$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: AghWk/EJP547mgNnc/O3i+dCfGhPvxDX+i4tNDlh2U4= Subject key identifier: 8C:DB:09:83:90:34:AC:29:70:AA:AF:F9:4D:2B:E0:93:6E:7F:FE:4E Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 40 Signing time: Thu 15 May 2025 06:48:51 +0000 Manifest this update: Thu 15 May 2025 06:48:51 +0000 Manifest next update: Thu 22 May 2025 06:48:51 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: VJAzkMUcYmYRkGLNgG1gnzDwWj0ZOBD8zDkxwpz8L9Q=) 2: ED795D30D6ED11EFBC37E16BC4F9AE02.roa (hash: ytwFD4jangW+gR76bRXjWLpiY6QBAfomC9SAsY7jMYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: May 15 06:48:51 2025 GMT Not After : May 22 06:48:51 2025 GMT Subject: CN=68258e53-ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6c:72:a4:64:ea:46:7c:be:62:bb:e0:ec:d2: cd:d1:99:04:20:10:b8:dc:bf:7b:5d:94:ff:16:39: 4d:7c:9d:99:ef:bd:b3:27:22:28:ba:88:6e:d5:5a: b4:db:3a:7d:d7:75:ce:4b:e1:cf:49:de:26:95:9d: 46:2f:f9:64:0d:08:5e:c1:7b:80:43:c9:9b:f5:cc: 25:cf:59:07:c8:b1:0a:73:45:00:5a:d7:2c:8e:b5: 35:22:c3:4d:a9:11:1f:52:b6:13:e5:ee:72:98:69: f4:36:67:71:5b:bf:48:9f:02:b9:59:d0:7e:7b:04: 6a:62:ee:49:52:e1:1c:73:24:f7:97:4a:12:5a:57: 04:71:ab:89:71:93:29:af:0d:80:92:1a:09:73:8a: f0:26:cb:94:e6:88:1b:9f:ea:e2:0e:6f:35:db:7d: d8:9f:80:f6:4a:29:4f:4d:a1:e4:f3:9e:dd:69:de: f3:df:b2:b8:ee:2e:72:4f:f3:3f:2a:69:23:a1:a8: f5:79:4e:06:f7:eb:09:e9:d3:2d:d0:52:d6:c5:44: 74:85:2b:b1:0e:e5:b5:85:05:ea:fc:77:19:f3:a1: 91:5a:fe:58:ad:14:d8:3f:f3:26:bd:6d:3d:94:98: e7:fb:f2:ab:54:38:8e:08:c4:84:41:fc:bc:aa:ac: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:09:83:90:34:AC:29:70:AA:AF:F9:4D:2B:E0:93:6E:7F:FE:4E X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:ba:62:01:14:ff:7a:ff:d8:3f:e0:44:ad:e8:45:d4:22: 82:46:03:1f:55:58:7e:47:c6:3b:c1:ab:f1:c9:ab:34:4e:59: 4c:3a:1b:e2:5a:f1:8c:26:21:24:16:7f:cf:b4:d6:16:08:fd: 02:a4:50:73:41:e2:19:ad:b6:c6:e7:b8:5f:10:d3:fe:af:c3: 40:74:d8:35:c2:82:66:51:2b:26:8d:39:13:73:dd:b5:c0:e9: c7:5b:c3:71:24:03:03:3e:87:36:40:ed:7e:e9:f8:dd:43:a7: a0:ad:5a:1e:c4:91:7a:68:76:3d:39:9c:36:e9:8e:82:3b:01: d6:2a:21:57:3b:5e:02:66:8f:b7:ab:1e:8e:5c:2e:e0:8e:0b: 77:9f:a8:41:c2:5f:fa:0f:3f:9b:a8:8d:b3:e7:70:74:8f:f2: 0e:25:7d:92:00:3a:0f:83:74:de:85:e7:6e:4b:51:bf:72:bb: 6f:b8:38:9d:05:18:f2:43:90:11:88:5c:67:0a:3d:0c:ec:02: 54:4e:ab:5a:d2:d8:aa:6e:c1:f0:98:54:18:7c:90:ef:4d:69: 98:d9:8e:b2:18:ac:7e:a3:f9:ad:25:a0:bb:52:62:3b:7f:30: f4:13:c3:77:b4:8c:ac:17:a7:5a:59:10:4c:3f:db:d8:f3:82: c4:f9:42:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA1MTUwNjQ4NTFaFw0yNTA1MjIwNjQ4NTFaMBgxFjAUBgNV BAMTDTY4MjU4ZTUzLWFkMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDybHKkZOpGfL5iu+Ds0s3RmQQgELjcv3tdlP8WOU18nZnvvbMnIii6iG7VWrTb On3Xdc5L4c9J3iaVnUYv+WQNCF7Be4BDyZv1zCXPWQfIsQpzRQBa1yyOtTUiw02p ER9SthPl7nKYafQ2Z3Fbv0ifArlZ0H57BGpi7klS4RxzJPeXShJaVwRxq4lxkymv DYCSGglzivAmy5TmiBuf6uIObzXbfdifgPZKKU9NoeTznt1p3vPfsrjuLnJP8z8q aSOhqPV5Tgb36wnp0y3QUtbFRHSFK7EO5bWFBer8dxnzoZFa/litFNg/8ya9bT2U mOf78qtUOI4IxIRB/LyqrEI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjNsJg5A0 rClwqq/5TSvgk25//k4wHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRz ZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGY6umIBFP96/9g/4ESt6EXUIoJGAx9VWH5HxjvBq/HJqzROWUw6G+Ja 8YwmISQWf8+01hYI/QKkUHNB4hmttsbnuF8Q0/6vw0B02DXCgmZRKyaNORNz3bXA 6cdbw3EkAwM+hzZA7X7p+N1Dp6CtWh7EkXpodj05nDbpjoI7AdYqIVc7XgJmj7er Ho5cLuCOC3efqEHCX/oPP5uojbPncHSP8g4lfZIAOg+DdN6F525LUb9yu2+4OJ0F GPJDkBGIXGcKPQzsAlROq1rS2KpuwfCYVBh8kO9NaZjZjrIYrH6j+a0loLtSYjt/ MPQTw3e0jKwXp1pZEEw/29jzgsT5QkE= -----END CERTIFICATE-----Generated at Fri May 16 11:59:11 2025 by rpki-client