$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: 5mS5W4dOqhKBrMiZaHzDTfX7e9tkJb6Mav2v2J0Na9U= Subject key identifier: EA:61:32:27:40:FC:75:5F:6A:4A:7E:8F:72:63:FE:EA:34:AA:DC:5D Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C20 Signing time: Fri 16 May 2025 18:48:36 +0000 Manifest this update: Fri 16 May 2025 18:48:36 +0000 Manifest next update: Fri 23 May 2025 18:48:36 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: MoqpdeQWy5XU3mWWTXEDSEhhhtrZ039yYafssoE8Ffs=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: May 16 18:48:36 2025 GMT Not After : May 23 18:48:36 2025 GMT Subject: CN=68278884-9162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:c0:16:03:38:ca:17:f9:be:64:39:a9:d6: 98:71:0a:8f:17:27:a5:62:76:17:a6:4e:3b:01:15: 72:ca:5f:8c:ef:be:bc:b0:47:e7:4f:ec:92:2d:c3: c2:f2:4c:f4:f1:44:ee:3b:a2:4e:cf:69:39:fb:d1: 3a:5f:e3:b7:8f:46:09:93:59:63:b8:00:86:01:1a: 25:4b:25:fb:bd:ee:4f:36:16:7c:44:5b:73:96:3c: d9:5f:af:f6:6b:7b:55:40:89:1a:fb:a6:72:c2:30: b9:a6:6d:91:f4:22:8b:3e:de:69:89:49:07:0b:16: 61:6e:dc:bb:e3:37:89:17:b8:c8:a1:a4:0e:7d:d1: a0:bb:bf:e2:ee:19:84:65:4a:61:31:9f:f5:54:39: 60:be:82:a4:71:ef:12:f1:21:88:76:a5:b0:15:89: 64:b4:2e:15:2c:b0:f2:77:22:a0:41:c6:82:f2:5c: d2:b9:3a:a6:79:b4:ca:50:7d:d1:f5:4f:f2:ec:95: 93:7b:7f:a5:b9:5a:a4:ea:a0:45:46:6c:bb:ac:b8: 72:ce:23:af:0d:4b:47:19:a9:0c:bf:02:e9:4e:86: 3a:3b:6d:39:a0:2b:79:96:fe:c1:65:eb:80:de:44: 25:e4:7c:9d:26:42:cf:34:ed:af:65:2e:d9:3d:e1: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:32:27:40:FC:75:5F:6A:4A:7E:8F:72:63:FE:EA:34:AA:DC:5D X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:74:a6:9a:02:98:6d:63:6f:88:63:40:c5:f7:57:58:bf:c8: cc:00:96:08:7a:38:0e:94:e2:ac:8c:ab:cc:e6:41:eb:b8:c4: b3:34:74:7a:98:85:66:74:4c:fb:e6:ef:e1:a5:dd:ee:1c:0b: d3:06:e5:98:98:d0:ac:41:7d:49:c5:99:f5:3c:19:b0:10:15: 71:b8:27:d1:d7:0d:d3:67:3d:88:58:6f:2d:f3:3a:ae:2b:55: 76:76:26:7d:8f:56:df:6b:13:b3:43:cc:2b:f7:c9:56:1e:1e: 56:44:01:0f:81:2b:83:c1:62:b7:60:77:6a:0e:ae:69:e7:3d: b5:08:58:fe:e0:19:1f:83:11:c1:c4:48:2b:72:d6:fa:47:ef: 7a:fd:4d:2b:d1:a3:04:40:9a:3a:6f:60:3f:a3:1e:31:97:1d: b9:4e:82:3b:71:f6:8b:2c:c8:54:4d:ba:c8:51:4d:79:a7:92: 5e:3b:84:b0:22:2b:fc:d8:ee:c7:25:23:8e:a6:d1:c7:76:81: fc:ad:03:fc:bd:a8:94:71:e6:e5:c2:9a:10:34:26:c4:b8:03: 38:f6:af:19:95:3d:bc:29:3b:ae:eb:96:d4:cf:c6:9f:23:9a: c9:6a:f1:a0:8e:5e:28:3c:1c:80:5e:b3:06:ec:6c:4d:37:92: 16:29:fc:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUwNTE2MTg0ODM2WhcNMjUwNTIzMTg0ODM2WjAYMRYwFAYD VQQDEw02ODI3ODg4NC05MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbvAFgM4yhf5vmQ5qdaYcQqPFyelYnYXpk47ARVyyl+M7768sEfnT+ySLcPC 8kz08UTuO6JOz2k5+9E6X+O3j0YJk1ljuACGARolSyX7ve5PNhZ8RFtzljzZX6/2 a3tVQIka+6ZywjC5pm2R9CKLPt5piUkHCxZhbty74zeJF7jIoaQOfdGgu7/i7hmE ZUphMZ/1VDlgvoKkce8S8SGIdqWwFYlktC4VLLDydyKgQcaC8lzSuTqmebTKUH3R 9U/y7JWTe3+luVqk6qBFRmy7rLhyziOvDUtHGakMvwLpToY6O205oCt5lv7BZeuA 3kQl5HydJkLPNO2vZS7ZPeGKFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOphMidA /HVfakp+j3Jj/uo0qtxdMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5dKaaAphtY2+IY0DF91dYv8jMAJYIejgOlOKsjKvM5kHruMSzNHR6 mIVmdEz75u/hpd3uHAvTBuWYmNCsQX1JxZn1PBmwEBVxuCfR1w3TZz2IWG8t8zqu K1V2diZ9j1bfaxOzQ8wr98lWHh5WRAEPgSuDwWK3YHdqDq5p5z21CFj+4BkfgxHB xEgrctb6R+96/U0r0aMEQJo6b2A/ox4xlx25ToI7cfaLLMhUTbrIUU15p5JeO4Sw Iiv82O7HJSOOptHHdoH8rQP8vaiUceblwpoQNCbEuAM49q8ZlT28KTuu65bUz8af I5rJavGgjl4oPByAXrMG7GxNN5IWKfze -----END CERTIFICATE-----Generated at Sat May 17 03:13:36 2025 by rpki-client