$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: +FqLgW3JW/GtS5zbxfA22Lxh06SX7g/TMEvmF+xBk7Q= Subject key identifier: 98:93:61:BD:CE:8E:1C:92:B5:5B:93:D6:AE:11:D2:91:2D:06:60:C3 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 25EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25DD Signing time: Wed 02 Jul 2025 15:50:08 +0000 Manifest this update: Wed 02 Jul 2025 15:50:08 +0000 Manifest next update: Wed 09 Jul 2025 15:50:08 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: hsFH2I80pwBgI0eyI066y1FKQ2r57lPp91WGpqHZ/6Q=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9711 (0x25ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Jul 2 15:50:08 2025 GMT Not After : Jul 9 15:50:08 2025 GMT Subject: CN=68655530-273a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:44:5c:b1:67:88:c5:4b:f7:39:7b:40:91: 13:b7:9e:25:17:0a:94:ae:f1:f5:85:2b:c6:47:59: 59:a9:8c:69:80:55:11:ea:5b:56:d9:06:7d:11:7b: 8b:46:54:0c:58:df:06:41:1b:b6:e2:8e:00:7c:cb: 0f:5e:55:85:58:08:7d:9c:86:6d:4d:91:a7:21:ff: d9:de:d4:fd:18:13:c2:ed:18:20:40:03:cd:8a:59: bb:60:94:5d:9f:07:80:af:85:d5:ff:ff:8a:26:0d: 38:ca:b1:75:84:1f:5d:b7:f6:02:3a:0b:a9:f9:b8: 8e:64:5a:f3:38:ed:4b:00:39:38:cc:e4:03:9f:6f: e4:43:9e:e7:f3:16:c3:49:88:89:42:8a:4b:cf:a7: 09:3f:4b:cb:b5:0d:59:00:8a:04:bd:58:36:a5:c3: 4f:7c:23:f6:60:e8:f8:80:4f:be:e6:56:b2:95:67: e5:b1:41:ab:92:70:c8:ae:80:3d:cc:6b:34:f5:44: 6e:a3:60:1f:73:9b:0b:8c:c8:bb:ed:cc:46:e8:40: 12:11:b9:18:c6:d4:e1:25:fe:1b:86:ed:87:f6:b1: 55:01:07:fd:4f:6a:3e:45:23:94:be:97:fb:29:ec: 9d:78:cb:b9:0a:c3:87:2a:b7:15:07:58:72:a4:82: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:61:BD:CE:8E:1C:92:B5:5B:93:D6:AE:11:D2:91:2D:06:60:C3 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d4:10:c5:37:96:65:4a:09:d0:24:2d:d1:db:df:e4:94:e9: ab:6b:9c:6a:a8:03:00:f4:33:fc:a5:5b:06:20:cd:55:23:ed: 92:ed:b1:8a:80:f6:4b:c1:7a:98:44:61:32:a3:7e:a1:3e:50: 9a:e2:a6:dc:05:95:1a:57:c1:d4:49:0a:c5:9d:ab:0d:b8:f0: ea:30:c0:b9:65:30:55:d9:18:de:3c:6a:2d:a5:fe:b3:3e:fb: 2f:2a:e1:3f:21:fe:fc:ce:2f:c8:dc:3d:76:97:1c:41:f4:e8: 91:1c:a8:85:6e:b9:1b:8e:dd:6b:07:5b:f5:67:b2:6e:25:ec: cc:05:65:0f:ad:3c:be:3d:0b:3f:6f:ff:52:c9:dc:c7:88:b0: 2f:32:91:d9:07:cd:9d:5e:30:ab:37:0e:3d:13:63:41:15:90: 1c:bd:90:34:32:57:fd:cb:1a:a1:b5:32:15:77:b8:61:51:82: d6:a5:f4:77:bf:05:5b:0b:93:cf:5c:3e:ae:84:98:dd:bc:b7: d0:57:0f:9a:2b:1f:06:a5:43:51:21:2e:fc:2c:a4:16:68:8c: f1:d4:fd:5a:9d:19:41:ec:03:aa:6a:23:c6:59:8b:0a:f5:23: c3:c8:72:e4:eb:aa:fd:91:16:63:da:44:7a:1c:83:86:56:3d: fb:4c:47:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwNzAyMTU1MDA4WhcNMjUwNzA5MTU1MDA4WjAYMRYwFAYD VQQDEw02ODY1NTUzMC0yNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsxEXLFniMVL9zl7QJETt54lFwqUrvH1hSvGR1lZqYxpgFUR6ltW2QZ9EXuL RlQMWN8GQRu24o4AfMsPXlWFWAh9nIZtTZGnIf/Z3tT9GBPC7RggQAPNilm7YJRd nweAr4XV//+KJg04yrF1hB9dt/YCOgup+biOZFrzOO1LADk4zOQDn2/kQ57n8xbD SYiJQopLz6cJP0vLtQ1ZAIoEvVg2pcNPfCP2YOj4gE++5laylWflsUGrknDIroA9 zGs09URuo2Afc5sLjMi77cxG6EASEbkYxtThJf4bhu2H9rFVAQf9T2o+RSOUvpf7 KeydeMu5CsOHKrcVB1hypIL/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiTYb3O jhyStVuT1q4R0pEtBmDDMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy1BDFN5ZlSgnQJC3R29/klOmra5xqqAMA9DP8pVsGIM1VI+2S7bGK gPZLwXqYRGEyo36hPlCa4qbcBZUaV8HUSQrFnasNuPDqMMC5ZTBV2RjePGotpf6z PvsvKuE/If78zi/I3D12lxxB9OiRHKiFbrkbjt1rB1v1Z7JuJezMBWUPrTy+PQs/ b/9SydzHiLAvMpHZB82dXjCrNw49E2NBFZAcvZA0Mlf9yxqhtTIVd7hhUYLWpfR3 vwVbC5PPXD6uhJjdvLfQVw+aKx8GpUNRIS78LKQWaIzx1P1anRlB7AOqaiPGWYsK 9SPDyHLk66r9kRZj2kR6HIOGVj37TEdq -----END CERTIFICATE-----Generated at Thu Jul 3 09:48:38 2025 by rpki-client