$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: 4G91xLGAy9IvDDiwFeb3RfcrLTFkXXI1fXJwVA0IhI4= Subject key identifier: 17:3F:35:53:CB:33:6C:0A:F8:80:0D:69:C5:61:AB:7F:EF:F0:C6:38 Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01B9 Signing time: Sat 03 May 2025 02:39:26 +0000 Manifest this update: Sat 03 May 2025 02:39:26 +0000 Manifest next update: Sat 10 May 2025 02:39:26 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: Y7zA4RCC3bWUX7v20UUbQ7I6PHqaLonIyoqxKQaOc0E=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: May 3 02:39:26 2025 GMT Not After : May 10 02:39:26 2025 GMT Subject: CN=681581de-e963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:ff:a6:89:ce:7e:be:73:8e:91:17:3b:50: 77:2a:f2:f5:32:18:68:06:3f:4c:59:31:fb:a5:64: 51:30:89:ea:58:43:5b:c4:e8:ea:5b:a0:19:c6:c7: 4e:eb:62:58:a2:75:cc:e8:9a:09:e1:43:07:df:d9: 0d:5f:c9:d1:0d:a6:ea:67:f8:4d:b5:43:8c:65:ab: 64:bf:59:0a:63:6b:a6:51:c1:e6:1e:4f:b4:6f:e9: d1:4d:5e:40:8c:d6:01:b3:bb:58:a9:02:82:9e:12: e0:74:76:87:0b:26:ed:f6:7d:65:ab:c0:ca:60:4e: e9:59:56:9a:78:6b:c2:c4:0f:a3:3a:0c:8e:f6:55: fa:52:3c:d6:58:f5:6c:d8:b1:0d:91:75:a0:f9:18: 57:0c:b5:06:49:49:36:16:af:a2:c1:7b:63:b6:b1: c8:8e:7a:d4:6c:df:c1:9c:63:52:92:7a:44:e4:75: fb:be:92:87:63:45:a5:a4:51:33:bb:96:47:a9:99: 69:47:1e:41:e3:5c:3a:72:0f:56:c9:a5:ad:bb:fb: 0b:ad:0c:18:e4:2a:b6:63:7b:91:1f:81:3a:5b:97: a7:16:50:63:b4:c6:44:98:98:21:7e:19:d7:36:f6: 79:a9:19:82:a2:8f:1d:88:dd:86:32:c9:04:10:a1: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3F:35:53:CB:33:6C:0A:F8:80:0D:69:C5:61:AB:7F:EF:F0:C6:38 X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:cd:2b:58:7e:c8:a1:3c:43:dc:f3:26:88:2e:a9:bf:50:49: f2:d4:25:fe:c1:b3:ad:2b:7a:cb:ea:4b:ec:8f:51:ef:2b:30: 5f:2f:9b:1d:45:ed:ce:6b:46:bf:91:fe:22:32:07:9d:f1:f7: 5c:87:f6:a2:36:e1:37:76:3e:a8:f8:25:50:aa:6f:bc:b3:c4: e9:53:70:cb:93:2c:90:5e:6d:14:b0:c8:46:fc:8a:81:f5:45: 9b:2c:40:39:46:dc:1b:32:5e:c6:bb:79:a1:a0:e7:c0:b3:e7: a4:03:57:09:31:49:03:ee:79:00:7e:62:13:76:92:3e:72:e6: 1a:a9:16:0e:8a:aa:f2:a2:a2:5b:36:4c:2f:56:d4:9c:b3:f2: 2a:6c:26:9d:0e:f0:39:a0:ec:01:33:10:0d:12:60:22:a6:5f: 44:69:05:e6:dd:59:a4:f6:af:09:ba:9c:29:7e:af:e8:cf:e0: 0b:0f:76:85:bd:e4:d4:de:ba:f4:8c:bd:3a:23:82:e2:db:1a: 59:3d:46:63:5f:4b:38:75:b3:fb:47:34:3e:3b:71:89:fb:aa: f2:d0:47:57:7c:c1:8f:1e:56:6a:b2:f9:4a:8a:02:b6:f9:18: f0:27:e8:c0:89:a5:af:6e:c9:c0:dd:79:bd:26:35:22:5d:f6: 4c:51:83:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNTAzMDIzOTI2WhcNMjUwNTEwMDIzOTI2WjAYMRYwFAYD VQQDEw02ODE1ODFkZS1lOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19P/ponOfr5zjpEXO1B3KvL1MhhoBj9MWTH7pWRRMInqWENbxOjqW6AZxsdO 62JYonXM6JoJ4UMH39kNX8nRDabqZ/hNtUOMZatkv1kKY2umUcHmHk+0b+nRTV5A jNYBs7tYqQKCnhLgdHaHCybt9n1lq8DKYE7pWVaaeGvCxA+jOgyO9lX6UjzWWPVs 2LENkXWg+RhXDLUGSUk2Fq+iwXtjtrHIjnrUbN/BnGNSknpE5HX7vpKHY0WlpFEz u5ZHqZlpRx5B41w6cg9WyaWtu/sLrQwY5Cq2Y3uRH4E6W5enFlBjtMZEmJghfhnX NvZ5qRmCoo8diN2GMskEEKHX1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc/NVPL M2wK+IANacVhq3/v8MY4MB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUzStYfsihPEPc8yaILqm/UEny1CX+wbOtK3rL6kvsj1HvKzBfL5sd Re3Oa0a/kf4iMged8fdch/aiNuE3dj6o+CVQqm+8s8TpU3DLkyyQXm0UsMhG/IqB 9UWbLEA5RtwbMl7Gu3mhoOfAs+ekA1cJMUkD7nkAfmITdpI+cuYaqRYOiqryoqJb NkwvVtScs/IqbCadDvA5oOwBMxANEmAipl9EaQXm3Vmk9q8Jupwpfq/oz+ALD3aF veTU3rr0jL06I4Li2xpZPUZjX0s4dbP7RzQ+O3GJ+6ry0EdXfMGPHlZqsvlKigK2 +RjwJ+jAiaWvbsnA3Xm9JjUiXfZMUYMH -----END CERTIFICATE-----Generated at Mon May 5 03:18:02 2025 by rpki-client