$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: t9G3imkeFmqvTpvMSez1+okw6dOsIT4AheSmeE0zjTE= Subject key identifier: F2:D7:EF:DD:95:06:59:73:BF:2E:49:1B:45:D6:8E:AD:EB:18:75:60 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 0687 Signing time: Mon 12 May 2025 22:02:15 +0000 Manifest this update: Mon 12 May 2025 22:02:15 +0000 Manifest next update: Mon 19 May 2025 22:02:15 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: qlgzQnOl1nN5N4CpxPeLF093epa6Ux3v19foBeqpDxw=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: May 12 22:02:15 2025 GMT Not After : May 19 22:02:15 2025 GMT Subject: CN=68226fe7-b108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:83:7a:54:61:4a:b2:cb:07:2f:02:57:4b:0c: ba:29:6e:e0:d4:03:3d:6c:1d:a7:7b:51:0d:cb:59: d6:ec:ff:e0:de:d7:25:6b:27:f9:33:38:01:7a:10: a2:d8:f0:82:9b:49:2f:b8:33:97:88:02:86:88:43: e9:19:ae:75:62:75:54:29:9d:ca:0a:2e:95:24:71: 66:50:39:77:f2:db:09:13:01:5e:b2:8e:36:28:60: ce:fb:0e:e0:7a:f1:aa:6a:3e:5f:53:ed:4d:d3:e6: af:66:05:b3:93:da:26:83:f9:9d:3e:0b:a2:fe:9c: 00:0b:19:fe:00:7e:8c:91:15:1d:99:c1:80:db:81: e4:2f:ae:88:60:81:8f:8e:37:00:35:18:fb:15:49: 2f:d7:f9:1e:93:e7:a7:ee:65:b1:83:59:25:3a:f4: f5:74:11:63:ad:ba:89:e7:9f:68:09:a3:f1:d7:15: c2:49:c3:a5:f5:a6:f0:30:2f:a9:2c:00:62:34:ca: 45:ba:8f:25:46:34:a3:9e:e2:13:1e:30:ad:98:9e: e3:3d:8d:90:f2:cc:d4:d5:b6:9b:53:3f:21:8d:e1: 61:71:57:7a:3e:79:ab:ee:2f:11:53:d9:7d:f3:0e: f9:5a:b9:f2:65:1b:c0:0f:29:c3:ea:d5:fb:5d:28: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D7:EF:DD:95:06:59:73:BF:2E:49:1B:45:D6:8E:AD:EB:18:75:60 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:98:eb:d7:4b:ba:c0:8a:3a:97:80:24:80:28:35:0d:e1:9b: 9f:49:88:91:f0:93:25:2c:82:02:6d:29:e5:52:44:ed:0a:fa: a8:8e:d9:fc:90:e7:03:d3:24:55:18:1d:0b:bf:3f:d2:d9:2f: 3b:14:3e:ab:53:42:74:7d:c7:6d:17:91:27:dc:d8:fe:eb:29: 64:06:87:81:c7:5e:e9:51:f9:e7:91:93:71:6b:c7:1e:70:d0: e1:3e:2f:07:c6:d6:dd:5d:84:eb:0a:c0:e1:8f:cf:3a:29:0b: b0:1c:27:e8:f7:49:e4:ce:93:47:74:2d:89:f2:73:84:e3:b2: d7:ce:30:af:d2:9f:2b:ab:3c:83:f7:93:9d:05:d6:34:ae:eb: 5c:25:6b:55:8b:d5:5b:28:8e:79:05:95:bd:73:be:46:8d:90: 4b:09:26:d3:fb:28:c7:c0:f3:b2:da:05:69:ea:71:ca:42:07: 7c:d9:d2:06:6d:46:49:5e:b4:c3:cd:44:db:c8:ea:65:ff:6e: 07:f3:bd:75:c4:ca:ee:4d:80:f9:0d:cb:cb:6b:f4:60:f6:81: 84:ff:83:22:b6:eb:5c:d6:49:54:13:cc:96:ab:dc:dc:8b:80: a1:bc:eb:e3:40:d0:6b:80:dc:5f:25:ea:6a:a6:73:6e:bb:68: bf:f7:18:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwNTEyMjIwMjE1WhcNMjUwNTE5MjIwMjE1WjAYMRYwFAYD VQQDEw02ODIyNmZlNy1iMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YN6VGFKsssHLwJXSwy6KW7g1AM9bB2ne1ENy1nW7P/g3tclayf5MzgBehCi 2PCCm0kvuDOXiAKGiEPpGa51YnVUKZ3KCi6VJHFmUDl38tsJEwFeso42KGDO+w7g evGqaj5fU+1N0+avZgWzk9omg/mdPgui/pwACxn+AH6MkRUdmcGA24HkL66IYIGP jjcANRj7FUkv1/kek+en7mWxg1klOvT1dBFjrbqJ559oCaPx1xXCScOl9abwMC+p LABiNMpFuo8lRjSjnuITHjCtmJ7jPY2Q8szU1babUz8hjeFhcVd6Pnmr7i8RU9l9 8w75WrnyZRvADynD6tX7XSjuPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLX792V Bllzvy5JG0XWjq3rGHVgMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXmOvXS7rAijqXgCSAKDUN4ZufSYiR8JMlLIICbSnlUkTtCvqojtn8 kOcD0yRVGB0Lvz/S2S87FD6rU0J0fcdtF5En3Nj+6ylkBoeBx17pUfnnkZNxa8ce cNDhPi8HxtbdXYTrCsDhj886KQuwHCfo90nkzpNHdC2J8nOE47LXzjCv0p8rqzyD 95OdBdY0rutcJWtVi9VbKI55BZW9c75GjZBLCSbT+yjHwPOy2gVp6nHKQgd82dIG bUZJXrTDzUTbyOpl/24H8711xMruTYD5DcvLa/Rg9oGE/4Mitutc1klUE8yWq9zc i4ChvOvjQNBrgNxfJepqpnNuu2i/9xg4 -----END CERTIFICATE-----Generated at Wed May 14 21:20:52 2025 by rpki-client