$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: hm9TTuiXgTKSpl6QRz0XKXw9jGJSDJkoCadr68hyJpk= Subject key identifier: 00:1A:50:01:CD:20:04:D6:62:B2:9C:99:2C:72:64:70:F2:1E:60:34 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 014C Signing time: Tue 13 May 2025 03:42:06 +0000 Manifest this update: Tue 13 May 2025 03:42:05 +0000 Manifest next update: Tue 20 May 2025 03:42:05 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: 6lR0t0HPpk5kTtcih21ppoz0qjLgBEX5fO1iWLyQH5w=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: May 13 03:42:05 2025 GMT Not After : May 20 03:42:05 2025 GMT Subject: CN=6822bf8d-0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:6a:58:af:be:ee:61:67:75:08:51:a8:ce: 54:b2:4f:22:38:04:5e:6d:f6:99:aa:d1:c7:2b:3c: 6b:e5:6d:00:65:9c:d0:e6:23:fb:a0:b5:9a:97:64: 01:52:96:c1:81:72:db:bf:7a:9a:90:2b:f7:98:c6: 93:9f:3f:d4:8b:4a:1f:42:87:bf:df:37:61:41:f5: c4:d3:76:35:8c:1b:f3:bf:f5:22:c8:16:41:f2:50: 9b:03:1a:68:5b:45:c1:56:3a:5f:b3:f6:11:42:47: c4:e8:98:72:08:a2:cc:67:cf:96:17:cd:c2:e5:2c: 09:d8:f6:66:bc:16:b0:af:0f:17:4b:c8:af:fc:45: f5:f3:53:fc:8e:4f:2d:4b:76:ec:dc:92:9c:67:ea: 75:9f:bb:fc:63:12:6a:bf:e4:13:a6:d4:ee:ee:88: d7:4f:c6:b0:d3:6f:70:09:64:6b:d6:7f:94:e0:38: 87:98:f0:9e:df:56:f4:3e:21:27:e8:60:b2:b7:8b: 5a:c6:5f:d2:a0:2c:5e:c1:fe:e8:89:b3:68:52:5d: b6:8b:67:78:d3:d7:7d:8c:76:e2:95:f2:b7:2d:c1: 0e:21:71:fd:e0:d7:0e:ae:79:b0:75:ff:0b:bb:f7: 36:ee:21:6f:ac:0e:1d:1f:da:82:d0:29:a0:99:a4: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1A:50:01:CD:20:04:D6:62:B2:9C:99:2C:72:64:70:F2:1E:60:34 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c3:87:dc:b6:f6:66:6a:29:db:68:06:c9:29:a5:4f:7c:f7: 79:0d:d3:cc:22:16:b2:8a:83:3c:24:ac:a4:98:bd:4a:84:6f: 46:4a:c8:73:6d:78:86:94:92:5e:06:3f:b0:8b:98:ad:5b:fa: fa:e6:c9:02:b2:04:78:82:ce:ef:a0:0e:d1:6d:46:47:ca:3e: 24:ee:08:a0:17:61:6d:c9:79:2a:df:90:49:5a:0e:fd:30:5d: 50:d6:b6:2c:d8:f7:3c:47:6d:65:40:77:e4:c0:dd:90:bd:e4: 70:99:d6:23:4a:72:fa:d9:78:38:5d:3c:63:85:0f:48:f7:61: ae:5b:4f:d7:b5:76:7d:7a:9b:7e:e2:fc:78:33:75:f8:d2:18: dd:21:bf:88:85:f3:19:09:b0:72:2d:e5:d7:34:3d:d2:b6:ba: 0f:47:94:e1:c1:91:ef:8f:f7:60:9b:91:65:2c:83:9a:09:7b: eb:3d:53:c2:83:c7:21:d8:bd:33:92:33:1b:a7:28:30:46:5f: 3b:4f:de:85:eb:81:12:f4:d8:98:85:14:49:96:cb:97:8f:a2: 25:08:59:6d:57:3f:c8:8b:e7:0a:f2:89:fc:75:12:80:a5:e0: 04:dc:94:1a:05:1a:9f:1f:7f:fd:ff:6f:ab:a9:72:83:76:0e: cc:be:56:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwNTEzMDM0MjA1WhcNMjUwNTIwMDM0MjA1WjAYMRYwFAYD VQQDEw02ODIyYmY4ZC0wYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA125qWK++7mFndQhRqM5Usk8iOARebfaZqtHHKzxr5W0AZZzQ5iP7oLWal2QB UpbBgXLbv3qakCv3mMaTnz/Ui0ofQoe/3zdhQfXE03Y1jBvzv/UiyBZB8lCbAxpo W0XBVjpfs/YRQkfE6JhyCKLMZ8+WF83C5SwJ2PZmvBawrw8XS8iv/EX181P8jk8t S3bs3JKcZ+p1n7v8YxJqv+QTptTu7ojXT8aw029wCWRr1n+U4DiHmPCe31b0PiEn 6GCyt4taxl/SoCxewf7oibNoUl22i2d409d9jHbilfK3LcEOIXH94NcOrnmwdf8L u/c27iFvrA4dH9qC0CmgmaRrSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAaUAHN IATWYrKcmSxyZHDyHmA0MB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkw4fctvZmainbaAbJKaVPfPd5DdPMIhayioM8JKykmL1KhG9GSshz bXiGlJJeBj+wi5itW/r65skCsgR4gs7voA7RbUZHyj4k7gigF2FtyXkq35BJWg79 MF1Q1rYs2Pc8R21lQHfkwN2QveRwmdYjSnL62Xg4XTxjhQ9I92GuW0/XtXZ9ept+ 4vx4M3X40hjdIb+IhfMZCbByLeXXND3StroPR5ThwZHvj/dgm5FlLIOaCXvrPVPC g8ch2L0zkjMbpygwRl87T96F64ES9NiYhRRJlsuXj6IlCFltVz/Ii+cK8on8dRKA peAE3JQaBRqfH3/9/2+rqXKDdg7Mvlak -----END CERTIFICATE-----Generated at Wed May 14 16:05:01 2025 by rpki-client