$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: /2/2qW+JYkdtbWcvAk6F4nvvZIpqjlGTikck9bU+rOA= Subject key identifier: A6:AE:50:04:06:81:8B:07:C3:44:FA:55:FA:EF:15:07:F9:DA:03:A4 Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 01F1 Signing time: Tue 13 May 2025 01:54:43 +0000 Manifest this update: Tue 13 May 2025 01:54:42 +0000 Manifest next update: Tue 20 May 2025 01:54:42 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: vu7xEhC+VW8WSzojRs0+ea04LH9N39W1n0pemlsyPq0=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: jsd4RyOm/zJtlT9wpjOAZ4fMoLnz14skobHmP1uXHl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: May 13 01:54:42 2025 GMT Not After : May 20 01:54:42 2025 GMT Subject: CN=6822a662-6f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:5b:63:bb:29:e9:6c:1f:44:5c:77:cf:40: 6a:e2:89:9d:3e:b8:4c:f2:3e:d4:df:df:e8:92:0a: e7:1f:f5:8d:31:5b:d1:bd:71:4c:00:74:d3:c4:d4: ed:44:7b:e0:ca:cb:8a:7b:bd:c0:1c:ac:86:07:2f: 0f:9b:c3:4c:33:27:97:4c:29:3e:9f:ce:26:85:84: c6:48:c4:21:50:59:6b:a3:7f:ee:21:cb:dc:ce:a4: 64:22:89:2d:a2:29:6b:ec:c3:bf:f6:58:bb:fe:10: 62:10:b3:2f:7c:80:a0:35:c3:7d:79:b2:00:65:bc: 8a:c7:59:a3:aa:16:37:0e:2e:b2:35:13:7b:de:a5: c9:f5:0e:77:ef:7b:be:ff:5b:95:bd:bc:12:0e:05: 94:8a:b3:bc:1d:74:ef:3c:52:e0:21:f6:f5:76:a3: 28:ae:bb:79:4f:97:e6:f3:2a:7a:0e:ca:5d:cf:eb: 06:8f:ff:3a:e7:94:f4:76:b7:1e:ec:e9:8a:82:bb: c2:3b:44:b3:a0:8d:37:2d:c8:0e:14:73:c0:30:89: 78:8f:3c:91:d0:02:74:87:a6:e8:a2:3f:20:89:b9: f0:2b:34:33:53:97:50:8c:e4:71:0c:4d:5c:08:9e: 8c:ce:89:7e:4b:60:79:63:fe:04:75:71:08:0d:5c: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AE:50:04:06:81:8B:07:C3:44:FA:55:FA:EF:15:07:F9:DA:03:A4 X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2f:1e:71:58:5b:af:ad:f1:85:e3:ee:5f:1c:c7:50:b2:79: 85:39:f9:0f:9c:5d:1a:bc:9d:76:79:7d:ed:e0:db:58:c5:b4: ab:af:9e:b0:67:55:71:65:53:d5:9f:91:80:6c:7f:39:8a:1f: e5:52:ec:fb:a2:a8:30:05:5e:f9:4b:e9:25:2f:94:ae:93:e2: 2e:bf:c0:5d:2d:d7:02:83:19:9e:29:1b:82:6e:bf:e3:85:d4: 8a:49:65:d3:fd:ac:8c:f4:55:5e:65:7f:ac:24:92:49:25:06: b6:45:ab:5c:50:ca:d0:79:40:a0:64:25:e1:80:02:a3:68:da: 10:72:3c:76:af:23:b3:02:9e:77:cf:a9:74:bd:c0:7b:09:45: 70:d5:45:9f:60:b5:cb:e4:f9:40:ab:71:4f:2b:56:ec:6e:81: 1c:a7:bf:70:d4:38:81:54:6a:0c:80:15:fb:cb:9a:94:3e:88: 02:0e:1c:c9:bc:9a:0f:d5:32:fb:28:32:0f:f3:18:5d:2e:49: 42:a2:b6:45:08:bc:ee:bc:5e:cd:47:67:ad:a2:8d:33:a2:2d: 58:22:79:df:d5:53:42:68:9c:9a:cd:6a:5b:e2:d0:72:73:50: ac:2d:6d:a3:77:69:3d:c6:20:20:2a:c7:15:83:92:9b:95:71: e9:51:62:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwNTEzMDE1NDQyWhcNMjUwNTIwMDE1NDQyWjAYMRYwFAYD VQQDEw02ODIyYTY2Mi02Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BBbY7sp6WwfRFx3z0Bq4omdPrhM8j7U39/okgrnH/WNMVvRvXFMAHTTxNTt RHvgysuKe73AHKyGBy8Pm8NMMyeXTCk+n84mhYTGSMQhUFlro3/uIcvczqRkIokt oilr7MO/9li7/hBiELMvfICgNcN9ebIAZbyKx1mjqhY3Di6yNRN73qXJ9Q5373u+ /1uVvbwSDgWUirO8HXTvPFLgIfb1dqMorrt5T5fm8yp6Dspdz+sGj/8655T0drce 7OmKgrvCO0SzoI03LcgOFHPAMIl4jzyR0AJ0h6booj8gibnwKzQzU5dQjORxDE1c CJ6Mzol+S2B5Y/4EdXEIDVxg8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKauUAQG gYsHw0T6VfrvFQf52gOkMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLx5xWFuvrfGF4+5fHMdQsnmFOfkPnF0avJ12eX3t4NtYxbSrr56w Z1VxZVPVn5GAbH85ih/lUuz7oqgwBV75S+klL5Suk+Iuv8BdLdcCgxmeKRuCbr/j hdSKSWXT/ayM9FVeZX+sJJJJJQa2RatcUMrQeUCgZCXhgAKjaNoQcjx2ryOzAp53 z6l0vcB7CUVw1UWfYLXL5PlAq3FPK1bsboEcp79w1DiBVGoMgBX7y5qUPogCDhzJ vJoP1TL7KDIP8xhdLklCorZFCLzuvF7NR2etoo0zoi1YInnf1VNCaJyazWpb4tBy c1CsLW2jd2k9xiAgKscVg5KblXHpUWI8 -----END CERTIFICATE-----Generated at Tue May 13 20:43:58 2025 by rpki-client