$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: IrWT7pbR48b9LWPv2bOx0FTAx+lAc6Dvzq9RluggSX0= Subject key identifier: DD:3D:BE:F8:7C:FF:78:F7:9D:9F:C7:98:05:9A:EF:13:7A:98:33:6E Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 01C9 Signing time: Thu 15 May 2025 02:26:45 +0000 Manifest this update: Thu 15 May 2025 02:26:45 +0000 Manifest next update: Thu 22 May 2025 02:26:45 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: RRA2qLezMqlLnJTg6Q9EfKHrepx+mEA4lw+gXFt/+h0=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: May 15 02:26:45 2025 GMT Not After : May 22 02:26:45 2025 GMT Subject: CN=682550e5-f729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:e5:14:25:12:1e:f2:63:29:3a:f3:6e:21: b6:9c:b5:e2:f0:66:6f:44:b8:f9:ad:5a:73:7f:67: 5b:fb:51:e4:41:48:b1:4c:e0:68:bb:69:76:47:42: a3:e1:83:c9:c3:22:4f:7d:5c:5c:40:a7:a7:d8:38: 05:33:18:c9:70:96:06:b1:7b:3f:83:e9:81:bd:68: 70:d0:64:95:5a:25:17:1e:59:16:53:c5:dc:64:c8: 67:d1:9d:e1:dd:07:1f:bc:96:b9:fd:c1:ce:2b:ef: b4:88:84:eb:60:d4:b7:9a:a4:19:58:d1:e7:9e:44: 18:a5:19:ed:61:36:5d:c8:e1:44:90:36:ff:67:61: 0a:5e:61:27:cc:dd:40:64:e6:12:17:78:f6:49:d4: d3:e8:d9:a7:d4:06:15:62:91:20:f1:b5:58:ce:bd: ad:f3:a2:77:b1:c4:12:38:33:f7:78:fa:c8:28:1f: e0:45:d6:74:3c:e4:62:de:40:96:3a:b7:56:b6:85: df:33:53:1b:ad:68:a2:4c:cd:27:63:5f:7a:bd:98: d5:0d:73:60:53:8e:12:17:7e:98:fb:71:6f:4e:91: b8:c4:a6:d5:6c:18:94:5f:14:1c:d7:34:16:34:5c: 89:58:52:27:99:e8:49:08:e3:fd:a6:6b:42:b5:2b: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3D:BE:F8:7C:FF:78:F7:9D:9F:C7:98:05:9A:EF:13:7A:98:33:6E X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:72:ab:9a:d3:d9:37:a2:81:06:18:22:69:be:f1:2c:6b:b6: 71:a6:74:ed:e3:1a:03:28:53:e2:f7:7a:04:92:a8:70:c5:6d: 23:a2:40:32:b1:3e:57:1a:6b:fb:43:d9:93:55:28:19:10:d8: db:70:da:ef:07:d9:19:fe:53:fa:81:d0:f3:1f:c6:a4:5c:a5: 75:d1:2e:a3:4f:79:02:9f:0b:b8:f2:f0:25:9f:00:e4:ce:ba: 04:7e:14:79:24:21:6a:69:90:81:82:5e:ba:3d:02:da:86:d4: bf:24:20:a1:b1:45:c3:60:32:a9:2d:08:09:a6:15:79:41:f1: 2d:84:f5:70:6d:c7:fc:e3:2c:92:93:ab:b3:ed:67:0b:a6:d3: 27:6b:dd:ca:46:91:2f:e1:f3:92:ef:f3:6c:04:ef:b0:f9:f7: fa:4f:bb:58:56:8f:19:e2:ee:d2:ee:99:4d:76:a3:40:40:c7: 3a:b2:0e:21:11:b5:cc:ec:93:9a:ce:33:6a:c5:14:aa:f1:ad: 6d:33:32:95:c7:d8:85:bb:a6:a9:1b:4b:ad:e7:d3:9e:a0:e2: 63:93:e0:8a:7d:9f:8f:f1:4f:8b:ce:47:a4:a1:3f:82:d3:da: 53:a2:73:7e:f6:f4:3f:98:4d:18:59:ad:93:2f:01:2d:4d:b9: f2:6b:85:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUwNTE1MDIyNjQ1WhcNMjUwNTIyMDIyNjQ1WjAYMRYwFAYD VQQDEw02ODI1NTBlNS1mNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupvlFCUSHvJjKTrzbiG2nLXi8GZvRLj5rVpzf2db+1HkQUixTOBou2l2R0Kj 4YPJwyJPfVxcQKen2DgFMxjJcJYGsXs/g+mBvWhw0GSVWiUXHlkWU8XcZMhn0Z3h 3QcfvJa5/cHOK++0iITrYNS3mqQZWNHnnkQYpRntYTZdyOFEkDb/Z2EKXmEnzN1A ZOYSF3j2SdTT6Nmn1AYVYpEg8bVYzr2t86J3scQSODP3ePrIKB/gRdZ0PORi3kCW OrdWtoXfM1MbrWiiTM0nY196vZjVDXNgU44SF36Y+3FvTpG4xKbVbBiUXxQc1zQW NFyJWFInmehJCOP9pmtCtStaqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN09vvh8 /3j3nZ/HmAWa7xN6mDNuMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAocqua09k3ooEGGCJpvvEsa7ZxpnTt4xoDKFPi93oEkqhwxW0jokAy sT5XGmv7Q9mTVSgZENjbcNrvB9kZ/lP6gdDzH8akXKV10S6jT3kCnwu48vAlnwDk zroEfhR5JCFqaZCBgl66PQLahtS/JCChsUXDYDKpLQgJphV5QfEthPVwbcf84yyS k6uz7WcLptMna93KRpEv4fOS7/NsBO+w+ff6T7tYVo8Z4u7S7plNdqNAQMc6sg4h EbXM7JOazjNqxRSq8a1tMzKVx9iFu6apG0ut59OeoOJjk+CKfZ+P8U+LzkekoT+C 09pTonN+9vQ/mE0YWa2TLwEtTbnya4UZ -----END CERTIFICATE-----Generated at Fri May 16 18:14:12 2025 by rpki-client