$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: YbuwkhhCke9spSLAdh4otUN2h7CCrGu8Yt+zeW4pY3E= Subject key identifier: D3:96:3E:16:85:40:56:5A:B3:3E:E3:81:2E:5B:61:66:3C:89:71:23 Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 05BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 05B6 Signing time: Sat 10 May 2025 22:43:41 +0000 Manifest this update: Sat 10 May 2025 22:43:40 +0000 Manifest next update: Sat 17 May 2025 22:43:40 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: 5bJu8yP5UGv6SOY4DH5+cPBPBCJq6VdhfcHzRaCGe2k=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: May 10 22:43:40 2025 GMT Not After : May 17 22:43:40 2025 GMT Subject: CN=681fd69c-9fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:29:85:42:01:8f:00:8d:77:0a:2f:f3:44: 8a:41:20:dc:36:3a:75:52:35:6c:89:d7:71:6e:46: 23:0d:20:cd:df:a2:85:b6:fd:ac:b7:25:fc:6c:80: 8e:df:02:7e:83:04:a0:a2:95:99:0a:fd:60:48:06: 7b:8f:e8:fa:75:9f:08:fe:2e:74:b4:d4:09:8f:b6: 79:6f:bf:e2:a4:51:a7:1e:57:4f:7a:ee:68:43:eb: 22:e7:3a:4b:19:80:f8:88:1b:ba:92:5c:ff:be:79: 0e:74:65:ca:36:6f:d4:df:30:7a:32:25:04:7a:c0: c4:06:c9:c6:af:1c:cb:19:c8:10:c5:76:34:e3:98: 21:e6:ef:ef:f7:51:1b:4b:b6:2a:cc:46:a1:3c:0f: 57:a2:7c:89:6d:27:2f:f7:e5:e5:9b:d4:40:d4:e5: ed:69:46:dc:d8:c8:50:cd:ad:21:61:fe:f6:13:46: 8b:09:cf:94:37:d3:50:70:45:b0:0f:bb:2f:06:53: 79:e5:ea:aa:56:a5:d4:25:fa:72:7c:3e:c9:bd:4c: c7:56:5f:e1:81:3e:25:30:c1:ab:4c:94:d3:12:a1: bd:66:a9:fc:37:09:61:5e:4d:0a:6b:91:89:95:8d: ac:30:24:e1:dd:b9:7e:a9:9a:79:8d:dc:f4:4c:bb: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:96:3E:16:85:40:56:5A:B3:3E:E3:81:2E:5B:61:66:3C:89:71:23 X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fa:53:4a:0a:72:49:f9:fa:3d:d5:a9:40:51:18:a5:3a:59: ac:df:1c:53:3d:ad:46:25:8d:15:19:62:71:37:24:5a:52:55: a2:cd:1f:56:1a:d7:67:41:ab:06:b5:a6:7e:df:83:93:78:07: aa:5e:c9:95:90:37:f3:f6:ed:b3:55:fb:4e:66:84:cd:c9:01: d2:a1:b2:d3:6f:25:03:21:0c:47:0a:89:56:4b:f1:89:18:50: 1b:f9:13:bb:e2:28:5a:ee:fd:f6:e0:2c:a2:c9:67:c2:5d:da: 9c:d1:45:14:20:ed:58:08:b6:87:62:a9:28:82:e0:61:bd:b5: 1b:53:22:4e:3d:d8:55:7e:d8:13:96:05:7a:03:16:1a:90:2b: 7b:5d:19:fa:44:e3:dd:86:fa:d9:b6:b1:d1:75:f3:54:57:09: a8:a0:8a:92:e4:9b:e3:dc:0d:10:3b:f9:7c:30:b9:31:d0:14: 8d:35:92:a1:78:0f:5b:1a:80:40:25:3f:e8:20:ff:47:f3:79: 74:6d:64:30:d2:27:b0:45:ee:96:c3:dc:af:7b:12:f0:97:34: e2:a5:a8:4b:eb:59:c3:32:b7:ec:f7:92:d9:44:16:37:62:f0: 69:8c:a5:2d:93:5a:8e:53:10:5b:01:d8:74:99:04:a3:c2:61: 10:73:55:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUwNTEwMjI0MzQwWhcNMjUwNTE3MjI0MzQwWjAYMRYwFAYD VQQDEw02ODFmZDY5Yy05ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2MphUIBjwCNdwov80SKQSDcNjp1UjVsiddxbkYjDSDN36KFtv2styX8bICO 3wJ+gwSgopWZCv1gSAZ7j+j6dZ8I/i50tNQJj7Z5b7/ipFGnHldPeu5oQ+si5zpL GYD4iBu6klz/vnkOdGXKNm/U3zB6MiUEesDEBsnGrxzLGcgQxXY045gh5u/v91Eb S7YqzEahPA9XonyJbScv9+Xlm9RA1OXtaUbc2MhQza0hYf72E0aLCc+UN9NQcEWw D7svBlN55eqqVqXUJfpyfD7JvUzHVl/hgT4lMMGrTJTTEqG9Zqn8NwlhXk0Ka5GJ lY2sMCTh3bl+qZp5jdz0TLt9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOWPhaF QFZasz7jgS5bYWY8iXEjMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4+lNKCnJJ+fo91alAURilOlms3xxTPa1GJY0VGWJxNyRaUlWizR9W GtdnQasGtaZ+34OTeAeqXsmVkDfz9u2zVftOZoTNyQHSobLTbyUDIQxHColWS/GJ GFAb+RO74iha7v324CyiyWfCXdqc0UUUIO1YCLaHYqkoguBhvbUbUyJOPdhVftgT lgV6AxYakCt7XRn6ROPdhvrZtrHRdfNUVwmooIqS5Jvj3A0QO/l8MLkx0BSNNZKh eA9bGoBAJT/oIP9H83l0bWQw0iewRe6Ww9yvexLwlzTipahL61nDMrfs95LZRBY3 YvBpjKUtk1qOUxBbAdh0mQSjwmEQc1XK -----END CERTIFICATE-----Generated at Sun May 11 15:33:29 2025 by rpki-client