$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: fChG2x/3K9f6DnJPfo6WICAJzDMR2O4IQsfAibv4OmU= Subject key identifier: 02:C6:84:9E:54:5C:6F:BE:99:E1:27:CB:15:76:DF:EF:B4:08:78:5A Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 04FC Signing time: Tue 13 May 2025 08:55:56 +0000 Manifest this update: Tue 13 May 2025 08:55:56 +0000 Manifest next update: Tue 20 May 2025 08:55:56 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: mfNwIPpbhzEzJ0SnT5NoyO4oOht6ywPUeNuTUI+RacE=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 1F646CCC2FD111F0A198D70AC4F9AE02.roa (hash: Yr1qohDlFME0FLyhHe7l+HFOuH7vLbIQfttn076zx+A=) 4: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: PbZFsJ2ylUyKCBCI4ffjpcbXFms6YNAMvxiYJ/jYDds=) 5: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: 0Wp24a54v+z2yZzn7ZdVr/HDi0WffJnb8k/Q3oLm6hg=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: May 13 08:55:56 2025 GMT Not After : May 20 08:55:56 2025 GMT Subject: CN=6823091c-ec3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:e6:50:31:f1:b6:56:e0:fa:2d:aa:ea:7e: 48:0e:61:76:1d:5e:89:5b:d6:0e:2d:2a:8e:72:b6: 12:d6:4d:ca:dd:27:16:a7:44:2d:b5:d6:a7:0e:05: 69:13:81:fe:07:59:80:07:1f:60:95:44:7f:0e:52: b0:0c:7c:ec:e5:86:ba:4b:fd:5b:62:ec:ba:ca:64: f2:35:3a:79:8b:ad:4c:91:9c:33:83:27:0e:73:2b: 3c:ac:b8:4e:bb:ad:58:67:c7:f2:9f:31:24:c8:a5: 8c:42:e3:a6:ed:f3:e9:82:a8:cf:1f:ab:1a:6a:5b: 5d:c4:bc:62:73:c6:30:ad:5c:85:69:35:d5:2f:90: 26:de:ed:08:b3:51:b2:b7:77:72:a1:f9:78:fc:7e: 18:44:a5:f2:18:0b:81:cf:99:01:a7:25:35:c9:3f: 1d:b4:16:19:58:8d:72:f9:3e:c4:41:a3:d6:6c:44: 5b:40:f5:43:e6:19:66:b0:7e:83:8c:39:ec:74:d9: ea:ad:2d:eb:b3:3e:4b:83:1b:09:92:ac:6d:7e:09: ac:b0:bc:37:1b:c1:7b:c8:13:1c:45:2f:51:c4:91: 8c:b4:b1:09:3e:7b:ce:f4:cd:b5:22:8b:85:ee:96: 62:cc:61:1e:0b:46:48:53:d6:80:31:75:de:cd:ce: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C6:84:9E:54:5C:6F:BE:99:E1:27:CB:15:76:DF:EF:B4:08:78:5A X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:93:31:b0:a0:03:78:7b:a7:b7:c8:91:60:61:79:df:a1: db:5c:3e:76:d6:ef:b1:65:98:24:7c:4f:31:44:3a:4d:0b:fe: d7:73:f1:be:f4:90:35:8f:d7:b2:a1:13:36:c3:5f:a2:55:19: 08:cd:96:1c:f3:e5:61:a6:65:a3:ea:2f:31:fa:7b:3b:19:bc: c8:e7:a5:da:ef:0d:7b:11:0c:eb:2f:41:28:12:68:64:b6:56: 85:a9:d1:b8:88:6d:fa:92:c8:a9:04:4a:1a:23:f0:a8:81:50: b1:d5:39:01:82:2a:25:8f:59:ac:e3:5b:5b:f9:b0:69:35:ef: 23:33:d4:da:c7:72:1a:83:99:ab:f6:83:bc:88:e4:d6:60:c3: 3f:90:dc:46:70:1b:45:05:79:78:ad:93:19:cd:8c:83:43:b3: 12:75:7b:a4:ae:03:e1:cc:80:ce:e6:d9:d9:14:5d:73:71:c2: ab:a8:fc:8e:ec:5b:18:45:43:f7:34:b9:70:3d:db:11:e3:26: 3d:08:ba:b6:3b:c8:8d:b1:6a:ff:50:ed:0e:78:3c:cd:cf:61: c5:01:c8:78:10:56:0d:28:64:52:ed:df:da:fa:87:03:d6:04: 5b:d1:d0:f9:d0:8e:f0:db:6e:21:05:3c:e7:55:9d:bb:6b:65: 83:f2:6f:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNTEzMDg1NTU2WhcNMjUwNTIwMDg1NTU2WjAYMRYwFAYD VQQDEw02ODIzMDkxYy1lYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU3mUDHxtlbg+i2q6n5IDmF2HV6JW9YOLSqOcrYS1k3K3ScWp0QttdanDgVp E4H+B1mABx9glUR/DlKwDHzs5Ya6S/1bYuy6ymTyNTp5i61MkZwzgycOcys8rLhO u61YZ8fynzEkyKWMQuOm7fPpgqjPH6saaltdxLxic8YwrVyFaTXVL5Am3u0Is1Gy t3dyofl4/H4YRKXyGAuBz5kBpyU1yT8dtBYZWI1y+T7EQaPWbERbQPVD5hlmsH6D jDnsdNnqrS3rsz5LgxsJkqxtfgmssLw3G8F7yBMcRS9RxJGMtLEJPnvO9M21IouF 7pZizGEeC0ZIU9aAMXXezc64GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALGhJ5U XG++meEnyxV23++0CHhaMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FJMxsKADeHunt8iRYGF536HbXD521u+xZZgkfE8xRDpNC/7Xc/G+ 9JA1j9eyoRM2w1+iVRkIzZYc8+VhpmWj6i8x+ns7GbzI56Xa7w17EQzrL0EoEmhk tlaFqdG4iG36ksipBEoaI/CogVCx1TkBgiolj1ms41tb+bBpNe8jM9Tax3Iag5mr 9oO8iOTWYMM/kNxGcBtFBXl4rZMZzYyDQ7MSdXukrgPhzIDO5tnZFF1zccKrqPyO 7FsYRUP3NLlwPdsR4yY9CLq2O8iNsWr/UO0OeDzNz2HFAch4EFYNKGRS7d/a+ocD 1gRb0dD50I7w224hBTznVZ27a2WD8m9W -----END CERTIFICATE-----Generated at Tue May 13 22:41:28 2025 by rpki-client