$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: +PsvSSLB1mwgDATPKOY537hJ8Q99IEaEe8IQtgzH37c= Subject key identifier: 3F:3C:27:2A:2D:66:F1:DF:D0:16:11:B0:4E:0C:52:D9:ED:C0:F0:54 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 0349 Signing time: Sun 11 May 2025 00:34:30 +0000 Manifest this update: Sun 11 May 2025 00:34:29 +0000 Manifest next update: Sun 18 May 2025 00:34:29 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: ofLF6mVQuH7EN2j5LSw+FcMwBKrWwcmkVITX4y8+0W4=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: May 11 00:34:29 2025 GMT Not After : May 18 00:34:29 2025 GMT Subject: CN=681ff095-cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:03:17:99:2c:c2:2a:fc:95:06:8d:4b:0f: 09:61:8d:86:84:c6:ac:43:ed:3f:38:ff:7c:d7:74: 07:76:1c:37:17:42:ae:cb:6f:48:ac:eb:c2:66:5a: fb:ef:d4:31:3a:11:cc:2e:4a:27:69:a4:b0:33:6a: 29:a4:3b:89:a6:87:db:3e:01:4e:46:04:8c:b8:6d: 1d:bb:52:f2:c1:d6:a9:12:93:86:6a:e1:5a:77:05: b1:1c:ea:8d:c1:e4:a7:85:da:9a:70:ec:42:87:f2: 04:c2:71:97:f1:1e:48:ed:38:c2:5a:c9:90:d5:d4: b7:a9:64:5d:1c:81:a3:06:75:6b:88:8f:bd:5a:ca: e6:00:41:25:94:cb:5e:88:ea:d5:f3:00:10:f4:7c: f3:89:72:bd:51:00:ce:b5:83:c6:62:20:d2:52:ca: b4:80:f2:11:04:c3:af:57:47:2e:53:87:bc:8e:cb: a7:d7:a5:c5:a2:97:b2:7e:66:ed:a1:5a:bb:82:78: e6:2b:ed:a7:43:8d:ba:9e:d3:8f:cd:c8:ed:34:f1: 2d:4d:92:67:c4:15:58:dc:da:ef:66:db:7f:3a:83: 70:46:ba:b0:53:bd:e9:1d:a2:c3:34:6a:c0:63:89: fa:6c:0a:f2:f5:ee:dc:78:87:fc:93:ca:a3:e9:81: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:27:2A:2D:66:F1:DF:D0:16:11:B0:4E:0C:52:D9:ED:C0:F0:54 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:52:42:1d:39:d4:cb:ff:34:3f:b1:a6:11:2e:f2:87:1f:31: a5:b8:94:bf:93:08:6c:b6:fc:0b:b9:8c:5f:5f:ec:0b:ca:87: 1a:f6:52:3f:48:23:11:e8:d3:f1:10:29:2c:d8:8f:bd:30:ef: 04:55:95:ef:bc:56:29:dd:ed:e9:7f:36:32:1c:f3:c2:65:6a: b9:a3:30:17:de:9a:60:60:89:29:7e:76:da:83:01:7e:54:46: 11:09:7e:3a:34:31:34:c3:89:9b:21:a8:09:50:d0:60:55:54: d5:09:8f:96:56:45:f6:94:45:17:fe:89:64:76:ea:3b:a9:d3: af:85:f6:3c:9a:22:a9:ec:f6:e0:35:aa:38:bd:3d:f3:59:d3: ed:28:9b:22:20:25:4a:5d:39:96:d4:93:75:72:6d:23:a7:8c: 6f:5f:d3:fc:95:c2:8a:33:29:c9:16:e2:75:c2:bf:e0:1a:84: c8:e4:7f:5c:9f:72:b5:66:fa:c4:0d:c4:88:bb:2f:36:1c:81: 0b:5e:ad:51:2c:a4:a2:0e:86:e6:b6:b4:da:b8:60:23:07:32: 67:aa:5c:dd:c1:57:66:26:98:7b:7a:21:34:06:4c:be:a5:b3: b7:7a:6f:69:75:18:af:f5:4f:67:c4:6e:8a:c9:bf:06:00:cb: c1:9e:d5:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwNTExMDAzNDI5WhcNMjUwNTE4MDAzNDI5WjAYMRYwFAYD VQQDEw02ODFmZjA5NS1jZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvooDF5kswir8lQaNSw8JYY2GhMasQ+0/OP9813QHdhw3F0Kuy29IrOvCZlr7 79QxOhHMLkonaaSwM2oppDuJpofbPgFORgSMuG0du1LywdapEpOGauFadwWxHOqN weSnhdqacOxCh/IEwnGX8R5I7TjCWsmQ1dS3qWRdHIGjBnVriI+9WsrmAEEllMte iOrV8wAQ9HzziXK9UQDOtYPGYiDSUsq0gPIRBMOvV0cuU4e8jsun16XFopeyfmbt oVq7gnjmK+2nQ426ntOPzcjtNPEtTZJnxBVY3NrvZtt/OoNwRrqwU73pHaLDNGrA Y4n6bAry9e7ceIf8k8qj6YHbXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD88Jyot ZvHf0BYRsE4MUtntwPBUMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUkIdOdTL/zQ/saYRLvKHHzGluJS/kwhstvwLuYxfX+wLyoca9lI/ SCMR6NPxECks2I+9MO8EVZXvvFYp3e3pfzYyHPPCZWq5ozAX3ppgYIkpfnbagwF+ VEYRCX46NDE0w4mbIagJUNBgVVTVCY+WVkX2lEUX/olkduo7qdOvhfY8miKp7Pbg Nao4vT3zWdPtKJsiICVKXTmW1JN1cm0jp4xvX9P8lcKKMynJFuJ1wr/gGoTI5H9c n3K1ZvrEDcSIuy82HIELXq1RLKSiDobmtrTauGAjBzJnqlzdwVdmJph7eiE0Bky+ pbO3em9pdRiv9U9nxG6Kyb8GAMvBntVW -----END CERTIFICATE-----Generated at Mon May 12 07:01:20 2025 by rpki-client