog6fAEKgy2rkSA2s6JxT08cfCZF5CfIU0hj/x+yKQ+mE2UNLJivXEgRQZTEc0o EA+FdeHoMndqTKCq+NUtVIhltS7q1HlNcZvT8vQ2MX4LVm8t9/vUexgl5UJWYQW4 zDUaB0bTIUNQVDVJExtIrWDb8OoTsClZ8GHQWGv0y5LBqCMWnjdkAHNiacEFBTc+ WCC8V+3mWpiSHPiw8UrPUeuo2jt39FxM/nmUc+D1sixqEDPQ6IJLaibU6bZkF15V 1z3PR/cG3RUg0faZ++4jSXmVX7ZaHKOM -----END CERTIFICATE-----Generated at Wed May 14 14:19:52 2025 by rpki-client