$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: DTfwn0H1NFGQ1gWLTMAuufb67kHZUxkyERnJ5JrE2cE= Subject key identifier: B6:C7:6C:F9:80:4A:20:C5:3B:5B:97:B0:87:BC:3E:4C:7D:B8:94:FB Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 011A Signing time: Sat 05 Jul 2025 05:04:54 +0000 Manifest this update: Sat 05 Jul 2025 05:04:53 +0000 Manifest next update: Sat 12 Jul 2025 05:04:53 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: tnqXrtKmVAWZnLeq0SnCq1vT2Ly8kH9mkFdhqQ77/7s=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Jul 5 05:04:53 2025 GMT Not After : Jul 12 05:04:53 2025 GMT Subject: CN=6868b276-6482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:22:26:34:3a:89:f4:62:26:90:11:75:97: 59:5e:61:a7:bd:e0:13:a8:b3:e4:f3:e3:5f:82:8d: 78:15:df:a7:e8:7a:a4:95:69:cf:8e:cf:d9:db:89: 53:c4:3a:b4:e0:13:84:28:56:9b:09:3b:c1:4e:8e: 45:c4:82:49:89:29:9e:1f:e7:90:c6:d4:37:3a:c1: c1:21:70:23:3b:4f:1a:39:4d:62:1b:6e:1e:a0:11: bc:c3:46:ed:b5:7a:d3:c6:b6:bf:67:fd:9c:0c:ab: 9e:cb:e4:e8:0c:df:3c:6d:da:6b:47:b3:45:0d:19: e7:af:53:de:2c:00:1c:31:6c:a5:0f:72:d4:16:0c: 26:13:88:74:7b:03:3b:f5:fa:c1:e9:e0:f9:44:a8: bb:b6:1c:90:d0:e3:03:c5:5c:4c:f3:a4:60:10:f0: 51:98:14:95:9b:1f:2b:41:33:e0:5c:0a:0a:62:fc: 31:a6:66:20:66:f5:3a:b9:b7:18:ec:3f:d0:af:75: 40:03:fc:a1:33:ca:af:6c:e0:08:1e:d9:21:61:97: 42:b6:fa:92:e1:3a:48:aa:99:4a:34:20:69:48:31: 8e:09:a2:7c:be:17:1f:fe:59:6a:6d:aa:db:17:58: c2:55:27:62:8d:50:5a:96:b5:06:29:1d:5e:33:a6: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:6C:F9:80:4A:20:C5:3B:5B:97:B0:87:BC:3E:4C:7D:B8:94:FB X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:11:99:54:0b:ce:6b:e8:a3:69:44:68:ec:68:60:39:fe:70: 0c:78:6c:19:2a:02:67:0c:78:12:db:bd:19:85:01:25:31:5a: f5:65:d5:95:36:d9:fb:99:db:ae:50:46:75:22:d5:f2:f1:8c: 32:f1:d2:10:91:71:9d:08:3c:f3:87:42:df:12:32:6f:3a:8b: bd:57:35:8a:61:b1:ff:f7:15:dd:15:7f:f5:70:ec:3d:b5:07: bd:3c:2b:9a:e0:2e:5b:40:0d:e3:ce:c3:b6:3b:d0:1f:f6:3f: 04:aa:1b:0e:c4:69:8c:34:63:1a:1b:26:20:51:42:3d:82:3d: 7c:05:47:fb:39:8d:f7:ec:a2:24:89:a9:a5:fd:3a:a5:d6:a8: 2b:e4:e7:a3:80:c7:1d:bd:46:ed:8f:2c:2d:40:34:78:c5:3c: e2:50:d1:39:fa:85:ec:92:d1:d0:63:99:ea:68:95:a9:39:dd: f2:a2:dc:11:9c:88:4a:8f:34:eb:89:e4:ff:52:9c:71:ba:eb: 62:7e:e0:51:e9:ac:6b:e3:32:46:5d:e9:02:41:45:db:4a:20: 7b:10:19:a5:6e:96:ae:62:f6:b8:3c:c0:98:b2:36:e2:64:92: e6:e6:82:60:02:d5:b7:d8:d0:b1:68:5d:cd:30:f0:80:b5:67: 96:0a:05:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNzA1MDUwNDUzWhcNMjUwNzEyMDUwNDUzWjAYMRYwFAYD VQQDEw02ODY4YjI3Ni02NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzEiJjQ6ifRiJpARdZdZXmGnveATqLPk8+Nfgo14Fd+n6HqklWnPjs/Z24lT xDq04BOEKFabCTvBTo5FxIJJiSmeH+eQxtQ3OsHBIXAjO08aOU1iG24eoBG8w0bt tXrTxra/Z/2cDKuey+ToDN88bdprR7NFDRnnr1PeLAAcMWylD3LUFgwmE4h0ewM7 9frB6eD5RKi7thyQ0OMDxVxM86RgEPBRmBSVmx8rQTPgXAoKYvwxpmYgZvU6ubcY 7D/Qr3VAA/yhM8qvbOAIHtkhYZdCtvqS4TpIqplKNCBpSDGOCaJ8vhcf/llqbarb F1jCVSdijVBalrUGKR1eM6aLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbHbPmA SiDFO1uXsIe8Pkx9uJT7MB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGEZlUC85r6KNpRGjsaGA5/nAMeGwZKgJnDHgS270ZhQElMVr1ZdWV Ntn7mduuUEZ1ItXy8Ywy8dIQkXGdCDzzh0LfEjJvOou9VzWKYbH/9xXdFX/1cOw9 tQe9PCua4C5bQA3jzsO2O9Af9j8EqhsOxGmMNGMaGyYgUUI9gj18BUf7OY337KIk iaml/Tql1qgr5OejgMcdvUbtjywtQDR4xTziUNE5+oXsktHQY5nqaJWpOd3yotwR nIhKjzTrieT/UpxxuutifuBR6axr4zJGXekCQUXbSiB7EBmlbpauYva4PMCYsjbi ZJLm5oJgAtW32NCxaF3NMPCAtWeWCgUr -----END CERTIFICATE-----Generated at Sat Jul 5 18:50:35 2025 by rpki-client