$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json) Hash identifier: ybY8/HkzqZH6aEpTTAjCMmkE/RF5IQH6VJ3XtE/e43g= Subject key identifier: 14:75:BA:5C:C1:C5:CA:E2:0C:5B:5B:12:33:3C:33:D0:47:59:E5:1B Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft Manifest number: 12B0 Signing time: Mon 12 May 2025 18:28:52 +0000 Manifest this update: Mon 12 May 2025 18:28:52 +0000 Manifest next update: Mon 19 May 2025 18:28:52 +0000 Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: nHA04raQmC3lIyDhr1mndKjdBQRruMaGPGg1oAfPPpE=) 2: 763E080A142911F087C1AF7CC4F9AE02.roa (hash: OqYmuSN5Gj4HYv1k95fE+DkrkF2QoPlx9+v7d3wB2mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Validity Not Before: May 12 18:28:52 2025 GMT Not After : May 19 18:28:52 2025 GMT Subject: CN=68223de4-294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:4f:ed:bb:ea:1a:e7:4a:ec:07:3f:c0:11: a5:1a:91:07:1c:07:77:b4:86:c3:21:02:9c:0d:4d: 24:b0:87:56:66:a2:87:fc:ec:0e:cb:ac:e9:0a:64: 7f:60:59:cc:05:59:71:f9:cc:23:51:e6:9b:2a:ad: a0:26:e0:76:f3:9e:d5:b2:e4:d0:95:bb:62:4b:20: b0:78:03:e7:fd:bd:bc:0d:33:07:30:2c:08:44:e1: b4:8c:cb:d5:c6:f3:d0:9e:1c:27:e0:3b:93:00:cb: 66:9c:34:94:45:ad:a6:6e:81:64:f8:9f:ef:44:61: e2:33:5c:0d:6a:64:e0:9e:b2:14:0d:5f:73:ec:21: 6d:e0:06:ba:37:0c:ce:f2:18:f9:4e:14:1e:9e:3e: 31:a9:72:e1:63:1d:94:86:8b:ed:1a:9c:36:df:89: 4c:12:c7:3e:01:4e:67:08:9c:bd:e2:ac:74:12:d2: 5c:cb:23:3a:05:2b:d5:bb:d6:a4:e7:16:92:c5:bd: ed:4b:79:0d:69:c5:bf:be:22:4d:ef:30:7a:02:e0: f0:a8:36:6d:4f:61:50:c2:89:d3:6b:b2:55:63:98: 09:10:ea:15:84:9a:70:48:4e:1c:ba:b5:de:1a:98: e3:a6:03:29:f0:dc:a3:ac:31:2b:33:e0:5a:2c:5d: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:BA:5C:C1:C5:CA:E2:0C:5B:5B:12:33:3C:33:D0:47:59:E5:1B X509v3 Authority Key Identifier: keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:73:d0:8d:8a:20:7f:c6:c0:e8:05:70:5e:2b:8c:a1:7e: 41:bf:18:cb:3a:df:0f:c5:84:75:7b:e1:55:b1:9f:82:a3:74: cf:03:4e:85:c9:a2:2a:11:9d:59:64:ac:3c:cb:68:42:cf:30: 67:5a:d5:19:a5:b7:63:1b:dd:83:10:6a:4a:95:ad:9a:53:92: 0c:db:94:69:be:0f:5a:3a:ab:d1:5f:a2:7b:e2:ab:8b:57:8c: 88:43:d5:a3:3b:a4:2e:60:da:19:50:04:f9:17:2d:0d:70:a3: 9c:e6:bf:2a:03:11:48:20:3b:05:71:41:fc:1d:ec:a4:30:c6: ba:cb:55:5a:02:7c:74:67:2f:00:6d:20:fa:9d:fa:0f:89:4e: 15:da:e5:ac:b3:25:4c:57:5b:7a:85:c5:52:d3:30:63:eb:02: 08:18:60:5d:3a:2a:ce:eb:73:de:ab:bb:b2:06:6f:e7:1c:05: cd:e7:76:e5:3c:a3:95:77:82:d7:af:6a:f0:d6:aa:4c:54:58: aa:00:85:1b:d5:cf:eb:52:ad:79:32:29:dd:35:df:01:ba:b1: 4c:6c:e7:da:7f:c2:de:69:2e:73:78:97:ec:36:c0:6b:4b:82: 22:3c:85:b5:29:d2:78:38:79:64:a3:f8:fa:4a:42:8c:51:3e: 9b:b4:40:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjEyRTExMC8GA1UEBRMoQkVBN0U5OEM1QTNGQjVGQkQ4MzBBNDM1OTQ0MUI0MjI0 NzI3QzcyRDAeFw0yNTA1MTIxODI4NTJaFw0yNTA1MTkxODI4NTJaMBgxFjAUBgNV BAMTDTY4MjIzZGU0LTI5NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdh0/tu+oa50rsBz/AEaUakQccB3e0hsMhApwNTSSwh1Zmoof87A7LrOkKZH9g WcwFWXH5zCNR5psqraAm4HbzntWy5NCVu2JLILB4A+f9vbwNMwcwLAhE4bSMy9XG 89CeHCfgO5MAy2acNJRFraZugWT4n+9EYeIzXA1qZOCeshQNX3PsIW3gBro3DM7y GPlOFB6ePjGpcuFjHZSGi+0anDbfiUwSxz4BTmcInL3irHQS0lzLIzoFK9W71qTn FpLFve1LeQ1pxb++Ik3vMHoC4PCoNm1PYVDCidNrslVjmAkQ6hWEmnBIThy6td4a mOOmAynw3KOsMSsz4FosXbWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFHW6XMHF yuIMW1sSMzwz0EdZ5RswHwYDVR0jBBgwFoAUvqfpjFo/tfvYMKQ1lEG0Ikcnxy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MTJFLzY1QkMxN0QyMEI2 MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnFmcGpGb190ZnZZTUtRMWxFRzBJa2NueHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MTJFLzY1QkMxN0QyMEI2MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2 WU1LUTFsRUcwSWtjbnh5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9cc9CNiiB/xsDoBXBeK4yhfkG/GMs63w/FhHV74VWxn4KjdM8DToXJ oioRnVlkrDzLaELPMGda1Rmlt2Mb3YMQakqVrZpTkgzblGm+D1o6q9Ffonviq4tX jIhD1aM7pC5g2hlQBPkXLQ1wo5zmvyoDEUggOwVxQfwd7KQwxrrLVVoCfHRnLwBt IPqd+g+JThXa5ayzJUxXW3qFxVLTMGPrAggYYF06Ks7rc96ru7IGb+ccBc3nduU8 o5V3gtevavDWqkxUWKoAhRvVz+tSrXkyKd013wG6sUxs59p/wt5pLnN4l+w2wGtL giI8hbUp0ng4eWSj+PpKQoxRPpu0QHU= -----END CERTIFICATE-----Generated at Wed May 14 15:22:45 2025 by rpki-client