$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json) Hash identifier: ZuKwrubU0yHnUtpkdCggTK6cskZ2yEI+n/cpCM/7SU8= Subject key identifier: E7:83:2C:28:F2:7B:D3:D2:9C:78:F1:95:6B:38:49:5A:50:B2:B6:8B Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft Manifest number: 05AA Signing time: Wed 14 May 2025 23:12:11 +0000 Manifest this update: Wed 14 May 2025 23:12:11 +0000 Manifest next update: Wed 21 May 2025 23:12:11 +0000 Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: jRnzOpoz5EhXoZAQ30ap8oIHV/MOsAisbp2EdM7qEyc=) 2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: CdejYox3BV6EKy7rSMjwH4v5mRzFb0N6duLMtMnZvdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: May 14 23:12:11 2025 GMT Not After : May 21 23:12:11 2025 GMT Subject: CN=6825234b-77eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:3f:83:41:c8:11:8d:e4:d1:09:27:c2:e7: 57:c8:01:b2:f5:00:4c:b1:43:2b:0d:ac:5a:ae:7e: cf:53:60:ec:61:d0:e6:21:ca:c9:a8:11:d0:98:3e: 67:59:62:81:fd:5b:70:4b:d4:92:9a:af:2d:84:a2: 9a:a9:f7:22:70:00:60:cc:66:f9:a1:b7:10:14:9c: 25:b6:43:3e:74:4b:0e:be:04:ef:1a:66:e2:77:e7: 76:60:e3:19:01:ad:77:66:30:41:75:f0:42:43:00: be:66:f9:b2:c7:1f:4a:ff:85:6a:44:f2:7f:ff:95: a0:9a:73:2c:50:56:79:50:ab:bc:5e:e5:6d:20:a2: 4f:45:ac:b3:20:6f:55:b7:7f:98:f7:90:8b:b5:c0: e8:0b:06:c8:50:85:55:b4:7d:d7:79:55:23:3c:3e: ab:ff:a3:0b:ca:41:5e:ba:e1:bd:3d:e8:44:d3:80: d3:22:fc:bb:b8:bf:4d:be:2c:e8:a8:31:ce:c2:39: 47:d6:34:da:de:67:c9:09:28:80:a5:d5:53:4d:94: 8f:2d:d2:8b:aa:8b:99:9e:09:6f:e4:3a:c8:ba:a1: 83:ca:cc:14:4c:4a:8a:88:50:94:21:b2:b1:11:24: db:e0:ed:ba:d3:d1:4a:4f:89:cc:6e:96:33:e7:95: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:2C:28:F2:7B:D3:D2:9C:78:F1:95:6B:38:49:5A:50:B2:B6:8B X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:28:89:88:40:59:91:00:43:a3:a2:6f:0b:1e:02:9b:34: 76:69:04:8e:da:ce:6d:e3:26:b4:ea:ca:c1:7a:76:2b:d5:48: 40:22:2d:d7:69:6c:3c:e7:6c:de:c9:88:fd:29:f3:29:26:4d: 1e:3f:72:76:a6:e9:24:f2:5a:e1:78:b0:ba:36:f1:43:52:1e: f2:dd:33:e3:8c:a4:c8:01:08:47:21:b1:78:22:b3:53:ac:52: 04:e4:5d:8d:1d:70:5d:1b:e9:4c:61:e0:e3:7c:0e:4b:be:5c: 27:0e:a5:54:d7:76:68:c2:f8:84:dd:0d:dd:98:11:1c:73:46: cc:d8:8f:14:b8:5a:3b:a9:c3:54:e7:05:19:6d:82:bf:d3:0e: 82:f2:e7:96:af:bc:c2:bc:24:e2:53:f7:8b:53:7f:ee:de:f9: 50:d8:64:31:6a:95:f8:be:55:46:e0:f4:6c:58:3c:eb:51:d2: 17:9c:03:12:f6:fa:11:dc:9e:c1:40:9c:ce:bb:a7:4e:0b:fa: 15:35:64:70:ba:15:d4:02:25:f1:ef:e5:ca:77:c7:a8:79:d2: 26:07:84:30:06:59:26:b2:a7:f6:54:07:66:ba:6c:6c:d1:f1: b7:c6:05:20:0e:a1:b7:ed:ad:ab:72:ee:0c:6d:2f:09:25:de: 6e:9f:b1:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwNTE0MjMxMjExWhcNMjUwNTIxMjMxMjExWjAYMRYwFAYD VQQDEw02ODI1MjM0Yi03N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0s/g0HIEY3k0QknwudXyAGy9QBMsUMrDaxarn7PU2DsYdDmIcrJqBHQmD5n WWKB/VtwS9SSmq8thKKaqfcicABgzGb5obcQFJwltkM+dEsOvgTvGmbid+d2YOMZ Aa13ZjBBdfBCQwC+Zvmyxx9K/4VqRPJ//5WgmnMsUFZ5UKu8XuVtIKJPRayzIG9V t3+Y95CLtcDoCwbIUIVVtH3XeVUjPD6r/6MLykFeuuG9PehE04DTIvy7uL9Nvizo qDHOwjlH1jTa3mfJCSiApdVTTZSPLdKLqouZnglv5DrIuqGDyswUTEqKiFCUIbKx ESTb4O2609FKT4nMbpYz55VRVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeDLCjy e9PSnHjxlWs4SVpQsraLMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhsCiJiEBZkQBDo6JvCx4CmzR2aQSO2s5t4ya06srBenYr1UhAIi3X aWw852zeyYj9KfMpJk0eP3J2pukk8lrheLC6NvFDUh7y3TPjjKTIAQhHIbF4IrNT rFIE5F2NHXBdG+lMYeDjfA5LvlwnDqVU13ZowviE3Q3dmBEcc0bM2I8UuFo7qcNU 5wUZbYK/0w6C8ueWr7zCvCTiU/eLU3/u3vlQ2GQxapX4vlVG4PRsWDzrUdIXnAMS 9voR3J7BQJzOu6dOC/oVNWRwuhXUAiXx7+XKd8eoedImB4QwBlkmsqf2VAdmumxs 0fG3xgUgDqG37a2rcu4MbS8JJd5un7F3 -----END CERTIFICATE-----Generated at Fri May 16 17:49:50 2025 by rpki-client