$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: 6w0CQLXnHl9R1OBC6AOzilLk8WgX6uNScZ8VswpvV0g= Subject key identifier: A6:BA:66:A4:6C:B9:AD:13:60:DB:79:EE:6D:39:CA:B8:CE:94:F8:70 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1331 Signing time: Sat 10 May 2025 16:55:15 +0000 Manifest this update: Sat 10 May 2025 16:55:15 +0000 Manifest next update: Sat 17 May 2025 16:55:15 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 63X+myafNN4hQ0ZwvDhvTMRSWNi0wYlWGqw9OIm3lnA=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: 7dzMQW8xZe2lq7d8lclvmxKRE19SR0FNahUj7xIAu1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4920 (0x1338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: May 10 16:55:15 2025 GMT Not After : May 17 16:55:15 2025 GMT Subject: CN=681f84f3-10e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:17:34:8a:ab:7a:dc:d0:a1:56:69:fd:14: 0f:89:da:82:b2:28:a8:5b:f9:96:4c:3e:b1:be:b4: 22:ea:83:41:8f:e6:3d:e2:f6:46:7e:a4:94:0e:5b: 16:0a:af:04:4e:a4:17:65:1f:3a:ea:3e:b9:a4:35: 15:47:1d:8a:be:51:39:eb:18:81:f3:8d:05:b1:00: 28:7c:45:64:14:a1:bb:d7:4a:f5:e5:4c:ed:19:97: cd:de:e3:62:02:5a:e1:b8:ec:79:47:a3:2a:ad:0c: ec:bc:88:e0:29:d9:68:79:d1:3e:f3:47:0b:f3:ae: 0c:fd:9b:91:b5:37:ed:da:df:9f:b6:0d:70:1f:fc: 8e:f7:0d:33:9b:a9:b6:5a:54:fc:cb:2f:3a:a5:ef: 80:9e:f9:d3:39:93:dd:20:8e:49:4e:d7:53:44:48: 04:ff:74:bb:90:16:4b:fb:16:3e:90:b2:b0:7f:9f: 06:01:9b:8c:61:13:43:9e:51:eb:bf:a5:5c:dc:1e: 87:5c:2c:4a:9d:92:c7:f6:f7:a5:7a:86:06:c8:81: f9:89:03:d8:b7:ae:49:a7:cb:bf:97:17:58:ad:bc: d5:ee:e0:33:f6:8e:0b:dc:af:91:34:cd:0d:47:99: 94:4a:8e:8b:ee:12:87:ac:e1:21:1d:ea:27:b5:83: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:66:A4:6C:B9:AD:13:60:DB:79:EE:6D:39:CA:B8:CE:94:F8:70 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:79:f3:a3:95:3c:6f:5d:71:1e:4f:ad:ae:29:d3:f1:f8:1d: f6:f7:47:a2:d3:16:46:25:46:3c:27:31:2c:d9:5e:a6:51:6e: 7c:a5:d3:d2:ad:66:95:3f:c9:ce:2b:e9:42:c9:1b:c2:4d:7c: ee:e1:34:e1:23:5c:3e:be:2a:3b:60:fe:5b:fb:5b:f8:06:3c: f9:a2:53:ed:c2:68:40:7f:47:ec:73:72:5a:1d:6c:a9:0b:fa: 2d:9e:80:45:98:28:1a:36:11:5f:b7:58:bd:00:cd:97:c4:2f: 99:a9:c4:30:65:d8:7e:96:20:36:01:62:38:bc:5a:b1:36:ff: 80:c6:b7:b9:5e:fb:26:e1:7b:f4:19:73:0a:a1:70:26:a7:83: fa:8b:32:53:27:dd:7c:22:b2:35:34:03:ac:71:46:c3:29:63: 47:bd:83:5f:48:9c:d0:85:c3:33:12:6b:d8:43:83:5b:7a:41: e1:a7:14:df:ba:75:c6:d7:d6:c4:61:f6:6d:18:e7:85:27:d7: 52:da:08:86:ac:32:a0:61:64:47:b5:f5:51:e1:7d:4a:be:7e: 9c:0b:44:35:bb:5d:18:e4:83:ad:5d:68:31:6a:7d:17:5c:8f: 17:c8:cd:07:db:07:ea:44:e5:a9:4c:46:13:6f:39:8c:b5:ce: fa:07:3f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUwNTEwMTY1NTE1WhcNMjUwNTE3MTY1NTE1WjAYMRYwFAYD VQQDEw02ODFmODRmMy0xMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywIXNIqretzQoVZp/RQPidqCsiioW/mWTD6xvrQi6oNBj+Y94vZGfqSUDlsW Cq8ETqQXZR866j65pDUVRx2KvlE56xiB840FsQAofEVkFKG710r15UztGZfN3uNi AlrhuOx5R6MqrQzsvIjgKdloedE+80cL864M/ZuRtTft2t+ftg1wH/yO9w0zm6m2 WlT8yy86pe+AnvnTOZPdII5JTtdTREgE/3S7kBZL+xY+kLKwf58GAZuMYRNDnlHr v6Vc3B6HXCxKnZLH9veleoYGyIH5iQPYt65Jp8u/lxdYrbzV7uAz9o4L3K+RNM0N R5mUSo6L7hKHrOEhHeontYNsKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa6ZqRs ua0TYNt57m05yrjOlPhwMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLefOjlTxvXXEeT62uKdPx+B3290ei0xZGJUY8JzEs2V6mUW58pdPS rWaVP8nOK+lCyRvCTXzu4TThI1w+vio7YP5b+1v4Bjz5olPtwmhAf0fsc3JaHWyp C/otnoBFmCgaNhFft1i9AM2XxC+ZqcQwZdh+liA2AWI4vFqxNv+Axre5Xvsm4Xv0 GXMKoXAmp4P6izJTJ918IrI1NAOscUbDKWNHvYNfSJzQhcMzEmvYQ4NbekHhpxTf unXG19bEYfZtGOeFJ9dS2giGrDKgYWRHtfVR4X1Kvn6cC0Q1u10Y5IOtXWgxan0X XI8XyM0H2wfqROWpTEYTbzmMtc76Bz8T -----END CERTIFICATE-----Generated at Sun May 11 15:55:58 2025 by rpki-client