$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: SAB7NhHGqLI44bZOMRCsCxVhEn/utWT+PdEC9OPZpnQ= Subject key identifier: 53:0C:E5:9A:08:55:D2:A7:2F:86:6A:AB:81:0A:11:09:09:69:B0:79 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 0813 Signing time: Wed 14 May 2025 20:57:28 +0000 Manifest this update: Wed 14 May 2025 20:57:27 +0000 Manifest next update: Wed 21 May 2025 20:57:27 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: ODqsw7nxJXpnBh6K9YALeH7R8uKYkXIq6J2w03n5Un8=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: May 14 20:57:27 2025 GMT Not After : May 21 20:57:27 2025 GMT Subject: CN=682503b8-cd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:e4:d9:7f:05:f1:59:4d:0e:67:33:bd:55: b1:18:a1:91:46:59:ad:31:14:23:d4:0f:c9:8f:8f: c8:b2:51:bf:44:b5:5e:49:25:d1:bc:06:f8:46:55: cf:a7:aa:ce:a0:1d:b2:ec:ce:ef:f8:d1:98:8f:61: 92:c8:f2:f2:60:a7:ee:af:a5:97:03:0b:68:8d:b7: b3:92:7c:64:5a:d9:a5:ab:e2:b4:bb:42:8d:c8:d5: c7:99:6d:fd:4e:25:64:48:56:d2:f5:84:3b:5f:cb: e3:ac:4e:0c:9f:b4:a3:45:05:93:83:fc:d1:ad:78: 19:f6:96:e5:cf:28:48:af:4c:64:c8:ed:7b:7c:1a: fe:87:05:98:a6:e5:16:4c:c0:53:af:9e:ab:7f:f2: fc:f7:64:38:18:3c:96:9d:3d:ce:cc:3c:9c:a7:f7: 0a:2d:e6:d1:cd:a2:85:4c:b1:06:58:27:f2:ce:2b: 19:03:c8:e5:5e:f6:ed:52:48:19:cf:e3:77:8f:9c: a1:29:89:66:bb:de:03:72:65:c1:24:0e:f0:94:98: 2f:cd:3b:c3:f4:c9:46:9b:83:41:ee:8f:f7:f6:2f: bb:dc:52:95:6f:cf:db:6e:dd:5b:b3:eb:aa:91:84: f5:d5:09:86:c8:e2:14:03:04:86:e5:a6:2b:c4:33: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0C:E5:9A:08:55:D2:A7:2F:86:6A:AB:81:0A:11:09:09:69:B0:79 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5b:67:6c:09:cb:3d:c7:fb:30:9b:f4:d5:b2:5f:ff:30:21: 80:5d:7f:ac:d4:c7:52:ed:1c:af:85:c9:d4:05:a3:59:c1:cd: b1:c7:00:a0:f6:84:5c:2a:7a:63:90:4b:dc:b1:7f:65:02:a2: 84:fe:c0:ec:e7:2a:74:4b:9c:c0:4b:a1:76:ce:2e:9f:0b:74: 1e:29:9a:cc:f6:46:ea:c7:a0:b3:3c:55:6a:93:fd:d4:a5:d0: 5f:28:c7:fe:43:81:c6:0b:78:52:88:da:45:46:04:23:26:0b: be:89:e9:33:ad:cf:96:f7:f3:53:58:9e:79:e1:04:11:15:85: 3f:78:b1:c7:de:7d:ac:0e:37:51:b1:08:3d:63:45:68:d2:63: 49:e4:fd:94:63:21:65:ef:06:96:7e:6d:5a:83:a2:db:3b:74: dd:2a:39:dc:78:cf:d8:dd:ad:9f:d9:b0:95:e9:32:8f:f0:64: 9a:e5:86:8b:eb:a2:22:b8:f0:3a:b9:13:61:65:f9:cc:40:21: db:70:b2:05:9d:6b:09:e1:54:12:68:2f:06:3b:a4:0e:7a:e0: 52:56:0b:88:36:cd:7d:a7:b3:f8:11:6c:e7:0e:7e:c6:16:5a: be:15:55:76:0e:f0:cf:c8:5e:a3:59:6c:2e:ac:b3:ac:0d:5d: 1d:11:43:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwNTE0MjA1NzI3WhcNMjUwNTIxMjA1NzI3WjAYMRYwFAYD VQQDEw02ODI1MDNiOC1jZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/Hk2X8F8VlNDmczvVWxGKGRRlmtMRQj1A/Jj4/IslG/RLVeSSXRvAb4RlXP p6rOoB2y7M7v+NGYj2GSyPLyYKfur6WXAwtojbezknxkWtmlq+K0u0KNyNXHmW39 TiVkSFbS9YQ7X8vjrE4Mn7SjRQWTg/zRrXgZ9pblzyhIr0xkyO17fBr+hwWYpuUW TMBTr56rf/L892Q4GDyWnT3OzDycp/cKLebRzaKFTLEGWCfyzisZA8jlXvbtUkgZ z+N3j5yhKYlmu94DcmXBJA7wlJgvzTvD9MlGm4NB7o/39i+73FKVb8/bbt1bs+uq kYT11QmGyOIUAwSG5aYrxDMs0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMM5ZoI VdKnL4Zqq4EKEQkJabB5MB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkW2dsCcs9x/swm/TVsl//MCGAXX+s1MdS7RyvhcnUBaNZwc2xxwCg 9oRcKnpjkEvcsX9lAqKE/sDs5yp0S5zAS6F2zi6fC3QeKZrM9kbqx6CzPFVqk/3U pdBfKMf+Q4HGC3hSiNpFRgQjJgu+iekzrc+W9/NTWJ554QQRFYU/eLHH3n2sDjdR sQg9Y0Vo0mNJ5P2UYyFl7waWfm1ag6LbO3TdKjnceM/Y3a2f2bCV6TKP8GSa5YaL 66IiuPA6uRNhZfnMQCHbcLIFnWsJ4VQSaC8GO6QOeuBSVguINs19p7P4EWznDn7G Flq+FVV2DvDPyF6jWWwurLOsDV0dEUP9 -----END CERTIFICATE-----Generated at Fri May 16 06:20:45 2025 by rpki-client