$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: g0Qi3iuZGNbGP9803ikTDfxxop6+HLoEGwJ8G8n0E2g= Subject key identifier: 4A:8E:E6:5D:66:E1:3B:B7:15:DE:A2:EA:9C:94:12:20:D9:69:20:04 Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 2281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 2243 Signing time: Wed 14 May 2025 15:57:36 +0000 Manifest this update: Wed 14 May 2025 15:57:35 +0000 Manifest next update: Wed 21 May 2025 15:57:35 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: Ur7Mqqdr829iM+Oq93iadKYYPvtVIgFIh0jiguWLikQ=) 2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=) 3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8833 (0x2281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: May 14 15:57:35 2025 GMT Not After : May 21 15:57:35 2025 GMT Subject: CN=6824bd70-b583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:13:04:d9:08:05:7d:27:7d:2a:fb:f5:43:e4: a1:9f:3b:4e:b4:d6:ea:1e:7b:d8:6f:0c:fd:cd:b7: f1:70:67:27:61:f8:20:c0:8b:c0:8a:f6:40:55:f4: 3c:f1:b5:02:61:08:bc:9d:6a:bd:e6:32:e4:be:c8: c5:30:a2:e0:e7:b6:a7:e0:e2:5c:30:56:fa:5a:8f: dc:05:34:83:ca:aa:a0:8a:9d:ad:71:09:c5:f8:76: fa:eb:26:09:03:bb:e1:19:3b:f0:b4:ca:7c:77:10: 5b:be:0e:3a:21:15:59:c8:25:d5:18:1f:4f:93:c4: c0:a9:0a:71:6d:d3:b8:9e:a8:2a:65:84:32:00:56: 70:ea:d7:61:9d:a3:66:5f:b4:a0:51:39:ab:02:94: 13:f8:2b:14:8d:a5:d8:1f:a9:25:67:76:c2:ec:91: 4f:6d:02:ee:6a:5b:7e:f3:e3:d2:fa:1e:88:83:61: ba:af:e2:93:99:78:f5:1f:ef:ca:f0:04:81:1d:6e: da:c2:e7:3b:7d:08:1e:ac:bf:b3:93:63:bf:d5:fd: 39:ef:8c:3c:52:98:a7:40:30:0c:5c:9b:bf:85:07: db:55:a0:8b:37:0f:d2:db:f2:4c:6f:5d:bd:9b:ae: 79:a3:d2:84:d7:5e:1a:c0:e4:49:a7:7a:fd:e7:49: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:E6:5D:66:E1:3B:B7:15:DE:A2:EA:9C:94:12:20:D9:69:20:04 X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:9a:ac:59:b2:44:68:55:f7:72:06:7a:04:84:08:56:4c: 48:55:7c:b4:9e:00:b9:65:45:ec:46:7d:c3:cd:27:0d:cd:1f: 98:d1:80:b8:78:9b:51:2e:03:da:9f:ef:18:52:9b:bd:84:45: ec:91:b2:37:bf:68:3a:a7:78:8c:3f:c3:44:95:f1:01:54:d1: 73:45:8d:2b:8c:84:a5:f0:96:a7:65:33:c2:d1:62:1e:13:04: ac:0c:91:eb:59:da:ac:19:eb:89:90:99:a3:98:ec:46:df:56: 96:29:1c:37:62:81:e3:90:37:7d:3a:e7:96:a0:7f:9e:86:e8: ca:be:25:ba:ba:dd:ba:1f:9c:83:1d:42:05:09:3a:2f:b1:1b: 4d:41:f4:e6:92:54:93:a0:9c:e7:c4:18:74:10:74:e2:f4:95: 6e:d4:18:96:2b:13:f0:38:3e:d4:44:30:89:63:f6:5e:d8:3d: 5f:1c:d0:03:21:ff:26:9a:b0:31:c2:8b:a0:01:fe:52:5c:fd: a9:49:0d:81:64:9b:ab:40:63:1e:63:cb:8a:fb:ef:08:81:4b: 0e:7d:39:03:dd:a6:09:bc:d4:a9:84:9d:0d:be:77:6f:ca:50: 3b:c1:27:09:03:1f:eb:79:9a:8d:41:f5:72:6f:8c:65:0a:5e: cd:ab:f9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjUwNTE0MTU1NzM1WhcNMjUwNTIxMTU1NzM1WjAYMRYwFAYD VQQDEw02ODI0YmQ3MC1iNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RME2QgFfSd9Kvv1Q+ShnztOtNbqHnvYbwz9zbfxcGcnYfggwIvAivZAVfQ8 8bUCYQi8nWq95jLkvsjFMKLg57an4OJcMFb6Wo/cBTSDyqqgip2tcQnF+Hb66yYJ A7vhGTvwtMp8dxBbvg46IRVZyCXVGB9Pk8TAqQpxbdO4nqgqZYQyAFZw6tdhnaNm X7SgUTmrApQT+CsUjaXYH6klZ3bC7JFPbQLualt+8+PS+h6Ig2G6r+KTmXj1H+/K 8ASBHW7awuc7fQgerL+zk2O/1f0574w8UpinQDAMXJu/hQfbVaCLNw/S2/JMb129 m655o9KE114awORJp3r950nyrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqO5l1m 4Tu3Fd6i6pyUEiDZaSAEMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp75qsWbJEaFX3cgZ6BIQIVkxIVXy0ngC5ZUXsRn3DzScNzR+Y0YC4 eJtRLgPan+8YUpu9hEXskbI3v2g6p3iMP8NElfEBVNFzRY0rjISl8JanZTPC0WIe EwSsDJHrWdqsGeuJkJmjmOxG31aWKRw3YoHjkDd9OueWoH+ehujKviW6ut26H5yD HUIFCTovsRtNQfTmklSToJznxBh0EHTi9JVu1BiWKxPwOD7URDCJY/Ze2D1fHNAD If8mmrAxwougAf5SXP2pSQ2BZJurQGMeY8uK++8IgUsOfTkD3aYJvNSphJ0Nvndv ylA7wScJAx/reZqNQfVyb4xlCl7Nq/mE -----END CERTIFICATE-----Generated at Thu May 15 20:49:36 2025 by rpki-client