$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: spC4XRjAQ5nLfyVgoIuvGCH5vmdCmt69Epi3NBTUIJo= Subject key identifier: 5F:D8:64:AC:30:0C:21:76:44:96:77:43:AC:F6:98:89:D7:55:3F:63 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 08EC Signing time: Mon 12 May 2025 20:27:59 +0000 Manifest this update: Mon 12 May 2025 20:27:59 +0000 Manifest next update: Mon 19 May 2025 20:27:59 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: WzFff76fOkgqTrGIn+mEDJ9UJSiwM8HXUmkC+oeRKhM=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 6: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: May 12 20:27:59 2025 GMT Not After : May 19 20:27:59 2025 GMT Subject: CN=682259cf-0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:3b:bb:af:5a:39:3d:57:66:ef:c7:ae:1d: e4:62:30:d1:91:da:82:67:57:bf:d9:ba:dc:7e:30: 73:89:3d:06:f2:e1:41:51:1e:64:06:39:ed:f8:ac: 23:10:3d:6b:c7:ad:a9:3a:2f:65:f4:3b:e9:b9:68: 2b:bb:45:ec:b5:41:b2:f7:76:ba:57:69:b2:db:60: 68:e0:99:c5:c6:d5:67:74:05:84:62:39:b9:10:3d: d3:e9:42:bc:0f:c3:17:5a:20:ee:58:41:1e:72:80: fc:81:16:3e:d9:e6:da:aa:b9:15:f5:06:75:5e:e3: 84:2a:f0:fa:0e:dc:1f:dd:47:0c:9b:64:f2:d3:0f: 0c:03:b3:e9:63:aa:4a:4d:70:be:b8:1f:10:c6:f1: f6:18:9a:ae:86:5c:bb:71:e2:a1:f5:74:62:0e:4f: 94:12:a0:36:37:52:cd:cc:d5:cc:fb:46:40:0a:16: 43:c5:5d:52:13:fe:88:35:9c:0f:06:33:43:00:f6: 14:49:d0:ff:82:34:62:6e:ae:36:20:9a:79:a1:90: 2f:ff:1b:42:7f:81:4f:06:61:b0:71:f4:c2:21:bd: 0c:8a:8e:63:a6:25:ee:d6:e1:e2:7c:ed:d1:33:a2: c0:38:2e:90:db:43:1f:a8:b2:90:80:0d:b0:61:83: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D8:64:AC:30:0C:21:76:44:96:77:43:AC:F6:98:89:D7:55:3F:63 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7b:a1:8d:d7:88:09:8e:e4:bc:13:7c:fd:86:5c:4b:85:a1: df:56:59:f8:fb:b5:3a:e4:30:2a:65:da:a9:36:2e:2e:15:be: 1d:df:82:c1:19:21:cc:80:a3:39:d6:38:e4:b4:d5:bb:06:38: 63:4a:de:b7:6f:57:82:0d:9a:60:65:b8:e4:d0:84:ea:5f:d5: e0:bf:ab:a5:8b:1b:be:92:57:bd:84:27:f4:5d:35:40:fa:29: c9:47:5f:cc:6d:fe:c7:80:d3:16:e9:76:c7:a2:4a:01:5c:dc: c7:5e:38:eb:ec:83:dd:e5:cb:78:ba:18:ae:c9:3d:dc:3b:22: d0:f2:99:de:8b:ad:8b:e5:e8:f4:fc:c8:1c:99:ee:00:59:1b: da:b2:86:3c:0e:10:bb:1f:61:78:81:97:bf:f7:04:5b:75:27: 07:1b:3d:8c:08:2b:2b:16:92:9d:9e:16:87:5b:2b:54:d7:cc: 26:73:b3:56:9c:2f:52:ef:42:62:4a:46:e6:d2:d8:03:22:96: 3d:9b:94:e5:57:66:c5:d9:bc:e4:54:8c:cd:df:71:7e:8d:ee: 8c:04:28:95:f9:7e:db:d1:34:81:54:45:fc:4c:e9:cc:1d:ad: 8e:d7:c9:d5:ba:c1:ef:e2:81:f9:98:3d:a2:b9:d5:47:d9:87: b1:19:fb:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNTEyMjAyNzU5WhcNMjUwNTE5MjAyNzU5WjAYMRYwFAYD VQQDEw02ODIyNTljZi0wYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu547u69aOT1XZu/Hrh3kYjDRkdqCZ1e/2brcfjBziT0G8uFBUR5kBjnt+Kwj ED1rx62pOi9l9DvpuWgru0XstUGy93a6V2my22Bo4JnFxtVndAWEYjm5ED3T6UK8 D8MXWiDuWEEecoD8gRY+2ebaqrkV9QZ1XuOEKvD6Dtwf3UcMm2Ty0w8MA7PpY6pK TXC+uB8QxvH2GJquhly7ceKh9XRiDk+UEqA2N1LNzNXM+0ZAChZDxV1SE/6INZwP BjNDAPYUSdD/gjRibq42IJp5oZAv/xtCf4FPBmGwcfTCIb0Mio5jpiXu1uHifO3R M6LAOC6Q20MfqLKQgA2wYYMNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/YZKww DCF2RJZ3Q6z2mInXVT9jMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbe6GN14gJjuS8E3z9hlxLhaHfVln4+7U65DAqZdqpNi4uFb4d34LB GSHMgKM51jjktNW7BjhjSt63b1eCDZpgZbjk0ITqX9Xgv6ulixu+kle9hCf0XTVA +inJR1/Mbf7HgNMW6XbHokoBXNzHXjjr7IPd5ct4uhiuyT3cOyLQ8pnei62L5ej0 /Mgcme4AWRvasoY8DhC7H2F4gZe/9wRbdScHGz2MCCsrFpKdnhaHWytU18wmc7NW nC9S70JiSkbm0tgDIpY9m5TlV2bF2bzkVIzN33F+je6MBCiV+X7b0TSBVEX8TOnM Ha2O18nVusHv4oH5mD2iudVH2YexGfv0 -----END CERTIFICATE-----Generated at Wed May 14 10:36:27 2025 by rpki-client